![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa
File: 323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa (raw, json)
Hash identifier: yOEKDQye2C3kQ8pgX7TlGiFkuIIsFnN5EG0cTcGJ3G8=
Subject key identifier: 7A:BF:86:CB:EB:DD:6A:5A:F6:56:D9:AF:39:C2:CE:7C:22:4A:45:3B
Certificate issuer: /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial: 1999112C624F75545280F64BA8333F82206A83FA
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa
Signing time: Fri 23 Aug 2024 20:01:24 +0000
ROA not before: Fri 23 Aug 2024 19:56:24 +0000
ROA not after: Fri 22 Aug 2025 20:01:24 +0000
asID: 262827
IP address blocks: 2804:ccc:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:99:11:2c:62:4f:75:54:52:80:f6:4b:a8:33:3f:82:20:6a:83:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Validity
Not Before: Aug 23 19:56:24 2024 GMT
Not After : Aug 22 20:01:24 2025 GMT
Subject: CN=7ABF86CBEBDD6A5AF656D9AF39C2CE7C224A453B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:3b:37:f3:4d:81:ff:ba:e1:2b:5c:28:61:
79:fb:3a:80:57:e6:b5:08:b1:ae:88:09:06:f7:90:
51:27:65:96:18:72:91:5d:3f:1c:1e:35:6c:03:3c:
7c:f8:58:6b:0c:3c:0b:41:bc:0f:96:b5:ac:12:06:
19:a0:03:2c:9e:df:12:a1:91:94:42:0a:13:35:63:
bd:7f:0a:b2:dd:b3:b3:7d:08:88:ce:1c:7d:1c:e8:
39:58:f3:ce:f0:30:da:54:82:6b:0d:b9:12:d0:a4:
44:4c:bd:9a:4b:21:2d:81:33:02:fa:e1:61:89:12:
35:3d:a3:19:c2:39:9c:3c:da:60:0a:50:62:5f:72:
19:ea:bc:51:89:9c:7f:2d:68:fe:df:36:f4:b1:15:
a7:1a:7c:6a:08:86:59:c5:8a:19:b5:49:94:bb:0b:
a0:8b:e1:da:b8:fe:d0:3d:8b:69:87:fb:bb:64:73:
3a:19:96:3c:cf:37:cb:fe:ba:a7:60:78:5b:89:01:
01:88:f4:98:0b:68:63:a7:ad:68:c8:f7:43:21:87:
1f:28:92:f3:76:28:a2:70:92:fa:c8:9c:e5:c2:1a:
46:03:f5:61:43:70:74:ac:c3:6e:81:72:75:16:02:
f0:ad:e7:24:cd:00:9a:78:0b:b0:98:53:61:b8:05:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:86:CB:EB:DD:6A:5A:F6:56:D9:AF:39:C2:CE:7C:22:4A:45:3B
X509v3 Authority Key Identifier:
keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ccc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
3c:a0:84:c3:ee:90:35:36:bb:a1:40:d4:3b:5e:31:73:b4:76:
12:11:d3:a7:72:0f:92:2e:75:80:99:12:a7:75:7f:6a:05:20:
26:91:6c:63:3a:6a:7e:c4:72:00:37:72:d4:7c:9c:ca:ca:09:
47:6e:59:1c:04:64:63:a2:29:e7:d7:a8:5d:18:7b:51:b9:02:
e5:5e:49:db:2f:d5:32:65:d1:19:e5:b2:fd:a7:e1:f1:88:c9:
0a:ec:00:a0:22:f0:4c:d1:78:3e:6e:a1:a3:95:34:07:dc:6d:
0f:50:d3:b9:68:1b:b1:83:c9:37:66:af:6c:e2:ee:34:d0:12:
d3:2f:ef:f1:7d:ac:1e:64:dc:df:76:cb:d5:bf:d5:ac:54:5f:
a6:fa:a8:90:69:e2:c0:32:01:d4:79:2c:a4:0d:b4:61:f7:3d:
fd:90:fd:8c:2f:93:3a:d6:3a:db:1b:51:47:ee:fc:2a:29:a9:
8e:7f:48:d6:73:d1:16:a8:54:f4:3a:62:d8:10:bd:fd:2c:5b:
35:08:57:c2:b5:9e:22:3e:6b:bd:6f:49:c6:81:2e:23:79:91:
91:21:6d:6a:9e:9c:51:9a:4d:72:65:68:24:68:e2:16:c7:38:
9b:87:fe:99:c4:6f:46:d6:9a:4c:6c:a7:bc:3d:59:2f:6e:c9:
d4:04:c9:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGZkRLGJPdVRSgPZLqDM/giBqg/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJEM0ZFNkU5MDg0OTA3RThBQzVFNzRBRTNERDVEMURF
N0ZGRTRFQjAeFw0yNDA4MjMxOTU2MjRaFw0yNTA4MjIyMDAxMjRaMDMxMTAvBgNV
BAMTKDdBQkY4NkNCRUJERDZBNUFGNjU2RDlBRjM5QzJDRTdDMjI0QTQ1M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6Ds3802B/7rhK1woYXn7OoBX
5rUIsa6ICQb3kFEnZZYYcpFdPxweNWwDPHz4WGsMPAtBvA+WtawSBhmgAyye3xKh
kZRCChM1Y71/CrLds7N9CIjOHH0c6DlY887wMNpUgmsNuRLQpERMvZpLIS2BMwL6
4WGJEjU9oxnCOZw82mAKUGJfchnqvFGJnH8taP7fNvSxFacafGoIhlnFihm1SZS7
C6CL4dq4/tA9i2mH+7tkczoZljzPN8v+uqdgeFuJAQGI9JgLaGOnrWjI90Mhhx8o
kvN2KKJwkvrInOXCGkYD9WFDcHSsw26BcnUWAvCt5yTNAJp4C7CYU2G4Bd9BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUer+Gy+vdalr2VtmvOcLOfCJKRTswHwYDVR0j
BBgwFoAUK9P+bpCEkH6KxedK491dHef/5OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1pu
M2MvMC8yQkQzRkU2RTkwODQ5MDdFOEFDNUU3NEFFM0RENUQxREU3RkZFNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDNGRTZFOTA4NDkwN0U4
QUM1RTc0QUUzREQ1RDFERTdGRkU0RUIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBVVFZc0NEWTVzUmZmZ2I5anRxTWRrQmNHdktSQVVScEtjQm9jZmdabjNjLzAv
MzIzODMwMzQzYTYzNjM2MzNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzMjM2MzIzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBAzMgDANBgkqhkiG9w0BAQsFAAOC
AQEAPKCEw+6QNTa7oUDUO14xc7R2EhHTp3IPki51gJkSp3V/agUgJpFsYzpqfsRy
ADdy1HycysoJR25ZHARkY6Ip59eoXRh7UbkC5V5J2y/VMmXRGeWy/afh8YjJCuwA
oCLwTNF4Pm6ho5U0B9xtD1DTuWgbsYPJN2avbOLuNNAS0y/v8X2sHmTc33bL1b/V
rFRfpvqokGniwDIB1HkspA20Yfc9/ZD9jC+TOtY62xtRR+78Kimpjn9I1nPRFqhU
9Dpi2BC9/SxbNQhXwrWeIj5rvW9JxoEuI3mRkSFtap6cUZpNcmVoJGjiFsc4m4f+
mcRvRtaaTGynvD1ZL27J1ATJCA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:03 2025 by rpki-client