![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a633030303a3a2f33342d3334203d3e20323638373836.roa
File: 323830343a356161343a633030303a3a2f33342d3334203d3e20323638373836.roa (raw, json)
Hash identifier: e/RQmPqfczbTEgIc6y0FjLA9mOkVUf8GAZD9GuKE/KU=
Subject key identifier: 1F:B0:E8:90:3A:D7:4B:FA:D7:3C:C0:0A:0A:27:EF:1B:61:65:44:5C
Certificate issuer: /CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Certificate serial: 7FD22AE85BD3C6422A695FEE00B9C345F6B96F1A
Authority key identifier: 5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a633030303a3a2f33342d3334203d3e20323638373836.roa
Signing time: Fri 05 Jan 2024 20:10:33 +0000
ROA not before: Fri 05 Jan 2024 20:05:33 +0000
ROA not after: Fri 03 Jan 2025 20:10:33 +0000
asID: 268786
IP address blocks: 2804:5aa4:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d2:2a:e8:5b:d3:c6:42:2a:69:5f:ee:00:b9:c3:45:f6:b9:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Validity
Not Before: Jan 5 20:05:33 2024 GMT
Not After : Jan 3 20:10:33 2025 GMT
Subject: CN=1FB0E8903AD74BFAD73CC00A0A27EF1B6165445C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c2:d4:e9:5f:f5:e4:5d:6c:ea:e6:3b:48:3b:
40:9c:92:2e:b5:5c:be:ae:cd:64:ac:f9:59:1d:27:
42:4c:99:69:98:42:73:f4:d1:44:5a:85:32:59:b6:
80:c7:39:94:1b:bb:40:bc:1c:ce:c2:f6:b5:ad:e1:
81:ed:0f:4f:84:6b:bf:7f:24:07:6b:34:03:2a:91:
95:6d:ba:fd:c6:67:e0:1a:47:71:68:c7:45:6b:6a:
79:b8:b7:9a:53:32:7f:6d:e6:07:57:0b:c3:ca:30:
f3:c1:7c:08:94:cf:c9:b1:f9:27:b1:d5:9b:17:d4:
c2:e2:ff:c5:08:06:e5:39:33:9b:bc:84:25:10:c1:
29:a3:13:f2:04:4a:2d:de:33:ac:05:89:30:f4:7c:
29:db:2a:95:e6:f0:77:69:ea:1c:b3:bf:38:f4:54:
de:73:84:10:11:ee:64:8e:54:96:a2:7b:3f:fe:c6:
ec:72:5e:15:d6:45:80:53:82:a7:e2:17:df:7b:b9:
e9:aa:3f:f0:05:c1:d2:c0:7e:b9:1a:7a:69:44:17:
6a:68:09:a7:fb:dd:36:ec:e0:20:7a:b8:34:a5:27:
53:77:c8:50:7c:f1:7c:6b:1a:a5:79:c0:38:24:be:
c8:62:68:96:ee:74:6a:fb:98:e6:1f:40:42:85:5b:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:E8:90:3A:D7:4B:FA:D7:3C:C0:0A:0A:27:EF:1B:61:65:44:5C
X509v3 Authority Key Identifier:
keyid:5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a633030303a3a2f33342d3334203d3e20323638373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5aa4:c000::/34
Signature Algorithm: sha256WithRSAEncryption
58:ee:44:ac:dc:9b:c1:2b:2b:67:ba:37:55:1a:1b:58:72:10:
d7:dd:12:e4:c4:b2:6a:f7:d6:72:c7:98:17:6d:a7:23:40:79:
b1:17:7b:75:14:13:9c:62:30:7f:7b:9f:fc:b6:d4:72:3a:6f:
a9:6d:4a:d2:8b:1e:59:df:e0:5f:ea:2e:74:10:ab:74:8c:99:
1f:da:51:f0:35:17:d7:78:0c:bc:b2:53:b3:8c:fe:3c:63:47:
11:23:af:95:37:29:33:ef:72:87:1f:e8:7b:0a:b9:a6:d2:69:
ae:34:ad:c8:5c:38:b5:a8:e3:7e:4b:27:b6:0c:61:34:fe:e1:
21:ee:57:7b:ce:ba:e7:9e:a6:0c:73:1b:14:cb:ed:35:76:e0:
67:1f:68:91:a8:0b:2c:e2:66:ef:10:d1:b0:06:1a:bd:ea:fe:
70:71:2a:e4:45:8b:bd:2a:f4:de:d0:bf:3b:92:70:66:a9:9c:
67:2c:bb:9e:d1:13:d7:d0:06:de:67:eb:64:93:fb:55:5e:a3:
0d:28:91:24:f1:b5:0d:e0:18:3a:a3:f4:e4:46:4a:f4:d1:bc:
53:11:d8:96:7c:c7:ab:e9:ef:f2:0b:06:e9:f1:99:b5:0b:55:
bf:42:b4:28:7d:ea:ca:31:c1:83:9d:d3:23:66:6f:17:8f:20:
99:69:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:55 2025 by rpki-client