![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031383a3a2f34382d3438203d3e203238333036.roa
File: 323830343a33343a323031383a3a2f34382d3438203d3e203238333036.roa (raw, json)
Hash identifier: bmi2CtXQYMRPWhTF6l0dhEr289Ahbto2Yoq5iPC+9PI=
Subject key identifier: 89:BC:8C:1B:57:FB:AD:A0:76:1B:7D:C1:99:A2:89:EA:E5:41:4F:06
Certificate issuer: /CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Certificate serial: 10B2180890B1F5AA3B171E39BEC547BA9EDBDF1A
Authority key identifier: DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031383a3a2f34382d3438203d3e203238333036.roa
Signing time: Thu 21 Sep 2023 19:38:07 +0000
ROA not before: Thu 21 Sep 2023 19:33:07 +0000
ROA not after: Thu 19 Sep 2024 19:38:07 +0000
asID: 28306
IP address blocks: 2804:34:2018::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b2:18:08:90:b1:f5:aa:3b:17:1e:39:be:c5:47:ba:9e:db:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Validity
Not Before: Sep 21 19:33:07 2023 GMT
Not After : Sep 19 19:38:07 2024 GMT
Subject: CN=89BC8C1B57FBADA0761B7DC199A289EAE5414F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:44:bb:31:ad:7c:f4:8c:dc:8c:9d:00:0f:
63:3a:77:cb:04:9c:3f:56:37:31:19:fc:2d:6b:3e:
b0:8f:1a:f1:e5:62:a8:df:8b:c8:04:06:89:f2:44:
d5:b4:89:16:a4:44:09:15:89:5a:8c:9f:5e:10:80:
24:67:62:f0:cf:ea:16:2e:6b:6a:fa:fb:c5:40:1d:
cb:87:6c:dd:28:38:cc:5f:23:54:88:4d:63:22:f6:
7e:ad:02:46:73:ce:0f:de:a4:84:66:1d:2e:1b:1d:
2d:7f:20:7e:c1:22:70:9c:eb:a9:f9:b9:89:e0:c6:
03:ef:1d:9e:27:b3:cb:fa:29:00:fa:a4:37:da:52:
17:c5:61:7f:05:11:d2:33:37:bb:b6:5d:b4:08:7b:
e0:d2:87:77:e2:e4:78:41:27:9c:cc:63:4c:80:e7:
d8:87:74:5d:06:c7:bb:4b:19:5d:b1:e4:56:14:59:
60:f7:3f:3b:fe:b8:e6:31:fe:61:b8:c2:83:d0:cf:
32:dd:bd:bf:73:53:a0:91:a5:d1:e1:0b:6f:dc:be:
0d:b1:bc:75:4a:f4:6c:40:3f:24:46:b5:e3:fc:17:
b6:72:3c:f2:b9:8e:55:82:43:92:9f:45:6c:34:db:
d7:b5:39:f6:20:14:ce:4f:76:58:fc:2c:0b:61:ad:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:8C:1B:57:FB:AD:A0:76:1B:7D:C1:99:A2:89:EA:E5:41:4F:06
X509v3 Authority Key Identifier:
keyid:DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323031383a3a2f34382d3438203d3e203238333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34:2018::/48
Signature Algorithm: sha256WithRSAEncryption
19:20:d3:f0:fd:b5:91:9e:6f:78:88:59:48:5d:5d:54:18:be:
2d:12:77:93:80:6a:ad:17:0d:9f:7b:65:7f:d4:ce:b6:60:cb:
