![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa
File: 323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa (raw, json)
Hash identifier: hrXVtzDwmO955HPWNR+RvbeZ/qU2avKJxd7ZhEIsrVQ=
Subject key identifier: 03:C5:2D:34:3B:51:4D:B6:0D:18:61:D9:A8:91:D8:95:47:86:BD:C1
Certificate issuer: /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial: 0F518B7D755A4B3F2226E7DB96A8BDAC6796441B
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa
Signing time: Wed 17 Jul 2024 19:34:46 +0000
ROA not before: Wed 17 Jul 2024 19:29:46 +0000
ROA not after: Wed 16 Jul 2025 19:34:46 +0000
asID: 271353
IP address blocks: 2804:7a30:4::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:51:8b:7d:75:5a:4b:3f:22:26:e7:db:96:a8:bd:ac:67:96:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
Validity
Not Before: Jul 17 19:29:46 2024 GMT
Not After : Jul 16 19:34:46 2025 GMT
Subject: CN=03C52D343B514DB60D1861D9A891D8954786BDC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:c1:10:af:e1:62:a0:c0:9f:8e:9c:00:08:
ec:ea:a0:d5:3e:df:fb:9f:92:2d:4b:a6:bd:b4:00:
7b:b6:c6:9b:2a:89:5d:cc:32:37:d6:16:c6:55:8b:
dd:5d:aa:f0:56:34:ba:03:43:ce:8b:5f:ec:af:1b:
1a:c0:df:b0:d4:87:be:51:14:a9:55:70:bd:42:ad:
2e:03:af:a6:95:ad:30:6f:bb:fb:68:68:6f:a0:9e:
de:c3:89:2d:4d:ae:d2:a3:52:7d:72:ac:54:6c:6d:
9c:a1:c9:e3:2e:0b:8a:b3:c5:53:16:db:02:da:e1:
e9:48:9b:c9:94:56:e9:5c:7e:0a:ad:fd:ac:a6:92:
0e:76:5b:1c:f8:be:5c:21:1a:1f:ef:a6:e6:d4:e6:
69:da:32:4b:9d:a0:66:e3:36:3a:8d:9e:82:53:ce:
68:50:fc:b5:6e:fd:1c:da:61:0a:c6:1b:ec:48:b7:
fe:b1:a8:52:12:a4:94:53:37:3b:7f:c0:8a:e9:10:
16:ac:f1:4e:95:58:ac:02:23:06:57:d4:79:dc:f8:
c5:3b:a8:7a:da:08:20:be:c1:91:fe:33:48:39:3f:
d0:4e:a1:05:f1:4a:b9:b9:f4:38:df:36:87:5b:b5:
69:3f:28:bb:80:52:0d:a0:76:73:d5:cb:2f:82:b1:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:2D:34:3B:51:4D:B6:0D:18:61:D9:A8:91:D8:95:47:86:BD:C1
X509v3 Authority Key Identifier:
keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a343a3a2f34372d3437203d3e20323731333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a30:4::/47
Signature Algorithm: sha256WithRSAEncryption
65:6e:2e:0b:e8:d9:47:3c:c5:67:98:e7:39:b0:a0:83:17:8b:
25:b5:6e:43:75:bc:14:7e:a8:8c:29:77:ec:87:71:bd:3b:13:
09:d8:94:6e:40:5b:db:be:cc:6d:ed:bc:07:cd:ed:8c:b3:47:
6f:68:3a:7d:f4:51:08:29:61:08:a3:a8:5e:cc:b3:0f:ff:dc:
99:78:ed:fa:5c:c8:29:a6:5b:7b:0a:60:17:48:72:5b:41:c5:
af:d8:53:4e:d3:a1:e6:16:0b:9e:53:27:59:1e:d2:93:58:6e:
43:1c:58:0f:33:45:ee:1f:13:fd:ea:ad:e8:7b:7c:0a:19:32:
8e:d8:c0:57:25:da:91:d8:c7:77:31:fd:fd:5a:e1:bf:25:05:
63:1a:18:cf:e6:b9:bf:cb:e0:14:00:13:49:fa:75:24:c7:db:
eb:5c:fe:2e:5a:4e:c8:a1:e5:9f:36:57:7f:19:22:10:c1:d2:
54:d1:34:19:8a:a6:33:cb:ec:94:ba:d4:0c:88:98:3c:37:6b:
30:9f:c2:5d:02:47:17:b7:c4:33:af:c2:05:79:56:b4:f7:95:
61:8c:91:7d:68:4a:0b:f1:eb:af:3e:e0:0d:09:da:ad:d8:1c:
d7:db:41:a8:a7:5d:93:f4:d9:7e:95:3c:3d:f6:5a:ec:c3:ef:
c5:d2:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:02 2025 by rpki-client