![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a383030303a3a2f33332d3333203d3e20323635333635.roa
File: 323830343a326563343a383030303a3a2f33332d3333203d3e20323635333635.roa (raw, json)
Hash identifier: VklRI3Fd2Xb6uOaD82xSKyz6mRgqwveYTDtiTIDqPEM=
Subject key identifier: 4A:16:4D:E4:53:E2:22:2F:DB:55:74:7B:06:4F:88:9E:CE:74:96:DE
Certificate issuer: /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial: 3326E0B4193DDF7646CEC73151E58982B9113164
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a383030303a3a2f33332d3333203d3e20323635333635.roa
Signing time: Sun 14 Jan 2024 12:00:00 +0000
ROA not before: Sun 14 Jan 2024 11:55:00 +0000
ROA not after: Sun 12 Jan 2025 12:00:00 +0000
asID: 265365
IP address blocks: 2804:2ec4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:26:e0:b4:19:3d:df:76:46:ce:c7:31:51:e5:89:82:b9:11:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Validity
Not Before: Jan 14 11:55:00 2024 GMT
Not After : Jan 12 12:00:00 2025 GMT
Subject: CN=4A164DE453E2222FDB55747B064F889ECE7496DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:f1:ed:a3:de:e2:4e:6e:2f:2d:07:16:78:
7a:0a:d8:11:cc:85:7b:3c:55:21:a9:38:27:37:2c:
0a:49:33:ad:53:b1:6f:0d:39:ce:26:84:a6:41:7e:
f7:0e:08:84:3c:58:de:a2:88:11:7b:c0:1e:46:95:
95:18:72:a5:46:52:34:d4:dc:5d:f7:c4:10:9d:44:
b3:69:cd:57:a3:6d:c7:c7:6a:29:5e:1d:55:b2:f7:
81:00:09:bb:fc:4e:4c:2d:1e:91:c4:d4:a7:06:e0:
ea:a1:a1:45:ae:f7:f1:6f:dd:80:db:04:20:c1:92:
7b:3f:34:db:b4:41:3b:61:43:d0:5d:bd:6e:a2:d2:
20:63:2e:5a:06:ef:35:94:fe:28:e1:30:1f:59:d4:
0c:79:b4:db:5d:10:c5:69:e4:13:c3:e8:f4:8e:95:
54:47:0a:73:99:26:be:9a:fa:3b:38:c9:0f:8d:57:
e1:00:5e:df:12:6a:44:bf:46:71:fe:a2:34:8a:9c:
ad:8a:b6:ea:0b:ea:56:2b:1b:8a:fe:2e:19:c4:ff:
ac:41:f2:34:27:db:cc:87:88:12:20:9a:6d:f4:e8:
e3:3b:1b:c6:9f:8b:d5:26:41:a3:d1:56:5d:68:7e:
fa:f2:9f:8f:11:d7:da:66:46:f5:b5:e7:cf:45:ef:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:4D:E4:53:E2:22:2F:DB:55:74:7B:06:4F:88:9E:CE:74:96:DE
X509v3 Authority Key Identifier:
keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a383030303a3a2f33332d3333203d3e20323635333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2ec4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5c:4a:c7:03:aa:7f:1a:61:c5:25:31:d1:94:a6:39:bd:76:6b:
39:6a:79:60:3b:fb:0e:90:56:9d:9a:be:66:4e:ab:81:0e:28:
af:4d:1c:9e:c0:24:47:ec:4e:a0:13:b9:48:6d:5b:e6:21:6c:
7b:d1:41:57:54:27:0a:31:81:06:70:41:98:0b:c3:41:77:61:
af:1d:0d:11:56:99:7b:02:2b:46:cc:d5:0b:ed:cb:9e:7d:67:
53:74:c4:11:8f:d0:27:99:72:78:d7:a7:61:0e:d7:65:15:5e:
a1:75:bd:b8:49:85:db:51:76:94:83:ac:42:be:65:9a:bb:25:
b5:89:fb:67:b5:0b:44:f4:bc:8c:8d:ce:71:c2:7d:fd:ef:95:
71:b0:31:6b:19:0c:d2:1d:f9:01:77:89:eb:3d:13:88:17:cd:
a7:cf:ce:1e:d9:51:bf:7d:4f:df:49:72:f9:41:37:c2:6b:c9:
8e:b8:81:75:8c:ca:44:35:2e:e4:a4:bb:d8:62:c1:93:ff:d8:
48:40:f5:3e:80:34:04:29:21:03:9f:15:e6:83:6f:77:b1:53:
4c:50:f2:66:bb:a7:d0:10:e3:29:27:78:ca:b0:e4:f9:21:b6:
26:33:21:42:cc:d7:fd:35:ea:0c:d7:2e:aa:56:45:47:91:31:
b7:25:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:06 2025 by rpki-client