![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: LWuTYJ3NW3HgnLpa2j8FOwugFEaMK3Tr9fHKcD4ROKY=
Subject key identifier: D5:C3:78:2E:8B:B4:B4:9E:0B:E4:36:63:8D:F6:14:A7:7D:23:9C:A9
Certificate issuer: /CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
Certificate serial: 75043056534C95FCD4525D2D32CC495850405AAA
Authority key identifier: 97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
Signing time: Tue 24 Jan 2023 18:27:51 +0000
ROA not before: Tue 24 Jan 2023 18:22:51 +0000
ROA not after: Tue 23 Jan 2024 18:27:51 +0000
asID: 262617
IP address blocks: 2804:3d74:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:04:30:56:53:4c:95:fc:d4:52:5d:2d:32:cc:49:58:50:40:5a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
Validity
Not Before: Jan 24 18:22:51 2023 GMT
Not After : Jan 23 18:27:51 2024 GMT
Subject: CN=D5C3782E8BB4B49E0BE436638DF614A77D239CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:c3:61:85:8d:6b:d8:53:3e:92:37:24:74:
d6:64:38:5d:4f:ca:42:2f:65:8f:15:69:37:a7:f3:
1d:bf:2d:49:28:e5:e9:42:8b:70:43:15:69:eb:b4:
d2:1f:7c:2f:14:4c:22:ac:58:7e:3e:b9:8f:7a:15:
5f:06:72:8a:c4:9f:5c:d9:d7:84:ab:41:70:8f:76:
b3:05:30:0f:66:cd:7d:68:0d:b0:d2:64:d3:76:98:
d9:9a:c7:6f:ab:8c:02:99:dc:81:87:bf:ca:46:55:
8d:02:5b:e6:33:02:24:9f:a6:6e:43:e6:f3:31:52:
82:f8:b7:fa:c2:d2:e7:45:d4:de:d7:3b:41:20:9b:
87:55:01:99:92:9a:08:b7:91:d6:95:c9:c6:20:6e:
57:b5:13:93:f0:cb:f4:5e:40:b6:d4:24:eb:f0:4b:
bd:82:5b:0a:67:9a:29:75:da:4d:9b:65:d5:4e:15:
8a:8a:34:64:5c:9f:9d:45:38:59:21:95:59:3e:b0:
71:83:8d:42:2f:9e:44:5d:df:65:9b:17:35:86:86:
00:e1:02:e8:15:88:19:b1:e5:f7:bf:19:47:30:ca:
d8:e4:36:dc:db:cc:f0:af:9e:f1:d5:45:27:6c:c8:
38:5c:c7:66:6c:4e:be:57:90:14:81:ab:6f:1c:e9:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C3:78:2E:8B:B4:B4:9E:0B:E4:36:63:8D:F6:14:A7:7D:23:9C:A9
X509v3 Authority Key Identifier:
keyid:97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d74:3::/48
Signature Algorithm: sha256WithRSAEncryption
56:7f:a6:45:b2:95:9e:47:cf:ac:c8:f9:d9:22:ed:44:e1:ac:
71:4a:9d:01:ac:c9:35:72:4c:5c:a2:55:d6:57:42:d8:85:27:
b1:e2:54:91:c8:99:53:17:36:9f:aa:ec:44:88:33:aa:17:a3:
2f:d9:1b:2a:ca:e7:d1:5d:9a:88:7c:4f:da:94:a8:0e:e4:74:
2a:12:27:71:dc:05:01:d4:93:71:3b:01:db:9e:f8:b8:3d:c4:
bb:2d:d8:eb:40:00:80:4f:0b:ba:8b:0e:69:6c:7d:44:1e:bd:
4c:a4:71:3a:48:05:a5:40:4b:b0:51:4c:1f:66:f7:30:6d:63:
77:53:47:ab:03:ca:9a:cd:08:09:46:bb:21:36:47:b0:95:bc:
82:eb:be:89:74:94:2c:4b:0a:47:37:5c:25:72:e3:61:eb:f5:
a4:cb:06:a9:c6:7a:1d:32:43:8e:ba:95:02:ed:fb:27:d4:ee:
7a:05:1f:61:b5:9b:fd:66:b6:ae:af:44:fc:d4:cf:16:53:5c:
c1:8f:3e:68:b9:38:73:a7:ad:d0:bf:25:71:d3:b6:a4:86:6d:
8c:ab:ca:05:de:47:19:41:21:0a:be:1b:57:23:43:8c:9e:b4:
7a:48:35:59:33:ac:a9:9b:10:ff:5c:67:a1:48:cc:2e:32:8c:
8f:9b:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:16 2025 by rpki-client