84:f0:13:2b:41:6d:93:1f:28:18:26:de:f4:94:8a:19:a9:a1:
83:f4:54:cf:f3:7c:5e:06:1d:4e:7b:44:a7:6a:2f:af:5d:f3:
f3:d6:ba:8f:fd:af:4d:2d:a3:a2:42:a5:c1:d7:98:85:ae:1f:
ff:fe:07:b8:a2:e0:f2:b9:a4:7a:f8:69:e3:ef:71:6e:73:9d:
a2:60:59:5a:c8:5c:9b:5e:ae:bf:ee:05:28:3b:4f:23:f7:c6:
0b:3e:b3:2e:99:1b:c3:cb:97:fc:a5:bb:f6:99:d0:08:dd:c5:
7a:16:c2:4e:c2:91:91:ec:2d:15:84:5f:28:c5:a2:07:be:37:
44:6b:6e:99:20:6d:75:11:aa:57:93:36:a9:25:b7:04:22:01:
b1:10:a4:64:4f:87:aa:50:2a:d4:25:17:13:fc:e9:23:6b:7d:
aa:d2:85:ff:19:eb:77:e8:f0:7b:5c:95:29:14:34:a9:24:a1:
a8:e1:8c:89:3b:0f:fd:9e:9a:c2:11:8e:e2:a5:2a:48:3f:b9:
38:dd:df:aa:52:df:56:bb:3f:bf:db:3d:bc:c6:20:48:6b:01:
6a:9a:a5:b2
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUELIYCJCx9ao7Fx45vsVHup7b3xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxMTdERjZCQ0YzNjFGQTczQTgxRkRFQUU1QjZDQkM2
REQwNjQwRDAeFw0yMzA5MjExOTMzMDdaFw0yNDA5MTkxOTM4MDdaMDMxMTAvBgNV
BAMTKDg5QkM4QzFCNTdGQkFEQTA3NjFCN0RDMTk5QTI4OUVBRTU0MTRGMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyT0S7Ma189IzcjJ0AD2M6d8sE
nD9WNzEZ/C1rPrCPGvHlYqjfi8gEBonyRNW0iRakRAkViVqMn14QgCRnYvDP6hYu
a2r6+8VAHcuHbN0oOMxfI1SITWMi9n6tAkZzzg/epIRmHS4bHS1/IH7BInCc66n5
uYngxgPvHZ4ns8v6KQD6pDfaUhfFYX8FEdIzN7u2XbQIe+DSh3fi5HhBJ5zMY0yA
59iHdF0Gx7tLGV2x5FYUWWD3Pzv+uOYx/mG4woPQzzLdvb9zU6CRpdHhC2/cvg2x
vHVK9GxAPyRGteP8F7ZyPPK5jlWCQ5KfRWw029e1OfYgFM5Pdlj8LAthrTLnAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUibyMG1f7raB2G33BmaKJ6uVBTwYwHwYDVR0j
BBgwFoAU3hF99rzzYfpzqB/erltsvG3QZA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC9ERTExN0RGNkJDRjM2MUZBNzNBODFGREVBRTVCNkNCQzZERDA2NDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFMTE3REY2QkNGMzYxRkE3
M0E4MUZERUFFNUI2Q0JDNkREMDY0MEQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzIzODMwMzQzYTMzMzQzYTMyMzAzMTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzODMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEADQgGDANBgkqhkiG9w0BAQsFAAOCAQEA
GSDT8P21kZ5veIhZSF1dVBi+LRJ3k4BqrRcNn3tlf9TOtmDLhPATK0Ftkx8oGCbe
9JSKGamhg/RUz/N8XgYdTntEp2ovr13z89a6j/2vTS2jokKlwdeYha4f//4HuKLg
8rmkevhp4+9xbnOdomBZWshcm16uv+4FKDtPI/fGCz6zLpkbw8uX/KW79pnQCN3F
ehbCTsKRkewtFYRfKMWiB743RGtumSBtdRGqV5M2qSW3BCIBsRCkZE+HqlAq1CUX
E/zpI2t9qtKF/xnrd+jwe1yVKRQ0qSShqOGMiTsP/Z6awhGO4qUqSD+5ON3fqlLf
Vrs/v9s9vMYgSGsBapqlsg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:53 2025 by rpki-client