![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa
File: 323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa (raw, json)
Hash identifier: u3DdaYcgj+CI1TfFHR8yijtaQddfO0km+7D1+fiZlAY=
Subject key identifier: 65:C5:30:0C:A4:FE:1D:F5:4E:4C:68:BB:73:EB:78:58:39:C3:83:D5
Certificate issuer: /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial: 3FCFE1638E29FE8E07AD908A580940AE5BEC34F4
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa
Signing time: Thu 25 Jan 2024 13:01:29 +0000
ROA not before: Thu 25 Jan 2024 12:56:29 +0000
ROA not after: Thu 23 Jan 2025 13:01:29 +0000
asID: 264297
IP address blocks: 2804:25b4:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cf:e1:63:8e:29:fe:8e:07:ad:90:8a:58:09:40:ae:5b:ec:34:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Validity
Not Before: Jan 25 12:56:29 2024 GMT
Not After : Jan 23 13:01:29 2025 GMT
Subject: CN=65C5300CA4FE1DF54E4C68BB73EB785839C383D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:b5:e2:6c:d5:7a:e9:4e:96:59:81:1e:92:
7f:f1:ce:b4:85:d1:df:79:69:d6:ca:26:0a:1c:07:
71:d4:cc:4e:91:19:83:7b:ab:1d:74:50:eb:1f:e0:
1b:62:49:40:66:4c:e4:84:2f:5e:c4:32:6b:84:1b:
dd:77:3a:c8:38:75:99:47:9e:59:ca:d2:07:1e:7f:
6b:5a:86:59:23:cb:b8:b9:ed:98:2a:91:8a:73:f0:
a9:4b:76:43:b5:5d:09:29:87:43:e9:8a:92:5d:e5:
65:d5:ab:aa:d4:40:26:fe:01:99:6b:2a:b7:3e:71:
9c:6f:42:ea:75:e2:50:c7:9e:9e:f4:b7:34:50:ab:
7a:a1:b9:11:c5:66:bd:98:9a:f7:c2:7f:ae:0c:90:
f8:60:5f:8a:0d:fc:43:47:16:04:b9:fc:c1:24:66:
a0:cc:fc:27:5e:d7:7f:2e:de:ff:29:42:30:d1:07:
4b:a1:94:a2:fd:cb:a8:e8:ba:9b:30:43:32:3c:dd:
05:a8:df:e9:71:99:a8:d3:a8:1a:e7:e7:53:ed:4b:
17:40:32:c2:f4:49:09:07:7a:29:50:d2:3e:cb:aa:
8c:0f:30:d2:e0:a9:0f:10:e2:02:23:d2:88:62:aa:
80:38:39:b9:b8:76:fc:d4:af:1d:0d:4f:46:4b:b8:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C5:30:0C:A4:FE:1D:F5:4E:4C:68:BB:73:EB:78:58:39:C3:83:D5
X509v3 Authority Key Identifier:
keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:25b4:c000::/34
Signature Algorithm: sha256WithRSAEncryption
1d:78:86:e6:81:29:c5:4d:15:92:db:29:c4:7d:68:82:ca:c8:
96:af:6e:e0:3b:ad:f5:57:da:f9:40:1e:e8:c9:36:4c:99:ac:
ea:48:8b:be:ff:27:4e:a7:54:6d:1a:9a:31:da:ed:e3:cc:82:
10:06:a8:10:eb:97:50:0c:d7:1e:91:1d:03:49:ae:54:81:15:
25:4c:98:1a:53:f2:23:c0:ed:e2:fd:18:1c:69:b2:06:ea:db:
af:44:5f:fe:b4:b1:f3:71:99:be:3d:27:7e:9c:a1:e4:e1:c9:
c1:2e:55:30:54:a5:4b:90:4d:e6:fa:7d:df:e6:6a:3f:68:ce:
98:c5:83:49:24:f1:e5:20:eb:9d:7f:e3:0a:04:32:d0:5f:6c:
26:f4:43:62:82:46:1e:89:03:78:ef:d8:a7:9a:b8:55:1b:9e:
6f:45:01:de:d0:c7:51:1d:91:07:2b:7e:43:71:6f:76:e1:b0:
d3:eb:79:e4:f4:55:a4:a1:9d:40:b6:ec:f2:1e:71:b2:9e:0f:
26:4e:eb:68:65:c2:a4:06:5f:3c:09:e3:a6:d5:1c:b6:b8:48:
4f:f4:49:1f:fd:31:38:31:d5:c4:f5:9e:07:83:95:b3:73:47:
ca:4d:b4:18:ff:ac:84:ab:5b:6e:95:13:6a:52:21:b9:69:53:
b4:82:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:15 2025 by rpki-client