![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3130303a3a2f34302d3430203d3e20323634353936.roa
File: 323830343a323232633a3130303a3a2f34302d3430203d3e20323634353936.roa (raw, json)
Hash identifier: JeCtm4eN+bqTnHg/EwEXvYg0GnShZBfp+JGRK7jV1HM=
Subject key identifier: 63:9D:2F:DB:6A:FD:D0:05:5F:60:7A:9A:A3:9A:DC:6F:6E:6F:3A:F9
Certificate issuer: /CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
Certificate serial: 6090C771E62D731255FA86C0E67B6AA428A490CD
Authority key identifier: 9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3130303a3a2f34302d3430203d3e20323634353936.roa
Signing time: Tue 07 Nov 2023 15:19:11 +0000
ROA not before: Tue 07 Nov 2023 15:14:11 +0000
ROA not after: Tue 05 Nov 2024 15:19:11 +0000
asID: 264596
IP address blocks: 2804:222c:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:90:c7:71:e6:2d:73:12:55:fa:86:c0:e6:7b:6a:a4:28:a4:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
Validity
Not Before: Nov 7 15:14:11 2023 GMT
Not After : Nov 5 15:19:11 2024 GMT
Subject: CN=639D2FDB6AFDD0055F607A9AA39ADC6F6E6F3AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:41:39:85:19:83:67:4c:22:3b:5b:d0:4f:
a4:71:ab:7f:58:ff:f7:5d:58:f7:20:79:60:b5:7c:
d5:e2:28:c1:de:39:66:3a:aa:f3:0f:ee:9f:a7:9b:
0a:33:19:75:cb:c5:2f:77:10:b1:c3:26:05:1a:5c:
6f:cf:1f:6f:ef:dc:ba:fb:df:36:2b:d8:d2:80:7a:
21:20:22:f5:9f:49:fa:a1:a1:bb:94:6b:b2:58:83:
c0:05:60:5c:01:a7:94:3f:5b:c1:e8:c4:71:09:cf:
2d:82:29:93:16:61:c6:c1:41:1f:51:33:27:40:41:
bf:80:b0:8d:06:7c:da:1e:dd:52:d0:fd:7b:f1:b3:
16:ff:2a:2f:4c:95:2a:7b:36:ec:bb:a1:62:0e:da:
51:54:34:92:33:05:5a:33:9f:72:e1:76:78:f5:a7:
48:fc:83:0e:00:81:3d:1e:41:c0:84:91:52:03:e6:
ba:b2:0a:56:39:ae:49:ba:e5:3a:56:fd:69:21:e2:
e3:f4:ff:c7:18:1f:a5:94:cd:37:fd:6d:2a:a3:51:
61:eb:9f:ac:df:61:6e:dd:cc:da:bc:7d:23:6a:8d:
d0:a7:b5:94:84:18:08:83:a6:42:f4:79:0a:c2:89:
f8:d9:fc:29:d6:32:81:d3:90:81:04:57:7c:ff:85:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:2F:DB:6A:FD:D0:05:5F:60:7A:9A:A3:9A:DC:6F:6E:6F:3A:F9
X509v3 Authority Key Identifier:
keyid:9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3130303a3a2f34302d3430203d3e20323634353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:222c:100::/40
Signature Algorithm: sha256WithRSAEncryption
41:58:3c:c9:63:ad:a7:19:4f:bd:1d:59:f5:cb:98:f0:e5:b9:
3e:5b:37:38:7b:9c:5c:5a:0f:ef:4f:ad:3c:1c:4a:02:85:fa:
a6:61:e2:ac:3f:68:2e:b3:5a:54:9a:7b:e6:e7:f3:0c:40:11:
