![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a633030303a3a2f33342d3334203d3e20323634333933.roa
File: 323830343a316463383a633030303a3a2f33342d3334203d3e20323634333933.roa (raw, json)
Hash identifier: cBat3XlLbgttFB+04wcF40uXbe2dsajsn8au5crt0mA=
Subject key identifier: EE:B9:18:49:D9:97:CA:5B:4D:FD:64:57:56:DF:24:4D:FC:B6:F7:01
Certificate issuer: /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial: 61B617DCA47EF86AC0A095845418127517D97206
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a633030303a3a2f33342d3334203d3e20323634333933.roa
Signing time: Tue 10 Jan 2023 12:19:04 +0000
ROA not before: Tue 10 Jan 2023 12:14:04 +0000
ROA not after: Tue 09 Jan 2024 12:19:04 +0000
asID: 264393
IP address blocks: 2804:1dc8:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b6:17:dc:a4:7e:f8:6a:c0:a0:95:84:54:18:12:75:17:d9:72:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Validity
Not Before: Jan 10 12:14:04 2023 GMT
Not After : Jan 9 12:19:04 2024 GMT
Subject: CN=EEB91849D997CA5B4DFD645756DF244DFCB6F701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:db:43:32:f8:89:02:ca:4d:36:60:34:8c:
66:a0:ad:02:d7:ec:64:3e:c3:52:f9:9f:62:5c:91:
3a:dd:88:93:5d:a1:8a:59:bd:fb:d8:48:9a:b9:ae:
a5:43:98:a5:5d:38:4b:e2:7c:a3:d6:25:7d:ca:3c:
27:e4:5e:84:c2:c4:1b:43:c3:16:4c:b3:59:a8:44:
a7:9b:19:5a:49:23:78:be:70:7b:61:b1:89:08:f0:
c2:9f:9d:97:d7:e3:66:da:2f:0f:52:22:15:a7:f5:
17:0f:b0:1c:40:6f:68:63:ee:7e:b3:1e:b3:d2:e7:
be:c3:df:5c:1e:38:6f:54:eb:82:ff:28:76:60:d4:
1c:30:81:61:4b:e3:83:27:23:e4:18:c0:e2:db:60:
f6:cf:11:85:d9:4d:52:16:94:a7:b4:8e:16:a3:82:
9f:4b:13:5a:f3:77:b1:02:43:85:f9:fd:ac:08:14:
2b:39:56:a5:f2:2d:e3:8a:4d:fd:ed:6a:9c:9a:38:
5e:51:72:ae:ce:8d:6a:54:7e:53:a9:e1:f9:5c:a0:
18:12:b8:d2:31:74:2d:61:93:3f:24:d0:ab:6d:23:
7d:17:f3:a4:87:fd:9f:12:aa:77:94:af:eb:a0:98:
9e:25:88:55:4c:40:b5:29:8f:70:83:0e:fb:ff:4e:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:18:49:D9:97:CA:5B:4D:FD:64:57:56:DF:24:4D:FC:B6:F7:01
X509v3 Authority Key Identifier:
keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a633030303a3a2f33342d3334203d3e20323634333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dc8:c000::/34
Signature Algorithm: sha256WithRSAEncryption
3d:63:5b:8b:3c:92:a0:a0:2b:e8:97:62:67:f3:d5:90:10:26:
05:e3:45:ff:a1:5f:47:ee:30:11:c6:6a:1e:d6:e8:7e:06:09:
87:38:84:94:26:97:b6:92:fe:26:c9:bd:02:e8:94:58:6f:70:
b0:03:8d:5c:57:24:a1:9e:f2:ec:e2:a1:49:e9:db:e9:ff:e8:
10:46:5b:74:38:f7:d6:48:60:ab:6c:b8:20:c1:5d:14:92:2b:
ef:3b:03:01:1b:57:92:9d:16:06:f7:8f:35:91:86:67:fa:e1:
d6:c8:61:43:05:ae:e4:03:f6:9a:ff:e5:dc:e4:1d:d3:95:67:
3d:b0:d4:4f:85:15:0f:ef:07:7d:50:73:ba:43:64:9f:f3:e2:
54:0e:80:0b:8c:97:9d:15:53:2e:ac:64:e0:a8:75:8f:af:92:
b1:52:1b:a4:27:95:f7:bc:f7:18:86:52:ed:6e:20:a3:36:af:
ee:c3:14:eb:19:db:a2:d8:bf:38:87:31:0c:12:7d:ff:8e:15:
0f:a8:84:9b:7f:1f:66:88:e5:2d:9f:5a:cd:09:a0:a6:2c:21:
b1:25:34:96:fb:c3:29:b6:c6:d9:59:bf:e7:ab:ad:75:e5:cb:
fa:cf:68:8c:ce:a2:08:96:30:2c:d0:ae:2e:1e:6f:f5:0f:38:
26:77:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:08 2025 by rpki-client