![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/323830343a376465383a3a2f33322d313238203d3e20323731353930.roa
File: 323830343a376465383a3a2f33322d313238203d3e20323731353930.roa (raw, json)
Hash identifier: UEsMuKv4niJalfG67ZtiOnk3bkNwpYbqfCYfoaB8WzY=
Subject key identifier: 02:F5:A2:22:FC:6A:E3:17:22:5B:56:21:81:9C:20:BE:2E:5E:0D:B4
Certificate issuer: /CN=123655A491B92F602833549B87EF8A0E5AFCE31A
Certificate serial: 7D24FB33391C0474B483F07CEE6D7DBE0897D628
Authority key identifier: 12:36:55:A4:91:B9:2F:60:28:33:54:9B:87:EF:8A:0E:5A:FC:E3:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/123655A491B92F602833549B87EF8A0E5AFCE31A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/323830343a376465383a3a2f33322d313238203d3e20323731353930.roa
Signing time: Wed 01 Feb 2023 19:48:20 +0000
ROA not before: Wed 01 Feb 2023 19:43:20 +0000
ROA not after: Wed 31 Jan 2024 19:48:20 +0000
asID: 271590
IP address blocks: 2804:7de8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:24:fb:33:39:1c:04:74:b4:83:f0:7c:ee:6d:7d:be:08:97:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123655A491B92F602833549B87EF8A0E5AFCE31A
Validity
Not Before: Feb 1 19:43:20 2023 GMT
Not After : Jan 31 19:48:20 2024 GMT
Subject: CN=02F5A222FC6AE317225B5621819C20BE2E5E0DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:b4:ae:73:72:b6:09:e8:e7:92:86:f8:a4:
8e:0e:1b:93:99:64:96:dd:c2:ea:77:37:78:bf:f1:
e2:1e:eb:8e:4b:30:fb:39:1b:46:56:19:22:a9:f7:
40:da:24:e4:93:fa:0d:d8:a1:72:8b:7e:a4:95:09:
40:8a:ed:dd:1f:e5:d3:17:23:2e:3a:1d:fd:22:6b:
4e:94:18:00:4a:3c:df:61:50:7a:25:1a:f7:dc:b4:
ac:58:f5:c5:66:a0:72:c1:f4:0d:32:53:1b:58:74:
19:0e:39:f0:59:a6:9d:a6:e5:30:a0:a4:77:c3:9a:
30:8e:dd:c4:20:67:42:2f:72:9f:b6:5e:78:18:6c:
7e:e6:57:50:a5:0a:bc:fb:38:b3:84:b7:8d:bd:9f:
b1:ff:78:f1:7f:00:f9:4e:2d:59:b5:43:6a:98:f5:
51:ab:ac:3e:4a:db:9c:64:d8:d9:0a:75:75:42:6f:
22:83:9b:c7:b1:1f:d4:31:7a:c9:bc:11:f7:3f:de:
b3:32:e6:92:20:05:ac:e8:8c:5b:6e:21:51:fc:37:
3e:14:b7:1e:a8:db:6b:99:d4:4c:4e:2f:bb:ab:00:
5f:db:1f:22:1e:18:a8:73:1d:38:47:49:38:ef:6a:
6d:d5:9c:cd:6d:f9:73:cb:9a:c3:a4:5c:c5:84:1b:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F5:A2:22:FC:6A:E3:17:22:5B:56:21:81:9C:20:BE:2E:5E:0D:B4
X509v3 Authority Key Identifier:
keyid:12:36:55:A4:91:B9:2F:60:28:33:54:9B:87:EF:8A:0E:5A:FC:E3:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/123655A491B92F602833549B87EF8A0E5AFCE31A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/123655A491B92F602833549B87EF8A0E5AFCE31A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/323830343a376465383a3a2f33322d313238203d3e20323731353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7de8::/32
Signature Algorithm: sha256WithRSAEncryption
36:d3:44:d7:74:95:f5:95:39:ee:b0:01:85:6c:08:b8:90:f3:
a0:a2:53:bb:ef:c1:4a:99:55:65:3e:22:61:02:4e:06:2f:35:
ec:44:4b:9c:90:1d:0b:19:d6:85:02:51:1d:0a:f7:7e:d9:57:
60:d7:84:27:86:c3:cd:53:e1:70:7a:48:5e:f6:64:d2:d7:b4:
6f:ab:05:fc:35:30:24:a1:9b:0c:aa:4d:45:78:b5:c2:1a:d6:
02:45:4d:fc:8f:9b:d9:37:19:88:48:3f:fb:ba:9a:9a:57:04:
e5:33:a4:ec:84:76:f0:bf:95:47:11:ba:1a:3d:60:b5:6a:b5:
d7:5a:02:6d:e3:0a:dd:a5:65:65:f0:d2:9e:05:ee:21:35:25:
8d:ca:6d:79:bd:e6:be:23:5c:c8:e0:4f:a6:6b:53:22:a9:90:
2a:bd:6c:07:26:2c:d3:8c:a4:fa:c3:d0:c0:c2:56:f5:9d:4a:
82:4c:0a:12:18:7b:17:69:81:64:21:91:7a:f5:3b:3f:c3:c8:
cf:28:05:a8:d0:6e:04:57:29:d2:cd:d4:3b:44:2a:41:69:4d:
40:be:7f:7f:ee:02:36:0f:c5:c6:30:3b:96:30:64:14:07:9d:
f6:08:00:b0:bd:85:70:ce:6d:4d:d1:10:5d:ad:22:73:e8:fc:
06:a6:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:05 2025 by rpki-client