![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa
File: 323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa (raw, json)
Hash identifier: n0rL2NyuXwFUMO7cr9cUtPh2SWMl4AWtPRXl6G68rrs=
Subject key identifier: AD:45:02:BD:59:77:AA:E5:C1:B7:49:C1:5D:87:A3:1B:8E:F6:FE:A4
Certificate issuer: /CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
Certificate serial: 528C8DB4CDB8E63EB80D048645FC92974978D525
Authority key identifier: 83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa
Signing time: Tue 07 Nov 2023 14:19:07 +0000
ROA not before: Tue 07 Nov 2023 14:14:07 +0000
ROA not after: Tue 05 Nov 2024 14:19:07 +0000
asID: 61901
IP address blocks: 2804:1370:1400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8c:8d:b4:cd:b8:e6:3e:b8:0d:04:86:45:fc:92:97:49:78:d5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
Validity
Not Before: Nov 7 14:14:07 2023 GMT
Not After : Nov 5 14:19:07 2024 GMT
Subject: CN=AD4502BD5977AAE5C1B749C15D87A31B8EF6FEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:45:5e:77:65:57:68:e0:e8:81:61:0e:76:
6a:03:f6:34:e7:e8:51:56:23:7c:b2:fa:a4:31:55:
14:26:b3:bf:b0:7e:06:12:39:fc:7d:f0:9c:94:27:
2d:b2:b7:e7:8b:13:ba:64:21:e0:d2:f1:68:ca:0b:
3f:6d:c9:de:46:80:4e:dc:83:3b:3f:9a:9b:8e:71:
64:ac:fd:96:9f:41:11:08:20:42:05:47:7c:7e:cb:
f5:a0:0e:74:3b:ec:ee:c8:75:6c:16:72:55:64:20:
2a:ce:25:6f:0c:ab:10:80:bc:32:98:47:c7:ef:bf:
de:14:8c:31:40:d9:24:24:cf:45:ac:43:ac:8c:8d:
e2:a3:29:0c:e2:5c:c4:83:49:f1:2a:7e:c9:d2:40:
31:56:34:c4:2f:80:5a:58:e1:16:25:ed:0d:f2:5f:
9e:0c:bb:44:15:0a:68:7c:65:c1:05:fb:ce:0a:7f:
87:9b:22:04:6b:cf:93:a6:15:c7:5c:da:d4:8d:16:
29:f2:ee:6e:53:93:a8:f4:27:fa:b7:a8:7a:17:2f:
ad:46:f5:62:21:64:c9:5d:67:84:62:9b:e0:87:f4:
0d:72:2d:5f:f4:14:56:9c:8e:59:8a:4e:56:f8:6b:
1f:3b:ee:f7:14:5b:9f:9b:48:5b:ae:28:c3:17:c0:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:02:BD:59:77:AA:E5:C1:B7:49:C1:5D:87:A3:1B:8E:F6:FE:A4
X509v3 Authority Key Identifier:
keyid:83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1370:1400::/40
Signature Algorithm: sha256WithRSAEncryption
51:01:1f:d0:98:f8:03:49:10:13:12:44:43:48:b5:4e:18:5f:
9b:99:f0:a8:f3:20:89:c4:9e:4c:b4:a4:9f:90:d7:c3:84:02:
fd:7a:37:d1:0f:4a:d3:f5:8f:73:95:fa:94:57:e5:72:ff:9c:
35:8a:99:8d:28:5b:af:d5:ea:ac:7e:f7:6d:c8:b1:2a:f4:58:
63:98:80:27:5b:20:28:54:12:ff:96:2d:e0:e5:92:65:6a:29:
2e:c1:5c:7d:9e:51:35:c0:36:28:8d:a5:aa:79:9a:c2:67:fd:
50:88:64:55:6e:d3:b7:97:0d:51:43:3a:6e:4c:85:74:ef:e6:
08:7b:c9:14:3a:83:b3:59:20:c6:2f:3e:51:de:9e:ae:4d:1d:
91:1c:4b:9e:d1:03:01:05:57:62:d6:e1:be:c1:6b:c2:aa:0c:
df:be:40:34:fe:85:68:76:aa:92:7c:ce:63:32:cb:28:a2:1c:
86:9d:79:de:95:30:67:2f:6b:ae:62:fe:d2:eb:70:eb:53:30:
2d:77:3b:82:5b:b3:ef:23:2f:89:c3:09:25:0e:8f:80:4e:27:
1d:34:41:bb:7d:99:fd:bf:ac:9d:7e:98:85:5c:0e:ba:7c:f2:
05:bb:8b:74:5a:e6:03:05:47:bd:51:71:a9:bb:52:9d:f4:e4:
a9:12:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:51 2025 by rpki-client