![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa
File: 323830343a346638633a3a2f33322d3438203d3e20323638333333.roa (raw, json)
Hash identifier: yn1P1n6XUy6dgQ3rEiK+/wN/PwseIj1Mz7RpOjqC7dE=
Subject key identifier: 3F:4D:D2:9D:B1:73:BB:52:56:A8:3E:AB:3F:CE:72:9F:46:3D:5D:3A
Certificate issuer: /CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
Certificate serial: 5E4CCF9C943569CC57B3E825F8E1E7EABC5D37F5
Authority key identifier: F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa
Signing time: Wed 25 Oct 2023 21:29:30 +0000
ROA not before: Wed 25 Oct 2023 21:24:30 +0000
ROA not after: Wed 23 Oct 2024 21:29:30 +0000
asID: 268333
IP address blocks: 2804:4f8c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4c:cf:9c:94:35:69:cc:57:b3:e8:25:f8:e1:e7:ea:bc:5d:37:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
Validity
Not Before: Oct 25 21:24:30 2023 GMT
Not After : Oct 23 21:29:30 2024 GMT
Subject: CN=3F4DD29DB173BB5256A83EAB3FCE729F463D5D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:ef:10:f0:aa:89:ff:e5:14:0e:69:c5:a2:
9c:bc:7a:06:de:1b:ce:8e:96:e6:c4:24:48:f9:c1:
33:8e:59:29:e2:15:87:7f:c4:8a:8a:9c:29:68:94:
9a:81:f2:cf:3e:33:b0:2d:5c:33:8a:7f:84:21:04:
94:29:03:41:20:3f:d4:ec:3d:01:47:3b:fc:23:0e:
8e:95:71:4b:9a:9b:6c:cf:84:2d:6e:68:4a:84:33:
05:d9:ed:4a:cf:88:c5:0c:40:56:7b:72:f8:62:a4:
70:dc:c6:db:25:ce:e9:ab:0c:87:cf:33:05:5a:cd:
b8:3b:8f:6c:41:02:44:be:bd:c6:97:03:06:44:ad:
15:4a:7a:bb:91:2b:cf:a0:95:a1:76:11:49:88:46:
ac:83:c4:b4:76:b8:43:c3:fd:28:3d:c6:af:a5:bc:
7b:1f:c3:c9:ce:dd:e0:08:15:2a:2e:fc:f4:c0:f2:
7d:7d:63:ee:c2:a4:25:39:fe:33:ad:1d:22:78:93:
33:09:ee:3f:d1:38:84:4f:a0:fd:ff:ff:0c:ba:9d:
ab:e4:b2:94:f3:b3:5a:24:0f:62:3c:9c:d6:f3:6c:
15:f1:59:cc:45:fa:80:9f:e9:88:41:ae:36:83:2b:
14:86:36:06:84:26:06:26:ed:e8:86:4b:9a:d1:5e:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:D2:9D:B1:73:BB:52:56:A8:3E:AB:3F:CE:72:9F:46:3D:5D:3A
X509v3 Authority Key Identifier:
keyid:F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/323830343a346638633a3a2f33322d3438203d3e20323638333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f8c::/32
Signature Algorithm: sha256WithRSAEncryption
96:09:62:4a:42:16:7a:d8:9a:a4:28:1d:8e:86:4c:87:97:9c:
45:f5:e1:ff:64:81:8e:44:b9:c7:68:5c:42:97:49:04:27:37:
c7:09:8b:32:67:90:2c:1c:33:c0:b1:67:9b:af:27:c4:cd:54:
28:e1:65:28:46:05:6a:34:0a:47:ef:87:26:4c:6d:ba:6d:ed:
59:3a:5d:13:48:89:e0:5a:5f:c3:d6:3c:34:05:7e:7d:8e:ee:
e8:40:e0:0d:9e:f0:3b:73:25:72:0c:13:03:15:74:e8:aa:fd:
09:0d:61:c1:d2:d7:04:a6:dd:c4:48:20:16:6f:a9:4a:09:a6:
08:e5:a2:54:98:76:37:31:ba:87:5f:a7:be:24:36:0f:2d:d3:
3c:70:eb:a3:3b:21:2a:a6:8b:ab:a6:48:97:ed:c2:63:3e:a6:
59:1e:52:a3:8d:2d:45:80:a9:ef:a6:4a:e8:6e:9e:70:3a:a1:
4a:ef:ee:c4:02:03:c7:f1:12:69:40:bd:bd:6e:72:82:e3:e3:
78:34:67:df:68:2f:6e:a2:b6:f3:32:dc:5e:5b:f6:12:6b:40:
22:7a:db:7e:74:77:50:27:cd:5b:2e:b8:c7:0b:bc:f7:4e:ed:
01:48:42:2d:f9:93:11:46:40:dd:9d:40:3a:1e:a0:f5:17:6e:
2e:14:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:50 2025 by rpki-client