![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
File: 323830343a313133343a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier: M5/SgD9F6MYV7zmxiun1tE3P3JzR4TpFMi4aFy1SN9o=
Subject key identifier: 2A:EC:20:4A:7A:DE:75:B2:19:61:74:C5:78:33:6A:D9:A6:19:A6:C9
Certificate issuer: /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial: 4A4CD971900E7768FC529B7ECE2DF69F0BAA76F7
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
Signing time: Mon 08 Apr 2024 20:11:31 +0000
ROA not before: Mon 08 Apr 2024 20:06:31 +0000
ROA not after: Mon 07 Apr 2025 20:11:31 +0000
asID: 263665
IP address blocks: 2804:1134::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4c:d9:71:90:0e:77:68:fc:52:9b:7e:ce:2d:f6:9f:0b:aa:76:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Validity
Not Before: Apr 8 20:06:31 2024 GMT
Not After : Apr 7 20:11:31 2025 GMT
Subject: CN=2AEC204A7ADE75B2196174C578336AD9A619A6C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:a4:d1:ae:2c:11:3b:42:73:56:e7:02:cd:
5b:db:5c:3e:b9:88:b2:40:22:14:f4:7e:15:dd:81:
a1:6a:a4:44:3e:2c:a5:c2:9e:c3:ca:6d:95:08:a3:
f8:26:ab:29:06:ce:4d:71:87:79:c0:57:3a:62:06:
2b:76:3c:9e:8b:fe:61:60:2c:c5:5a:30:20:8d:0b:
64:57:4a:5b:71:c5:a5:59:cb:3c:3b:d7:bf:09:5f:
1f:16:3b:0f:b3:b0:11:06:84:a7:dc:64:4b:11:96:
b8:45:5f:58:8a:f5:67:56:fc:3b:64:1e:b8:b8:ea:
1c:41:83:7b:0c:36:88:6b:c4:2e:ac:f8:be:1f:9a:
d2:e9:2e:1e:c0:56:12:31:85:90:81:4e:e8:20:82:
e2:00:a8:34:a0:2f:3e:23:ac:b5:f0:a0:82:80:73:
2e:56:e1:8e:12:38:85:74:28:96:6b:c1:fe:d0:c6:
56:1f:28:7a:56:45:ae:64:be:be:3b:f7:b9:0c:ca:
55:11:90:a9:16:dd:50:f2:12:1c:c2:60:4b:9c:04:
a3:e3:90:0c:a8:02:ff:a6:89:f0:7a:78:3b:a6:8c:
3b:73:a7:7e:7f:33:e2:01:e4:06:8b:e5:8f:59:44:
87:20:48:76:ed:5d:93:66:e1:3b:fd:7e:91:51:97:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:20:4A:7A:DE:75:B2:19:61:74:C5:78:33:6A:D9:A6:19:A6:C9
X509v3 Authority Key Identifier:
keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1134::/32
Signature Algorithm: sha256WithRSAEncryption
9f:59:fe:ae:9d:78:4d:b3:a9:ac:53:d9:02:b5:a4:82:c2:98:
36:bf:a4:92:47:98:f6:0e:ae:99:98:ef:1c:50:d2:e2:6a:f5:
e6:4c:38:17:f5:e8:40:75:16:4a:6d:63:93:87:a1:1f:74:98:
ff:9d:7b:51:cc:05:2e:ce:cb:1a:79:d8:97:2f:f0:81:87:32:
0c:f3:27:de:1b:41:5c:19:94:7a:64:16:5d:a5:cd:a0:a2:48:
58:ae:01:02:93:a9:cf:63:34:44:48:99:d4:ae:03:c1:ee:6d:
d0:79:db:91:a9:51:6a:45:89:1f:96:34:89:9d:b0:7c:7a:a9:
be:e3:30:74:e5:ab:55:94:eb:d2:c4:a7:ea:6f:b2:e9:d0:2e:
87:7d:66:d7:52:cf:1c:c3:47:b9:01:07:07:f2:5c:39:94:26:
c4:a1:2e:cd:56:78:75:49:f4:ae:b1:28:1a:d5:b1:7a:73:b5:
f8:74:a3:c3:df:c1:14:2e:09:fc:6e:86:84:3e:36:d1:d7:30:
b3:6a:b8:17:60:5c:ed:84:30:77:db:35:5c:c3:c8:8a:ca:49:
f0:85:1d:3c:57:64:ce:f2:de:ae:bc:7c:c6:2a:b9:b1:60:ac:
17:42:49:79:f0:d5:ed:0f:e8:3c:f1:2a:d7:db:4a:ec:a5:d5:
eb:23:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:31 2025 by rpki-client