![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa
File: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (raw, json)
Hash identifier: A1096I3Fc1dD1Xg3zEW5U2ewCUxw54+JhCNaEEgImSs=
Subject key identifier: D5:79:16:0B:DD:F8:05:7F:E7:0A:F0:B3:A1:35:67:DA:4F:FF:A6:63
Certificate issuer: /CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Certificate serial: 7F75B9EB66566F9672D2635765CEB1E2C310CAB1
Authority key identifier: 4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa
Signing time: Tue 05 Mar 2024 16:05:40 +0000
ROA not before: Tue 05 Mar 2024 16:00:40 +0000
ROA not after: Tue 04 Mar 2025 16:05:40 +0000
asID: 264596
IP address blocks: 2804:222c:200::/40 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:75:b9:eb:66:56:6f:96:72:d2:63:57:65:ce:b1:e2:c3:10:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Validity
Not Before: Mar 5 16:00:40 2024 GMT
Not After : Mar 4 16:05:40 2025 GMT
Subject: CN=D579160BDDF8057FE70AF0B3A13567DA4FFFA663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:03:12:db:08:d6:a5:64:6b:21:85:67:fe:
1b:b7:48:4b:05:c9:3d:2a:bb:f9:98:b7:76:fa:6f:
7d:f0:21:29:48:3b:a7:5b:e3:c8:36:19:2b:d8:16:
fe:04:a7:3f:df:f1:32:f7:07:b5:81:1a:87:55:2b:
2f:d7:a3:b5:f7:72:5b:be:60:54:98:ad:01:0e:30:
9f:83:a4:d2:5b:ff:18:5e:d0:98:2c:8d:b9:93:82:
c1:b3:5a:28:1e:7c:07:46:2a:9a:d3:be:f2:0e:d9:
78:6e:8f:fb:f8:de:b5:f5:3d:fe:6b:bb:b8:93:89:
7b:28:42:bf:19:af:a3:b4:1c:55:b0:dd:2f:a7:83:
5e:1a:0f:1c:e8:31:23:f1:5b:35:50:5b:27:e4:87:
3a:7e:d7:f2:c7:3a:2f:05:42:07:3b:c7:ff:20:f1:
b8:ca:44:0a:cf:6c:7d:6c:05:53:c7:b7:0e:d7:e9:
82:62:53:62:b4:b9:96:81:5f:7d:af:c5:60:81:93:
ce:92:c1:94:00:6d:47:14:f9:02:99:63:8d:73:a0:
ad:65:b4:fb:e7:5b:99:12:44:07:c8:bc:4c:73:a8:
3c:a3:41:fd:33:30:56:bf:5c:1c:e2:f0:39:a0:db:
f9:2c:de:9d:37:d7:5c:49:44:e7:f3:0d:29:d7:3e:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:16:0B:DD:F8:05:7F:E7:0A:F0:B3:A1:35:67:DA:4F:FF:A6:63
X509v3 Authority Key Identifier:
keyid:4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:222c:200::/40
Signature Algorithm: sha256WithRSAEncryption
c9:cb:e1:d2:b8:01:07:3a:fa:ce:fe:e7:1f:2d:82:32:bf:bb:
3b:53:35:c7:8a:c1:89:77:de:b5:81:ac:67:21:7d:28:57:87:
9d:f2:20:d7:f6:f2:6f:88:1f:99:d1:92:91:38:e1:1b:83:b1:
77:91:2a:1f:27:28:0c:25:89:4e:8c:c9:8e:d2:c5:ab:43:94:
fa:47:f4:ca:c9:cc:55:2a:ca:77:8b:64:21:74:30:4c:49:d2:
6e:c7:7a:46:5f:16:7d:6f:85:d6:f7:91:63:dc:ff:ea:13:e3:
1c:c9:5f:1f:a5:98:eb:3a:b7:44:29:8f:df:ee:93:3e:2f:d7:
74:c6:ac:d6:cc:8c:68:a2:cf:68:41:0e:72:8d:4e:1c:f4:32:
08:a9:fc:3a:d0:72:eb:23:0e:2b:1a:ee:95:0b:07:74:e9:4b:
c2:21:cc:80:5b:e8:29:90:53:3d:fe:6d:8b:7e:e5:f9:4b:e9:
7a:7c:c8:d9:3a:f6:6e:80:b9:02:3c:6c:1b:05:8d:7b:f4:6f:
72:f0:ec:a4:ba:c5:a7:bd:fa:2a:5c:e4:ed:d7:a5:8e:6e:38:
12:03:8b:fe:89:91:b1:6b:df:d6:e4:43:78:65:95:4b:c7:48:
ff:e3:02:4d:c4:42:6d:1f:45:f9:37:11:1e:8b:c2:fd:0c:63:
22:3d:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:32 2025 by rpki-client