![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa
File: 323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa (raw, json)
Hash identifier: A/+Y7AHM8vNgfwzW2rkQ2oq+dYme1jxVYvv5rR58a7A=
Subject key identifier: DA:83:33:2D:1F:63:76:2D:5D:96:05:9F:90:E1:D7:5F:DF:95:97:E4
Certificate issuer: /CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
Certificate serial: 7C962EFCE89722FB0B9F8ACD292B4D596C4B7839
Authority key identifier: 4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa
Signing time: Sat 03 Feb 2024 15:58:11 +0000
ROA not before: Sat 03 Feb 2024 15:53:11 +0000
ROA not after: Sat 01 Feb 2025 15:58:11 +0000
asID: 262663
IP address blocks: 2804:71f8:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:96:2e:fc:e8:97:22:fb:0b:9f:8a:cd:29:2b:4d:59:6c:4b:78:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
Validity
Not Before: Feb 3 15:53:11 2024 GMT
Not After : Feb 1 15:58:11 2025 GMT
Subject: CN=DA83332D1F63762D5D96059F90E1D75FDF9597E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:5c:bd:c2:99:74:7c:9e:64:ed:f5:49:d2:
50:78:65:73:40:ac:c6:79:a4:50:fd:70:ce:49:fd:
e4:a7:9a:14:9f:ea:21:0e:4b:44:03:44:76:b9:c2:
8c:f7:1e:51:13:73:b2:ec:28:a7:6a:2f:04:56:da:
8b:19:86:43:01:6e:d6:02:1d:58:e9:bd:bf:80:86:
75:1a:1c:e1:75:b4:41:ed:25:29:db:02:b9:42:b3:
b6:1f:3d:45:22:6d:ad:13:57:60:61:42:9c:40:ec:
2d:3c:8a:fc:21:37:d4:14:f0:42:b5:36:44:dc:21:
b1:e8:37:fd:f2:04:82:81:4a:bb:2f:3b:31:62:02:
72:1e:ec:96:0e:51:43:dc:27:37:c6:1d:37:e6:32:
0a:ae:95:3c:1a:06:64:74:a8:37:5b:f4:2c:c4:98:
19:0e:a5:eb:d2:f5:2f:cb:ba:87:55:cd:3f:87:50:
eb:36:5e:be:f5:64:59:6f:e9:34:7c:0b:f1:c8:71:
f1:4e:6a:09:c9:14:b6:99:82:e7:f3:3f:d6:46:60:
5f:57:6f:f1:1e:a1:13:6f:ed:18:8a:a5:d3:c9:08:
b7:c1:59:cb:c6:0d:b4:19:00:ab:7f:11:13:a8:3d:
af:d8:8b:80:7c:49:b0:5f:68:78:80:ec:95:ca:ac:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:33:2D:1F:63:76:2D:5D:96:05:9F:90:E1:D7:5F:DF:95:97:E4
X509v3 Authority Key Identifier:
keyid:4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/323830343a373166383a383030303a3a2f33332d3333203d3e20323632363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:71f8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
63:7d:18:d3:b5:38:64:64:4a:d3:c8:ab:40:8c:63:cf:08:6c:
e0:b5:ef:dd:e1:55:69:19:b1:b5:55:c0:22:5d:dc:f2:f1:bf:
8c:cf:76:ab:fb:9a:08:14:7d:81:4a:9a:e4:0d:a0:34:0f:5b:
12:08:88:2d:1f:b1:fd:34:26:0a:c3:ad:b5:06:32:89:cf:8c:
95:49:60:44:c5:9b:2b:ef:66:24:61:21:6d:2f:14:66:84:bd:
ea:ba:53:e2:b0:3d:f6:63:5a:ba:b2:29:35:2d:83:7b:cc:eb:
02:c5:a0:0a:db:c6:9c:86:df:ae:f4:45:91:c5:5e:5d:a2:0d:
bf:b9:6c:03:ec:b8:90:f4:45:b7:a3:82:f1:54:d1:66:2f:24:
c0:ed:53:16:35:7c:73:94:19:bb:0a:04:7a:2e:db:6f:6f:be:
4f:be:6f:4c:66:bb:c2:b2:cc:e2:41:d1:fa:e4:b2:af:be:41:
2c:3d:54:63:18:6c:82:f6:62:65:cf:cf:8b:3a:f3:ff:97:05:
63:f4:b8:8c:5f:d9:b4:fb:30:42:50:8f:89:bb:cc:95:ef:c8:
8f:90:a5:d3:0f:25:21:6e:79:a2:14:2f:e8:2f:cb:7d:58:12:
b2:4f:5a:63:fc:e8:4e:6a:70:ba:af:2d:8e:b5:ab:7f:8f:50:
20:43:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:25 2025 by rpki-client