![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3438203d3e203532353839.roa
File: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (raw, json)
Hash identifier: SdLCL4+ZqtxOZzJrUMb+ZispGg04FfuazCF0jE+55TU=
Subject key identifier: 2F:EA:F3:49:19:98:55:58:01:1F:20:9A:D8:8D:52:77:13:1C:08:87
Certificate issuer: /CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
Certificate serial: 7F63BF349AAFC756E58B38E974421F915432E38E
Authority key identifier: 7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3438203d3e203532353839.roa
Signing time: Fri 17 Nov 2023 18:15:00 +0000
ROA not before: Fri 17 Nov 2023 18:10:00 +0000
ROA not after: Fri 15 Nov 2024 18:15:00 +0000
asID: 52589
IP address blocks: 2804:1ad8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:63:bf:34:9a:af:c7:56:e5:8b:38:e9:74:42:1f:91:54:32:e3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
Validity
Not Before: Nov 17 18:10:00 2023 GMT
Not After : Nov 15 18:15:00 2024 GMT
Subject: CN=2FEAF34919985558011F209AD88D5277131C0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:3e:3a:58:4c:04:06:2a:88:ea:51:dd:82:
ef:ca:b6:b7:0e:45:d0:9f:f9:a8:fe:03:e5:e9:da:
01:e6:c7:81:03:c5:70:fb:94:5f:f3:9a:91:72:92:
30:4b:56:6d:8f:32:72:0e:55:c8:71:27:ce:69:0f:
ca:5c:df:60:20:20:15:8b:00:27:6c:ee:41:55:42:
e7:ed:30:95:fd:46:44:10:fb:e4:5d:7a:88:c5:80:
0d:1b:85:e5:fe:bf:15:1e:73:94:ef:d7:07:4e:61:
bb:25:46:a8:eb:b0:de:28:d3:6f:49:ae:7c:ea:c8:
d0:56:06:83:91:74:d8:0f:70:e9:f3:00:8f:a6:7a:
3e:09:89:ff:53:a2:d1:41:c2:78:ab:cf:0d:d4:6a:
e8:b2:1c:9f:dd:a2:6d:25:cf:cb:d3:6f:b9:f1:18:
9e:5a:48:d5:69:37:dc:42:6d:d1:4b:48:8d:67:0b:
25:58:2a:54:0b:67:40:97:90:c8:57:4f:f1:c9:eb:
e5:12:9a:d8:91:cd:48:53:69:2a:af:d6:66:51:e5:
38:8a:ad:64:72:0a:d3:31:a8:b5:f9:e0:11:f6:0e:
22:d4:aa:4a:40:b5:18:f8:c3:c7:85:50:9d:4e:12:
59:02:32:ad:1d:9a:4c:0d:96:44:0c:04:fc:43:bf:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EA:F3:49:19:98:55:58:01:1F:20:9A:D8:8D:52:77:13:1C:08:87
X509v3 Authority Key Identifier:
keyid:7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3438203d3e203532353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1ad8::/32
Signature Algorithm: sha256WithRSAEncryption
e9:0f:0f:dc:a3:a1:f2:75:26:c7:f0:47:c2:79:14:61:83:c6:
50:4a:c7:94:e5:44:35:fc:e8:7e:90:2f:1b:06:5e:9c:a3:16:
a8:f7:23:73:db:78:cf:12:8c:41:68:99:3f:bb:07:63:24:73:
ab:a9:d0:8b:4e:63:7a:eb:18:c8:87:26:5a:0f:e6:c5:ac:27:
83:02:18:50:20:5e:9f:17:ab:03:e9:3d:1e:db:8b:01:7f:f3:
95:21:e2:9b:78:74:08:e6:f8:40:63:99:ab:34:10:9a:8e:b2:
0a:82:bb:6d:6d:50:91:e0:84:24:23:58:50:50:6c:4d:87:7e:
e7:a0:a4:55:cd:d9:8f:75:22:f5:07:56:66:dd:e5:1d:54:4c:
43:e7:af:84:c4:46:5e:e5:e0:9e:17:57:9d:99:5c:0d:60:30:
5f:3f:46:1b:79:b7:ed:74:c5:27:7d:2d:e8:fa:85:f2:60:6a:
0c:c1:da:61:e0:a2:49:27:59:6e:3a:e7:6e:82:82:65:83:af:
3c:07:fd:5c:55:9f:09:f3:7f:09:20:d1:3c:63:6f:6a:29:f6:
b2:b4:ce:bf:c6:87:79:8d:2e:9f:75:5e:fa:10:69:79:3c:69:
55:44:4e:95:b7:23:ea:b3:e7:15:79:d5:63:77:72:1a:3a:b0:
8b:18:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:46 2025 by rpki-client