![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
File: 323830343a316464343a3a2f33322d3334203d3e20323634333937.roa (raw, json)
Hash identifier: wCoCAAAbSUmMa5ZqmxzZks77DW8vZieeq2SCD5CBQ18=
Subject key identifier: EF:B7:C1:C3:8B:91:5C:9E:BC:C3:87:76:9A:B6:8B:8A:2A:68:CE:2D
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 46BAB379E8D2E57F076F96F59D3066E204E59D8E
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 18:29:48 +0000
ROA not before: Mon 16 Dec 2024 18:24:48 +0000
ROA not after: Mon 15 Dec 2025 18:29:48 +0000
asID: 264397
IP address blocks: 2804:1dd4::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ba:b3:79:e8:d2:e5:7f:07:6f:96:f5:9d:30:66:e2:04:e5:9d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 18:24:48 2024 GMT
Not After : Dec 15 18:29:48 2025 GMT
Subject: CN=EFB7C1C38B915C9EBCC387769AB68B8A2A68CE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:c6:74:ad:50:6f:21:44:71:26:dc:80:be:
33:ef:6e:32:28:a5:f5:46:63:ea:dd:3e:20:fb:24:
e4:3f:33:98:23:5f:41:bd:fb:0b:07:74:2f:58:2b:
90:58:c5:ab:70:e4:c6:db:46:2c:2e:de:a1:43:83:
37:85:6b:9a:43:44:99:d3:28:57:10:24:95:56:32:
a2:fe:e7:81:73:9c:78:60:d4:b8:87:f4:d6:ef:55:
8d:ba:88:19:49:c8:f4:c2:13:96:c5:f0:f9:a5:27:
59:40:11:1e:c1:55:b7:6f:00:a0:ee:44:70:62:c3:
e0:18:51:8d:fe:25:64:50:49:f7:b5:1e:a6:5a:b4:
6e:4e:81:b6:d4:72:72:02:16:96:98:bb:68:c2:e5:
92:c4:b5:07:03:df:30:11:37:d4:a8:58:bd:fb:48:
a3:78:bc:28:9a:48:f4:e2:84:4a:5e:3d:4d:54:52:
09:2d:ec:a4:a3:21:07:99:bd:d7:2b:df:10:23:67:
c9:83:df:1e:96:cc:79:51:0f:e7:c8:f5:c7:c5:07:
2e:eb:2f:7a:00:6f:e4:47:a5:3f:1f:fc:7b:ec:dd:
0b:26:82:dd:12:af:83:66:20:1f:42:54:66:16:29:
69:6e:b5:8f:d5:23:47:c6:4a:5e:dd:f4:eb:33:1f:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:C1:C3:8B:91:5C:9E:BC:C3:87:76:9A:B6:8B:8A:2A:68:CE:2D
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dd4::/32
Signature Algorithm: sha256WithRSAEncryption
47:e3:53:90:3c:c0:67:16:0e:c8:cb:1d:b2:7b:be:ea:6d:65:
69:88:b8:d3:d7:eb:0d:0a:f9:8e:aa:15:6a:a5:a8:3f:9c:e0:
97:ed:36:38:61:a8:30:08:fe:54:18:e6:a2:85:42:56:44:d7:
cc:31:28:d6:c5:bd:be:23:64:f1:d8:ce:fe:01:34:2c:cf:ac:
db:a3:56:0f:5c:0e:ba:9d:19:59:5e:4c:0d:d0:85:55:a2:7f:
76:73:95:53:62:0d:64:e3:6c:62:fa:30:35:40:2a:88:fb:4c:
0a:68:62:a0:6d:bc:e8:14:48:8b:a0:cf:ac:ae:74:b3:79:b5:
67:77:2a:7e:c8:3d:ce:59:fa:3c:0d:c1:5e:d7:3e:01:bf:79:
c4:4b:ae:33:28:26:f3:00:3d:71:a7:a8:5e:12:47:88:e1:b6:
d0:84:89:8a:6b:51:c4:ad:41:c6:d2:a1:95:57:96:0c:03:1f:
d6:2f:98:92:79:aa:f7:53:fa:30:59:99:2c:64:76:66:01:f4:
07:46:70:56:46:d0:35:a6:60:d3:35:d1:4e:99:3a:57:c1:bf:
45:cd:33:55:85:8a:c8:ee:36:ac:33:e0:f6:b7:5e:0d:29:d6:
32:fa:8e:b9:0c:83:e9:fd:94:52:be:f3:a8:cb:dc:19:eb:3e:
3c:ef:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:00 2025 by rpki-client