![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
File: 323830343a313337303a3a2f33322d3438203d3e203631393031.roa (raw, json)
Hash identifier: 3GhsA4DWkmNk4W3Mcl4Sn8HGZwh/GhMQN8naGMIG7YA=
Subject key identifier: FE:F7:13:6A:DA:80:4D:D4:51:16:79:53:44:DD:67:B8:F0:4E:8F:FD
Certificate issuer: /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial: 1CC3C39376C7138834357084F1B353FAAED2427C
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
Signing time: Tue 12 Mar 2024 18:12:40 +0000
ROA not before: Tue 12 Mar 2024 18:07:40 +0000
ROA not after: Tue 11 Mar 2025 18:12:40 +0000
asID: 61901
IP address blocks: 2804:1370::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c3:c3:93:76:c7:13:88:34:35:70:84:f1:b3:53:fa:ae:d2:42:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Validity
Not Before: Mar 12 18:07:40 2024 GMT
Not After : Mar 11 18:12:40 2025 GMT
Subject: CN=FEF7136ADA804DD45116795344DD67B8F04E8FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:da:71:6f:4f:fe:e8:db:7b:d9:da:f1:22:
9a:23:16:40:c1:a1:c2:f1:21:7e:d0:fe:65:7f:61:
43:7a:55:a7:4c:a0:c4:eb:5a:1d:79:10:54:47:7d:
a0:c4:18:17:e2:9e:33:25:1d:cb:94:96:78:23:76:
94:a3:6e:e9:8b:30:ee:9b:56:c5:7d:ac:af:23:b8:
79:e1:93:1a:fe:77:89:12:5f:33:df:de:93:d5:7d:
7c:48:65:f1:47:ac:28:66:0e:5a:aa:7b:4c:60:b2:
46:29:61:a0:a0:0e:fd:d9:4c:e2:ca:5c:78:91:30:
97:a0:15:71:c4:b2:11:3a:89:b2:ab:d5:56:9e:fa:
3d:0f:c2:76:cd:07:53:74:90:45:52:59:43:06:d6:
11:b3:59:4d:dc:30:e4:5d:3e:c4:25:c0:2d:44:33:
8d:76:76:c2:4e:73:5a:0c:db:a5:de:08:eb:ea:6b:
d3:ab:9f:6e:9f:da:77:26:74:03:11:7b:b4:9d:42:
52:b7:c3:81:54:84:12:1a:b5:b0:2d:52:c8:c8:cf:
66:19:e7:1f:bf:11:55:c6:72:09:4f:11:2a:bd:9f:
dd:08:62:63:22:d4:1e:30:a4:49:52:92:aa:cf:88:
91:ef:de:a2:3b:50:49:dd:f8:bc:a6:0a:1a:41:f2:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:13:6A:DA:80:4D:D4:51:16:79:53:44:DD:67:B8:F0:4E:8F:FD
X509v3 Authority Key Identifier:
keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1370::/32
Signature Algorithm: sha256WithRSAEncryption
2c:f2:33:00:47:4c:cb:01:9b:2d:1c:bf:64:c2:b3:e4:4f:66:
81:8e:59:59:33:8b:1b:40:cb:1b:da:19:cb:b1:52:47:22:0d:
36:f3:b1:eb:3e:d1:a2:32:2b:90:64:69:95:45:f3:ac:38:a3:
c9:1d:1b:60:bd:e4:0d:97:d2:c0:8f:d4:9d:57:61:f3:8f:5f:
66:80:72:1d:d8:7e:00:c7:5e:f8:88:67:87:6c:5a:11:18:65:
1b:e2:3c:34:74:c6:3b:82:57:ca:cc:94:10:78:38:9a:25:d6:
fc:bf:d3:c1:21:66:65:18:a7:5b:23:d3:e6:f2:e3:55:12:f5:
a8:e6:76:e9:68:a1:08:36:54:40:6c:6d:c3:24:21:dd:f6:ae:
0c:95:01:c5:82:77:4e:a7:12:bc:c0:3c:12:46:e3:cb:11:da:
8b:af:84:e5:c6:bf:ef:0e:8f:3a:98:6b:7b:08:75:b1:d9:b8:
c0:1c:20:67:b4:b8:a0:96:91:26:74:24:c3:99:5e:0c:e3:3a:
c1:a2:cb:ee:02:79:07:2f:22:74:e9:28:6e:10:f2:15:ff:fa:
99:46:30:7b:35:b5:10:df:b6:3b:9d:a0:79:77:85:cf:6c:be:
25:21:39:ed:c6:89:fa:17:8b:9e:5e:53:85:c3:db:7d:28:69:
0b:b9:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:45 2025 by rpki-client