![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a383030303a3a2f33332d3333203d3e203532363137.roa
File: 323830343a6436343a383030303a3a2f33332d3333203d3e203532363137.roa (raw, json)
Hash identifier: QwRT4H6UHS9xOxrJvYSohx+R2Zqey4MeM+GmhNOU6bU=
Subject key identifier: AE:C0:60:EE:77:27:72:FA:55:65:65:FE:DF:13:B0:B5:BB:78:6A:3B
Certificate issuer: /CN=713B957336855F584C130E6F0AF402476B26B912
Certificate serial: 5AFF33D33052148E45EE3F40922424AA01EAC315
Authority key identifier: 71:3B:95:73:36:85:5F:58:4C:13:0E:6F:0A:F4:02:47:6B:26:B9:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/713B957336855F584C130E6F0AF402476B26B912.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a383030303a3a2f33332d3333203d3e203532363137.roa
Signing time: Tue 06 Dec 2022 15:19:13 +0000
ROA not before: Tue 06 Dec 2022 15:14:13 +0000
ROA not after: Tue 05 Dec 2023 15:19:13 +0000
asID: 52617
IP address blocks: 2804:d64:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ff:33:d3:30:52:14:8e:45:ee:3f:40:92:24:24:aa:01:ea:c3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713B957336855F584C130E6F0AF402476B26B912
Validity
Not Before: Dec 6 15:14:13 2022 GMT
Not After : Dec 5 15:19:13 2023 GMT
Subject: CN=AEC060EE772772FA556565FEDF13B0B5BB786A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:0c:f7:65:d2:6c:d9:2e:98:61:a8:50:a4:
37:d6:04:f9:37:bb:01:df:41:22:ae:aa:57:5e:08:
17:f2:30:53:e0:12:12:0e:29:31:62:a2:1b:6f:1b:
2d:76:2d:a7:0a:fe:54:9d:7c:78:45:83:f6:0e:68:
72:42:6a:43:69:7b:0a:1a:a1:a5:d6:70:8c:39:03:
f6:3b:98:c5:4e:be:a0:cd:85:6a:97:06:22:76:b4:
2e:4f:f9:be:16:b8:cb:51:5a:6c:a0:8c:4b:f8:c4:
85:d5:f2:64:4a:92:bd:31:9f:c9:5b:26:02:cb:14:
02:46:15:84:74:48:21:84:f9:3b:da:cc:90:d1:f0:
b7:82:6f:71:dd:cc:ed:72:29:8e:d4:97:44:ac:88:
27:3c:6b:ae:da:4f:f2:e2:ac:1d:53:d7:ba:a6:27:
6c:b0:ee:28:01:3e:ce:46:1e:c6:67:81:ca:26:87:
27:12:60:19:d1:52:e8:64:d2:9d:d8:be:98:d0:e3:
80:55:6a:76:d2:0a:c2:c9:32:92:95:39:38:cc:7e:
d7:4f:9c:f6:74:df:52:f0:c8:66:ff:96:f1:01:f9:
97:71:63:df:d4:c4:e9:ae:d8:19:f1:24:39:e8:0b:
33:6e:c4:ec:ce:44:db:0d:5f:7d:59:e2:db:7f:f6:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:60:EE:77:27:72:FA:55:65:65:FE:DF:13:B0:B5:BB:78:6A:3B
X509v3 Authority Key Identifier:
keyid:71:3B:95:73:36:85:5F:58:4C:13:0E:6F:0A:F4:02:47:6B:26:B9:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/713B957336855F584C130E6F0AF402476B26B912.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/713B957336855F584C130E6F0AF402476B26B912.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/323830343a6436343a383030303a3a2f33332d3333203d3e203532363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d64:8000::/33
Signature Algorithm: sha256WithRSAEncryption
97:e5:9d:cb:f2:c6:41:c8:c4:a6:93:ff:80:e6:a9:ad:d1:7f:
4a:54:51:1f:8d:71:c6:0c:61:82:b6:fe:bf:3a:31:ca:22:87:
00:fb:7a:98:11:57:e0:cf:ed:27:b9:60:53:d8:fc:6f:d0:f4:
68:17:45:f9:80:58:72:9d:cf:d0:37:3d:cd:f3:53:ce:65:4e:
04:31:ec:ce:a2:8e:a5:b1:02:e7:2d:b5:a1:19:70:40:65:fb:
10:a0:80:68:28:7b:74:41:b1:54:b9:c7:21:64:8b:fb:c0:8b:
55:d9:1c:60:a5:47:01:5a:0c:ef:19:96:d1:4c:5e:9a:fa:0f:
b8:20:6a:02:6e:e0:90:2a:3c:94:9b:9f:59:bd:0b:42:02:f4:
24:41:ec:61:f4:d3:27:f8:55:f5:56:f0:78:58:87:a0:3d:58:
1c:ca:9a:7c:53:79:84:19:54:8a:cb:d1:0b:d8:6b:78:f4:d1:
2b:d9:34:75:8e:7a:15:93:d3:65:88:19:2d:2a:23:96:03:8e:
e4:b0:8b:10:10:0e:e0:a1:51:3d:be:61:79:1e:82:05:f0:ec:
84:44:78:52:29:d2:e4:08:20:dd:81:82:41:45:3a:43:5c:cd:
f8:d4:18:11:75:7f:17:a5:5d:ca:7e:f3:51:3a:4b:5b:3f:4c:
bb:aa:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:46 2025 by rpki-client