8b:46:a7:a1:78:95:2e:c8:58:2e:07:38:fc:2b:85:09:97:fb:
87:02:19:dd:9e:3f:77:1e:41:f1:c0:ea:7f:70:c0:2c:80:bf:
2a:53:f6:f8:07:ef:17:f6:f9:5f:5f:ab:5c:3a:da:a2:23:4e:
24:6c:ea:df:bb:ac:31:04:de:8a:b7:cd:ed:23:12:85:4c:c8:
95:fe:61:07:22:f2:77:4e:46:83:5a:fd:d3:b5:aa:95:46:ec:
ce:fc:26:ea:72:bf:e0:75:17:5d:3c:ce:c0:cf:55:71:b3:c6:
af:f0:6a:81:83:72:d8:70:64:6e:10:69:5a:1f:a7:b8:11:73:
b5:a5:6d:2d:62:e7:48:c6:5b:fe:8b:33:7f:8b:45:65:1b:5b:
5d:02:4d:c5:cf:28:f9:42:65:83:c1:5a:00:1a:ef:64:9c:1a:
d6:7f:de:06:50:da:f6:19:55:e9:b4:fc:be:a7:cf:c7:95:a5:
26:3d:1e:bf:4c:af:e2:2a:fa:21:84:4a:aa:f8:fb:42:5a:01:
a7:b1:26:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYJDHceYtcxJV+obA5ntqpCikkM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyOEQ2NTdCOTQyQTZEQTg1N0JCMjNDOEI2Njg0QUJD
NzI2MTczODAeFw0yMzExMDcxNTE0MTFaFw0yNDExMDUxNTE5MTFaMDMxMTAvBgNV
BAMTKDYzOUQyRkRCNkFGREQwMDU1RjYwN0E5QUEzOUFEQzZGNkU2RjNBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnkE5hRmDZ0wiO1vQT6Rxq39Y
//ddWPcgeWC1fNXiKMHeOWY6qvMP7p+nmwozGXXLxS93ELHDJgUaXG/PH2/v3Lr7
3zYr2NKAeiEgIvWfSfqhobuUa7JYg8AFYFwBp5Q/W8HoxHEJzy2CKZMWYcbBQR9R
MydAQb+AsI0GfNoe3VLQ/Xvxsxb/Ki9MlSp7Nuy7oWIO2lFUNJIzBVozn3Lhdnj1
p0j8gw4AgT0eQcCEkVID5rqyClY5rkm65TpW/Wkh4uP0/8cYH6WUzTf9bSqjUWHr
n6zfYW7dzNq8fSNqjdCntZSEGAiDpkL0eQrCifjZ/CnWMoHTkIEEV3z/haolAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUY50v22r90AVfYHqao5rcb25vOvkwHwYDVR0j
BBgwFoAUnSjWV7lCptqFe7I8i2aEq8cmFzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVRO
VlovMC85RDI4RDY1N0I5NDJBNkRBODU3QkIyM0M4QjY2ODRBQkM3MjYxNzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEMjhENjU3Qjk0MkE2REE4
NTdCQjIzQzhCNjY4NEFCQzcyNjE3MzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLbUZEbkY2Ylh2RVliTHBibmhaRVdFa3hqR3JaUlFwcFhRSzRGblVUTlZaLzAv
MzIzODMwMzQzYTMyMzIzMjYzM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzQzNTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCIsATANBgkqhkiG9w0BAQsFAAOC
AQEAQVg8yWOtpxlPvR1Z9cuY8OW5Pls3OHucXFoP70+tPBxKAoX6pmHirD9oLrNa
VJp75ufzDEARi0anoXiVLshYLgc4/CuFCZf7hwIZ3Z4/dx5B8cDqf3DALIC/KlP2
+AfvF/b5X1+rXDraoiNOJGzq37usMQTeirfN7SMShUzIlf5hByLyd05Gg1r907Wq
lUbszvwm6nK/4HUXXTzOwM9VcbPGr/BqgYNy2HBkbhBpWh+nuBFztaVtLWLnSMZb
/oszf4tFZRtbXQJNxc8o+UJlg8FaABrvZJwa1n/eBlDa9hlV6bT8vqfPx5WlJj0e
v0yv4ir6IYRKqvj7QloBp7EmJg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:42 2025 by rpki-client