![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa
File: 323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa (raw, json)
Hash identifier: WQur+vAlkLFEZCK7Guvt9x4M9Ueffi8AI5DrsHujEus=
Subject key identifier: 03:E0:C8:21:CD:3A:97:07:83:EB:CE:19:8C:4D:16:53:C5:5C:98:19
Certificate issuer: /CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Certificate serial: 4EACC4826E7A63ABC8F6F5208682C83CCF52D184
Authority key identifier: 5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa
Signing time: Fri 05 Jan 2024 20:10:34 +0000
ROA not before: Fri 05 Jan 2024 20:05:34 +0000
ROA not after: Fri 03 Jan 2025 20:10:34 +0000
asID: 268786
IP address blocks: 2804:5aa4:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ac:c4:82:6e:7a:63:ab:c8:f6:f5:20:86:82:c8:3c:cf:52:d1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Validity
Not Before: Jan 5 20:05:34 2024 GMT
Not After : Jan 3 20:10:34 2025 GMT
Subject: CN=03E0C821CD3A970783EBCE198C4D1653C55C9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:50:9c:f4:81:14:2f:53:e9:e8:d1:35:df:
dc:74:9f:b2:b0:22:c7:ee:f0:d0:1c:d3:9c:52:12:
3c:6e:58:b0:f2:00:d7:8b:6a:16:1e:ef:bf:c2:cf:
a5:6d:a7:07:be:d4:99:4c:32:6a:71:2e:ca:f3:d1:
8b:56:8f:db:26:eb:7e:30:dd:0d:a0:c2:a8:7d:b6:
eb:f4:33:3e:93:c5:a3:2e:d9:e1:45:10:ae:74:17:
7e:ae:a5:64:a1:bc:47:c2:09:f2:cb:d0:0f:0f:8e:
a3:9d:a5:e0:d4:f6:58:88:fe:82:1e:14:9f:87:51:
be:04:75:f5:ea:fb:ce:a0:38:e3:cb:83:d8:db:fa:
47:cb:4e:b5:92:f8:41:0b:73:0c:06:ef:bd:e1:4f:
a9:28:3e:6a:7e:a8:60:0c:08:e5:5e:e5:f3:aa:0f:
ea:5d:f1:b4:74:3e:ff:76:d0:9d:12:5a:b0:0f:29:
aa:c7:68:50:bc:86:55:38:ed:43:1c:3a:96:d1:ac:
8e:27:ae:0f:85:31:3f:e4:72:96:3b:32:3d:04:ec:
ca:ab:97:43:24:de:c3:45:45:09:84:c5:18:85:e2:
50:08:61:b4:33:a6:34:60:40:c0:6f:7d:0a:b8:e6:
5f:a6:02:22:46:83:a9:a0:33:37:23:21:d6:e1:4e:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:C8:21:CD:3A:97:07:83:EB:CE:19:8C:4D:16:53:C5:5C:98:19
X509v3 Authority Key Identifier:
keyid:5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5aa4:8000::/34
Signature Algorithm: sha256WithRSAEncryption
69:59:e2:90:b3:23:79:cd:38:5f:bd:6d:b3:3e:56:de:ad:49:
fc:e9:50:2f:be:fb:3f:05:51:55:bd:8e:11:e7:d4:b7:ad:0c:
83:55:dc:6a:39:6d:9f:d8:49:65:33:3d:1a:eb:7c:c0:f9:b3:
f6:aa:4c:47:70:81:17:25:b0:bb:a3:10:60:96:9b:51:67:f3:
21:ec:2d:cf:a3:90:35:9a:6f:a8:b7:1a:5b:11:07:40:74:60:
01:ce:60:d9:7b:bd:68:35:8e:08:69:c6:23:1b:94:9f:64:51:
11:25:ec:ce:23:a2:11:a3:a3:fe:32:14:94:b7:fa:4a:47:04:
25:f3:3e:17:5b:de:b5:cd:3c:2e:71:0a:e5:61:58:92:30:f6:
27:4d:c1:06:87:fe:9e:f0:55:e0:be:10:bb:d8:95:dc:ad:dc:
f8:de:fb:b0:50:44:c5:af:06:50:f5:00:0a:1e:e9:7a:a0:19:
bb:00:fb:08:de:7c:4e:ee:2e:a3:bf:47:54:92:c2:83:27:9b:
05:ed:5c:0a:a8:47:f5:61:eb:77:a0:f8:e2:cb:33:27:22:9d:
e3:bc:e0:73:da:76:d3:22:73:a7:fe:25:4a:2f:c1:0f:30:9c:
22:4b:8a:5d:d5:ba:85:f5:73:8c:f0:58:d7:99:03:81:ad:9e:
0a:fd:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:49 2025 by rpki-client