![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa
File: 323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa (raw, json)
Hash identifier: 8mLRkLMqkSpSLj3wtLb8jxE3MISeiyyCfMOX66OCy28=
Subject key identifier: B3:3E:56:6E:50:EA:F9:F5:AD:C6:15:EE:C1:38:7F:8D:B6:45:B2:E7
Certificate issuer: /CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Certificate serial: 05271310C57A0D1567B6D21AE6310096C837CC89
Authority key identifier: 43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa
Signing time: Fri 16 Dec 2022 23:03:04 +0000
ROA not before: Fri 16 Dec 2022 22:58:04 +0000
ROA not after: Fri 15 Dec 2023 23:03:04 +0000
asID: 266152
IP address blocks: 2804:3b7c:588::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:27:13:10:c5:7a:0d:15:67:b6:d2:1a:e6:31:00:96:c8:37:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Validity
Not Before: Dec 16 22:58:04 2022 GMT
Not After : Dec 15 23:03:04 2023 GMT
Subject: CN=B33E566E50EAF9F5ADC615EEC1387F8DB645B2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:ce:a3:44:d9:96:44:fd:74:41:fa:1f:05:
87:f2:c2:a0:04:ab:8e:08:00:49:a5:96:1c:fc:37:
34:65:96:f9:c4:10:8f:8c:aa:12:60:15:db:0a:65:
03:9c:c0:96:8c:46:65:df:f4:c7:fb:2c:29:4e:90:
ea:24:18:b0:f8:1f:10:24:93:73:17:e4:ee:34:62:
2f:8c:66:08:21:9b:4e:7c:ce:b3:6c:d6:dd:31:c8:
a4:8a:27:be:ca:d0:9a:c2:a9:4d:a9:31:88:24:02:
48:5b:62:1c:35:7e:e0:03:46:82:26:07:68:98:48:
27:1a:2a:cb:ca:f7:ca:fd:1a:a1:a2:79:cf:d1:0f:
bb:8c:ce:98:4d:55:b3:21:79:af:b9:91:3b:cf:9d:
c5:b9:34:42:79:dc:5d:ba:7b:ab:ef:82:20:dc:12:
1a:83:c3:1d:07:29:12:39:be:50:9c:fc:4d:7d:75:
43:19:11:fa:42:c8:31:c8:5e:07:fd:85:92:a4:9f:
8b:d0:36:55:74:11:75:47:20:67:e8:a4:f1:d7:55:
8b:d9:f4:16:2f:27:0b:9c:32:c6:5d:31:4c:eb:7a:
b4:7f:b0:b7:5c:f5:d9:83:75:47:51:11:79:ea:91:
06:09:20:e3:fe:8a:49:c8:8f:9c:61:13:03:3f:6c:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:56:6E:50:EA:F9:F5:AD:C6:15:EE:C1:38:7F:8D:B6:45:B2:E7
X509v3 Authority Key Identifier:
keyid:43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/323830343a336237633a3538383a3a2f34382d3438203d3e20323636313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b7c:588::/48
Signature Algorithm: sha256WithRSAEncryption
65:36:0c:d5:5e:8a:dd:f3:ae:8b:a1:46:fe:7a:0d:86:f3:4a:
90:05:27:d0:68:c9:a4:50:9a:aa:9e:0e:de:dd:fa:b4:30:81:
7b:9c:01:97:92:d5:7d:30:13:7c:08:22:f1:87:64:d8:b1:6f:
9b:2e:4e:db:f7:44:6f:e4:d5:33:82:5c:25:80:73:29:ee:6c:
41:19:af:55:5d:4d:cf:c2:a7:db:fa:84:81:93:82:73:b4:d1:
e6:8a:fb:d2:40:c3:59:3c:2b:20:2a:ca:f5:66:dd:31:59:da:
ef:f7:20:88:60:d0:48:aa:32:23:37:23:05:9d:43:cd:35:b9:
89:ca:64:d0:eb:3d:65:31:31:7b:82:f7:2d:91:b5:c7:fb:9e:
b9:fc:3f:64:fa:e3:2c:5d:b4:6e:04:4c:a4:05:62:8b:71:28:
20:7a:5e:78:86:5d:c3:37:b7:b0:8c:91:ab:02:dd:57:8f:28:
a7:8e:5a:49:82:20:4e:a5:55:ac:e9:cd:db:53:d6:f7:7d:d9:
3f:78:38:64:68:e4:4b:32:58:4b:b4:05:1a:e3:8f:84:bb:89:
f5:13:e2:6c:ae:0d:3d:73:e4:7f:ad:57:11:90:3a:17:a4:b2:
a7:d8:45:d0:f7:c0:e7:1e:5e:38:7f:e0:7a:18:c9:e9:1a:68:
32:4a:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:36 2025 by rpki-client