![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa
File: 323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa (raw, json)
Hash identifier: 03fPtQ4yiovFwnW/pPra7RXJtawLe1n5Xk2SDuaXI6o=
Subject key identifier: 32:92:FA:1C:48:63:44:00:F2:90:74:6F:1D:03:A7:F5:3A:75:0C:1E
Certificate issuer: /CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
Certificate serial: 0EFE8C1CAD84997669996597C90DA0804313980B
Authority key identifier: 33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa
Signing time: Tue 18 Jan 2022 13:49:47 +0000
ROA not before: Tue 18 Jan 2022 13:44:47 +0000
ROA not after: Tue 17 Jan 2023 13:49:47 +0000
asID: 266247
IP address blocks: 2804:3d00:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fe:8c:1c:ad:84:99:76:69:99:65:97:c9:0d:a0:80:43:13:98:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
Validity
Not Before: Jan 18 13:44:47 2022 GMT
Not After : Jan 17 13:49:47 2023 GMT
Subject: CN=3292FA1C48634400F290746F1D03A7F53A750C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:6a:ce:30:69:d3:c1:f5:e7:ee:fe:b2:1f:
10:ac:43:3d:98:18:7c:2a:f0:2d:59:55:78:cf:08:
e2:1d:de:bb:a1:5a:5c:74:f8:e5:32:ae:e3:5a:66:
88:ec:9b:e8:5c:70:79:69:0d:34:93:03:eb:e0:9b:
45:05:da:1d:4c:0e:54:2e:42:7c:fd:39:59:17:16:
b9:ad:20:0f:05:55:3c:a7:4e:ee:e3:99:da:91:ae:
8f:e5:c4:9c:38:ea:bf:55:3b:a7:8a:7d:e0:53:54:
cb:d7:0e:cf:ad:d9:aa:66:a0:c9:a5:aa:a1:ca:91:
ca:1f:fa:a5:c3:cc:9b:24:03:88:62:b6:13:42:f9:
76:f3:e0:18:bc:49:68:4b:e2:37:d7:c7:47:9c:b9:
d2:a6:86:a6:fc:89:26:d2:a9:a0:03:dc:36:e7:58:
37:7a:6c:d8:d0:87:5d:4a:41:59:51:2e:0b:d3:ff:
3a:12:03:20:74:ff:b6:f7:18:02:e6:64:8c:dd:ed:
ee:f6:e9:15:28:4b:aa:58:cb:a6:e9:bb:d4:80:63:
65:06:ac:dd:d0:98:5a:03:be:65:d4:47:f3:6b:48:
8e:97:d4:b1:e9:40:ab:da:2d:f5:9f:3d:3e:83:c7:
74:d9:c7:38:d0:d9:49:d1:3d:fb:72:93:3a:8c:c7:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:FA:1C:48:63:44:00:F2:90:74:6F:1D:03:A7:F5:3A:75:0C:1E
X509v3 Authority Key Identifier:
keyid:33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d00:8000::/33
Signature Algorithm: sha256WithRSAEncryption
46:8a:e4:57:b2:80:ae:29:3a:b2:0b:4d:bd:d4:98:4c:14:62:
f0:49:f8:43:78:ce:c6:b5:7b:4c:21:2b:3a:ef:d9:08:ef:25:
7e:28:8a:68:25:19:7f:1c:31:5e:ed:6a:1a:d3:44:da:2d:cc:
dd:05:f1:2a:44:b6:20:bb:0e:17:07:34:33:5c:64:1a:e8:06:
4b:46:6f:1e:26:01:b1:5f:63:1e:6f:cb:ff:cc:5e:db:e7:4a:
b6:85:9c:72:7f:ce:6d:d6:c0:0e:ee:34:5e:fb:1d:97:bb:8b:
c7:e8:d3:cd:ba:8d:65:d3:a9:fe:52:b4:28:0a:be:4e:b8:62:
d2:b4:0c:32:2d:2d:0e:37:7c:d4:65:d2:fb:60:36:e0:f4:b0:
4f:a3:d3:cc:01:8e:fc:33:b0:86:a5:8d:f4:99:b9:56:c1:a7:
9a:fe:d4:0c:09:d6:08:6c:fc:4c:b2:ae:3c:03:c0:25:94:8b:
99:de:4d:f6:a5:e8:88:40:23:3b:c5:e5:5a:36:bc:86:82:5d:
3a:27:5b:a5:1d:9a:9c:6a:87:69:68:72:48:59:9d:ed:b3:81:
04:c0:66:58:c1:da:7f:1e:12:57:a7:5a:35:30:64:ee:5b:a5:
9d:8e:b8:05:13:cf:37:ce:38:1b:d1:1d:a5:41:c5:9f:f5:11:
e8:d5:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:57 2025 by rpki-client