![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa
File: 323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier: QoUHTBsqNmUunlqMfUtj5RzEC6nFd5cMm+PDEQonvsc=
Subject key identifier: BA:7D:EE:49:3C:BA:5E:FA:EA:99:20:77:F5:06:A5:0E:86:FE:E2:44
Certificate issuer: /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial: 07FC27EED624A9E5AC4FD7FE89C243FC26F0BA48
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa
Signing time: Thu 05 Oct 2023 17:51:49 +0000
ROA not before: Thu 05 Oct 2023 17:46:49 +0000
ROA not after: Thu 03 Oct 2024 17:51:49 +0000
asID: 61832
IP address blocks: 2804:1a04:26::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fc:27:ee:d6:24:a9:e5:ac:4f:d7:fe:89:c2:43:fc:26:f0:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Validity
Not Before: Oct 5 17:46:49 2023 GMT
Not After : Oct 3 17:51:49 2024 GMT
Subject: CN=BA7DEE493CBA5EFAEA992077F506A50E86FEE244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:2c:55:50:2d:8f:61:17:00:7a:e2:10:3f:
59:c9:f9:98:45:91:e0:9d:32:cf:c7:3f:e5:6b:97:
e2:f2:26:04:95:e6:16:0a:8e:22:a2:95:61:b3:dd:
2e:7b:ab:32:01:26:09:6c:6b:7b:3e:ec:34:f5:a5:
52:5e:00:cf:9c:5a:11:4f:35:08:43:4c:fe:ca:e5:
56:d4:95:ef:1c:38:67:41:3f:83:f7:51:c0:b3:b7:
45:94:43:73:79:a0:2b:ac:0f:ee:ee:20:17:b5:36:
db:a7:e8:1a:aa:55:e9:a8:dc:0d:41:5f:38:37:97:
e6:86:65:8a:8d:a4:60:ff:dd:50:cd:bc:bd:bd:e2:
d6:1e:ce:78:c9:35:c2:8a:f5:76:87:a3:55:4f:04:
1c:34:d2:90:6c:0f:1c:f7:6f:90:5c:13:29:94:2e:
7a:68:7b:5b:f5:8a:c8:cf:6e:f9:19:ba:d4:b9:0d:
44:76:73:25:90:a4:38:73:eb:30:27:2a:09:69:78:
de:d3:a2:b2:cb:2c:ad:3a:bc:d3:94:8c:29:72:3d:
98:b0:e1:78:38:86:ae:48:6a:0e:7f:de:12:32:c2:
86:6d:13:79:f7:e3:6c:b4:ce:d8:b8:f1:e7:01:51:
a1:e1:66:2c:99:d2:fd:49:bf:33:6e:9c:7e:36:34:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:EE:49:3C:BA:5E:FA:EA:99:20:77:F5:06:A5:0E:86:FE:E2:44
X509v3 Authority Key Identifier:
keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32363a3a2f34382d3438203d3e203631383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a04:26::/48
Signature Algorithm: sha256WithRSAEncryption
56:bf:35:5f:35:f8:1e:b8:3d:06:93:7e:33:ce:bb:d4:41:d9:
cb:31:02:8b:10:a2:15:02:fb:54:ad:08:48:2c:49:5c:cc:9d:
c0:3d:5b:4a:61:a1:c5:2f:47:0c:d9:76:50:b0:02:2f:1e:10:
80:0a:f8:9d:81:db:bc:69:0c:b0:e4:7a:d6:ca:4a:e8:1b:2c:
c8:ea:ef:34:a9:18:df:6e:40:a6:b9:b9:2e:b3:d8:8a:f1:9f:
d4:e7:6a:05:8c:3b:bd:d1:f2:ca:c7:9f:ea:d0:a7:9a:11:86:
a3:48:fc:ad:92:5c:d3:6d:3c:14:57:cb:b8:02:cf:e7:17:30:
3c:b2:0a:61:76:2f:09:7e:57:3f:16:85:c6:a7:c4:8e:d0:6b:
48:21:86:d4:b7:22:96:77:f7:6b:49:2d:d3:38:65:c1:1d:34:
69:c9:e6:26:06:76:d6:32:03:35:d7:24:83:b1:88:9a:75:d1:
9f:2b:8e:2e:a1:f3:32:80:41:bf:41:4f:5a:d1:73:78:b0:f9:
ba:6a:42:e9:ea:04:ae:f3:9e:05:04:cc:ad:9f:36:04:8a:4f:
71:38:63:38:9f:e2:5a:6d:03:a0:43:a6:7d:28:04:f2:ef:cc:
69:25:29:19:36:bb:c9:83:26:f0:b8:b2:86:0b:4f:1e:ba:38:
10:87:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:58 2025 by rpki-client