![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031313a3a2f34382d3438203d3e203238333036.roa
File: 323830343a33343a323031313a3a2f34382d3438203d3e203238333036.roa (raw, json)
Hash identifier: Zq5kApWLXdQettqM3FqmSkDq2H1298l5JTr8S/00DwA=
Subject key identifier: 8C:42:90:DA:53:4B:C4:18:7A:EE:D2:37:96:BD:20:98:E1:F2:67:41
Certificate issuer: /CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Certificate serial: 35A79756B9B9AF6F88FBFC2AEC08F0CC2AF5CC5B
Authority key identifier: DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031313a3a2f34382d3438203d3e203238333036.roa
Signing time: Thu 21 Sep 2023 19:37:58 +0000
ROA not before: Thu 21 Sep 2023 19:32:58 +0000
ROA not after: Thu 19 Sep 2024 19:37:58 +0000
asID: 28306
IP address blocks: 2804:34:2011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a7:97:56:b9:b9:af:6f:88:fb:fc:2a:ec:08:f0:cc:2a:f5:cc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Validity
Not Before: Sep 21 19:32:58 2023 GMT
Not After : Sep 19 19:37:58 2024 GMT
Subject: CN=8C4290DA534BC4187AEED23796BD2098E1F26741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:df:b9:49:2e:73:6c:ea:2f:88:88:83:19:
75:44:9a:7d:65:cb:c0:49:0b:ad:ef:04:a9:50:79:
bc:ac:e9:c9:2a:cd:d8:76:da:20:2e:cc:94:3f:9e:
ca:51:a2:7d:49:ce:1a:a7:dc:e2:34:97:37:64:07:
f2:20:3b:70:9b:c5:3c:aa:8d:81:a9:07:2f:6b:c7:
9c:ed:83:d0:cc:5b:70:7d:06:7b:4a:62:0f:d2:d4:
6c:1c:d1:b5:1a:6a:82:4e:c3:47:a6:30:31:c7:9b:
da:15:ec:e2:83:e5:8e:3f:58:a5:f6:0b:5a:ed:67:
57:cf:21:ae:f6:73:91:44:2b:1f:3e:e2:ae:67:ff:
45:fb:7b:3b:d0:1d:a7:02:1c:13:e7:01:85:3c:87:
de:f2:6c:8f:2b:c9:61:db:8a:8f:14:20:55:bd:4a:
7b:39:44:1a:24:45:07:7c:ee:2c:9f:1e:5d:dd:cd:
cc:c6:36:28:2a:ae:e3:0e:db:7d:e5:aa:ae:20:38:
72:c4:38:2f:5b:4f:8e:e8:73:0a:48:bd:0b:f0:21:
08:ec:18:ee:50:73:5e:76:5c:9d:12:f4:4c:48:6f:
21:c0:8c:2b:c4:6b:ab:ac:64:f8:c7:75:ee:f9:e8:
46:ad:19:3f:18:b3:ce:f5:1d:0b:b8:89:5e:ee:f0:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:90:DA:53:4B:C4:18:7A:EE:D2:37:96:BD:20:98:E1:F2:67:41
X509v3 Authority Key Identifier:
keyid:DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031313a3a2f34382d3438203d3e203238333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34:2011::/48
Signature Algorithm: sha256WithRSAEncryption
8b:fb:13:a5:8f:2f:af:15:d3:ad:2a:21:a3:ef:02:de:df:64:
c3:c9:65:c2:d6:3e:86:fe:1f:d8:13:6f:1d:1b:23:ff:19:55:
78:e3:83:df:ef:6a:09:57:62:a5:f0:52:24:a0:23:d4:61:bc:
2e:74:3d:5c:04:a0:15:e1:cf:1c:86:8d:63:ff:83:41:98:66:
6d:a2:e7:64:4e:3a:d6:2a:4c:eb:80:3a:86:8d:0b:28:2c:1c:
a0:de:28:e1:1d:bc:0a:39:c5:73:8f:41:8a:98:2c:ca:98:33:
8e:fe:b6:79:d3:46:2d:fd:cb:5d:4b:82:52:99:30:8d:67:29:
df:8f:82:dc:03:26:71:fc:b0:a5:f8:41:47:14:8a:d6:9c:a5:
f1:fc:72:9b:2a:69:e4:db:6b:a9:7a:c0:4e:b9:bb:9f:92:00:
db:70:d7:df:7d:9a:3c:23:92:cf:09:db:a2:46:5b:32:bc:62:
3d:6b:e1:cb:9f:43:8a:da:70:7f:47:ec:42:d0:7a:15:0e:54:
d4:28:fb:10:bf:c8:6c:ab:08:23:8d:a9:0b:82:6c:3e:78:1c:
58:41:a8:25:08:10:15:9d:ff:80:b4:75:ca:4a:f4:f3:ff:60:
d3:e4:6d:ef:3e:15:11:f6:29:71:dd:0a:c8:b5:f8:3e:d4:94:
43:a8:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:24 2025 by rpki-client