![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33362d3336203d3e20323635343936.roa
File: 323830343a333530383a343030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier: tGyPftYYV7l7IHYmc9I/wnyU3uFoudIp+8IgNRkKjXw=
Subject key identifier: D1:39:F9:38:08:81:1C:9A:5D:31:79:4A:84:41:91:14:58:55:B8:AD
Certificate issuer: /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial: 5FC842C834D42694E1E299B73B06CAA85C6CE685
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33362d3336203d3e20323635343936.roa
Signing time: Mon 03 Apr 2023 10:56:41 +0000
ROA not before: Mon 03 Apr 2023 10:51:41 +0000
ROA not after: Mon 01 Apr 2024 10:56:41 +0000
asID: 265496
IP address blocks: 2804:3508:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c8:42:c8:34:d4:26:94:e1:e2:99:b7:3b:06:ca:a8:5c:6c:e6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Validity
Not Before: Apr 3 10:51:41 2023 GMT
Not After : Apr 1 10:56:41 2024 GMT
Subject: CN=D139F93808811C9A5D31794A844191145855B8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:dc:87:bf:25:12:7b:a1:97:4f:75:60:5e:
f4:ed:a7:02:43:8b:0f:8c:e8:28:c5:8c:28:be:0d:
7d:04:e5:31:1c:ae:50:ef:4e:35:5a:e2:26:a8:55:
6e:87:a9:b9:b6:a8:5e:58:fd:9f:b6:13:87:de:30:
53:1b:fb:87:6f:70:2e:e8:a8:24:0e:18:e0:2a:69:
78:1a:24:25:52:a1:57:de:8d:1e:8f:36:6b:f4:52:
79:96:07:c9:93:fb:f4:bf:73:ff:02:c5:ec:2d:26:
21:28:b3:68:df:41:29:a3:fa:3d:c1:b4:87:e6:f5:
8c:dd:cd:ae:14:eb:4e:ba:bc:13:8f:f4:86:f6:e1:
06:50:d5:c8:37:de:81:5b:ce:16:98:10:f7:f4:eb:
aa:fd:38:e4:51:00:dc:63:2f:24:90:68:04:e8:c8:
fe:0e:51:e7:83:f4:28:d7:d2:2b:09:ac:66:f9:6c:
0a:a4:55:5a:1d:9e:bd:2f:92:3d:5f:9d:73:e6:94:
8d:59:bc:83:49:f9:a8:22:c4:ab:20:93:b3:92:9d:
90:00:96:5a:f3:33:96:fe:d9:49:a4:ac:ff:49:a2:
e9:6e:ca:8d:f9:cd:be:21:13:22:8a:5d:5b:5f:ad:
d5:e4:1f:ff:7b:a1:1e:66:32:03:9c:03:57:bf:58:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:F9:38:08:81:1C:9A:5D:31:79:4A:84:41:91:14:58:55:B8:AD
X509v3 Authority Key Identifier:
keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33362d3336203d3e20323635343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3508:4000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:2c:0e:b4:8b:02:70:5a:db:d1:11:cd:0b:eb:c8:47:95:b2:
6a:c1:86:84:bf:5b:05:9c:10:55:f4:80:af:9a:df:8b:f7:f2:
3a:43:dc:b0:73:a8:48:da:5f:19:71:2b:fc:03:22:30:05:52:
b0:93:06:13:de:c5:64:da:33:b9:b4:56:f7:5d:b3:23:2c:1c:
0e:a8:cb:4c:d5:b0:45:48:28:c3:0b:ae:83:29:a8:a0:df:1f:
ce:12:8f:eb:27:8e:f8:ed:df:1a:88:66:cf:f0:1e:a8:45:27:
f0:56:fc:76:ff:da:0d:bd:63:f3:79:b3:17:06:ed:ea:68:09:
b9:e4:db:50:9e:1d:8e:b4:ea:3c:8f:47:01:04:e2:3d:0e:b7:
4a:66:ae:c3:1f:54:de:65:cd:fe:f0:b7:7d:e3:35:6f:62:00:
c8:d0:a4:22:e1:87:8d:83:2b:3f:58:bd:5d:77:81:d7:92:6a:
c0:ee:c7:5f:7b:42:64:22:83:45:ca:46:9e:6e:c7:6d:08:ba:
8f:2f:5b:28:7f:67:44:d6:26:e5:b9:7d:2d:64:35:a0:98:84:
7f:d1:60:b9:90:c6:35:b9:df:73:95:c0:63:99:5b:e6:35:a6:
c0:96:dd:96:7a:cf:c7:fb:88:6f:5f:d3:56:ff:a0:16:a8:16:
91:23:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:19 2025 by rpki-client