![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a383030303a3a2f33332d3333203d3e20323731323538.roa
File: 323830343a373861633a383030303a3a2f33332d3333203d3e20323731323538.roa (raw, json)
Hash identifier: NaQa/UkGoC5+30a2rCHES7xVpkKzmhkQoCe4HU+h8yA=
Subject key identifier: 21:34:AB:9C:14:DD:03:CC:7D:74:4C:96:D5:BD:98:5A:A8:F0:18:8C
Certificate issuer: /CN=12622EBAAE2C42A16A1C3233DC874E10D6050C6B
Certificate serial: 1B15ECCBAC90F9CB7E8632E193AF796A5F462DDD
Authority key identifier: 12:62:2E:BA:AE:2C:42:A1:6A:1C:32:33:DC:87:4E:10:D6:05:0C:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12622EBAAE2C42A16A1C3233DC874E10D6050C6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a383030303a3a2f33332d3333203d3e20323731323538.roa
Signing time: Thu 15 Sep 2022 14:16:59 +0000
ROA not before: Thu 15 Sep 2022 14:11:59 +0000
ROA not after: Thu 14 Sep 2023 14:16:59 +0000
asID: 271258
IP address blocks: 2804:78ac:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:15:ec:cb:ac:90:f9:cb:7e:86:32:e1:93:af:79:6a:5f:46:2d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12622EBAAE2C42A16A1C3233DC874E10D6050C6B
Validity
Not Before: Sep 15 14:11:59 2022 GMT
Not After : Sep 14 14:16:59 2023 GMT
Subject: CN=2134AB9C14DD03CC7D744C96D5BD985AA8F0188C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:18:84:4d:53:e0:f8:4f:4a:a6:03:84:e1:
31:38:81:48:d6:af:56:78:0e:7b:72:04:66:7b:82:
31:1b:e7:65:3c:f1:1b:d0:d5:0f:fa:12:af:cc:93:
72:3f:ab:a1:6c:b9:f8:61:8d:ab:c9:c6:b4:a9:4a:
a0:39:bc:0f:12:28:2b:49:e1:d3:65:72:1c:70:7a:
9a:21:b2:8c:49:fa:80:29:08:d0:e5:85:9f:a3:f6:
9f:6e:a3:90:f2:4d:de:90:62:cb:3c:c1:05:18:8a:
01:73:19:b3:01:a2:11:be:80:de:fc:2e:96:dd:fe:
d7:6b:0c:85:c1:a5:3d:13:80:5e:4e:bf:b1:80:28:
58:46:c5:55:7d:15:22:ee:48:ab:b4:23:83:73:f2:
89:25:ef:38:c4:76:19:9f:5e:af:8f:6d:e7:68:83:
45:da:b3:ed:fe:04:97:34:56:f3:2e:63:c7:ff:b9:
65:60:fa:73:ea:eb:82:c2:10:59:2d:ce:76:ac:09:
57:eb:a7:73:53:79:86:6a:e5:24:63:5d:c0:bc:c0:
dd:a4:00:b5:ee:6a:a0:52:e3:bd:99:fe:d6:a3:e4:
80:e8:c5:5e:6c:8f:bb:92:e4:61:db:29:4b:b1:1b:
4e:b5:79:5c:5f:83:58:69:fc:a7:a1:c4:aa:7e:a5:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:AB:9C:14:DD:03:CC:7D:74:4C:96:D5:BD:98:5A:A8:F0:18:8C
X509v3 Authority Key Identifier:
keyid:12:62:2E:BA:AE:2C:42:A1:6A:1C:32:33:DC:87:4E:10:D6:05:0C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/12622EBAAE2C42A16A1C3233DC874E10D6050C6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12622EBAAE2C42A16A1C3233DC874E10D6050C6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a383030303a3a2f33332d3333203d3e20323731323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:78ac:8000::/33
Signature Algorithm: sha256WithRSAEncryption
b7:e1:91:cd:16:b4:a4:f9:8e:9e:90:bb:09:74:c5:18:0d:cc:
3c:e8:dd:ef:87:27:da:17:6c:b6:42:9c:ce:76:1b:a8:89:4e:
97:71:e1:66:54:25:60:ea:25:9a:e1:2b:7f:d7:ea:0a:5a:d2:
84:ca:6c:3f:39:ab:f6:ca:e1:30:9d:88:3f:32:e9:91:10:6b:
8d:6c:3a:6b:56:16:85:cc:2e:b1:69:3a:2e:9c:73:72:0c:45:
0e:05:0f:33:a7:22:3f:96:4b:49:bc:74:2b:eb:fd:6d:b8:5e:
c3:58:98:08:9e:a6:ca:7c:25:54:f9:84:85:58:0b:b7:18:16:
0b:48:cd:b6:af:e4:7d:07:77:09:7f:c7:aa:77:8f:47:1f:e8:
a6:0d:c3:09:d5:cb:05:5a:89:11:20:9f:ae:1c:60:b0:5e:e6:
63:76:2c:a6:d8:6d:8e:7c:32:3a:70:97:df:74:b2:75:9c:21:
ac:13:c1:fc:be:08:ed:9c:09:62:d4:9e:65:e8:17:89:ec:d4:
05:55:f5:49:d3:26:52:f4:56:2f:a2:30:ba:48:15:13:05:9a:
65:6e:3f:7a:ba:6e:0e:37:9f:ef:f6:d6:7e:2d:b6:1e:cb:5a:
3c:1d:fb:58:21:c9:d0:45:cb:9d:aa:fa:da:89:9d:ef:cc:c7:
51:c3:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:00 2025 by rpki-client