![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa
File: 323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa (raw, json)
Hash identifier: I2Z+kmzMU5LbYXkwmdXGXhBycPWJdbYgjCeBrnv4G8Y=
Subject key identifier: CA:21:64:EA:A0:CB:64:01:9D:F8:17:C4:8C:13:0A:45:65:C1:6C:1D
Certificate issuer: /CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Certificate serial: 731B2E9EA905DA1BAE9E2F9B1A4F179CF7E5CA5C
Authority key identifier: E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa
Signing time: Sat 15 Apr 2023 22:19:05 +0000
ROA not before: Sat 15 Apr 2023 22:14:05 +0000
ROA not after: Sat 13 Apr 2024 22:19:05 +0000
asID: 270256
IP address blocks: 2804:6938:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1b:2e:9e:a9:05:da:1b:ae:9e:2f:9b:1a:4f:17:9c:f7:e5:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Validity
Not Before: Apr 15 22:14:05 2023 GMT
Not After : Apr 13 22:19:05 2024 GMT
Subject: CN=CA2164EAA0CB64019DF817C48C130A4565C16C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:56:75:73:01:4b:30:17:b8:7f:99:c0:be:
ff:21:ac:7c:33:51:84:11:2b:c0:f8:cf:b3:3d:06:
d2:22:31:22:8b:82:46:29:f6:18:0a:8c:e9:72:6f:
83:d0:a4:e5:a2:10:be:ea:00:48:ca:cf:00:3e:1c:
59:09:8c:18:38:d0:ea:e3:d1:13:82:bf:e9:8a:45:
75:51:cd:ab:19:a6:3e:4a:66:01:a0:33:1a:e3:b5:
d9:ad:8f:30:2d:e0:11:cd:a8:38:7e:bf:5d:99:e4:
9c:50:8c:c6:de:62:fb:69:42:b1:ea:78:c5:5f:b9:
29:25:6b:17:6b:4f:ee:08:14:36:e7:75:14:50:1d:
69:57:51:f0:74:aa:94:f8:46:41:b0:cf:ba:ab:da:
55:90:df:00:21:df:9e:35:18:11:c4:56:11:b1:2e:
61:81:c6:b2:60:7a:52:c5:3d:7b:19:77:90:9a:71:
59:c6:fb:8d:25:b5:c9:80:88:b7:91:65:f5:3e:66:
8a:a7:b0:9d:52:c5:c5:b2:b9:03:15:9b:45:ba:f3:
cf:8f:9b:96:4b:de:ea:e8:86:62:cf:b4:05:9a:5d:
80:5a:b9:3f:e9:27:0c:03:4c:15:30:38:cf:aa:72:
f5:0a:67:13:f3:87:f7:41:d1:49:b8:86:e2:cf:d0:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:64:EA:A0:CB:64:01:9D:F8:17:C4:8C:13:0A:45:65:C1:6C:1D
X509v3 Authority Key Identifier:
keyid:E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a313030303a3a2f34302d3430203d3e20323730323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6938:1000::/40
Signature Algorithm: sha256WithRSAEncryption
29:5c:25:32:89:40:0b:6e:49:69:c4:08:23:ed:16:ab:bd:ec:
61:0a:62:78:b0:14:31:5b:d0:01:1e:2e:af:9c:65:6d:1d:01:
75:63:35:31:4d:a3:c8:95:2f:e3:fb:8d:4d:af:a1:5f:fc:1d:
37:1e:e0:a7:f7:56:ea:f9:2d:b0:d1:eb:e6:a0:37:17:ee:ac:
75:92:b5:c2:1d:bf:4a:b8:14:96:24:b0:9d:01:15:5b:15:00:
02:9a:90:81:d8:66:b2:f1:61:f1:f4:8f:b3:7d:b4:f3:10:1b:
29:b7:c1:07:fc:c5:f9:5d:54:60:99:ec:c9:e8:2d:5b:71:1c:
3f:4b:f5:3f:f8:46:a0:ff:3b:ec:9e:6b:c8:79:e9:fe:3b:f5:
e9:e4:ec:22:5e:bd:fb:53:cb:10:5a:a3:26:30:06:36:76:18:
fb:e0:35:cc:d9:44:11:5e:5f:55:59:b1:ab:7d:50:4e:07:e5:
cd:6e:d2:c2:34:83:31:0a:63:2a:b2:a6:58:f6:fa:e7:19:58:
f3:b6:05:30:5a:31:a9:f8:cf:8e:a2:80:cf:43:a7:12:cd:2f:
69:2b:57:21:24:ea:1f:70:1a:d9:e1:c6:62:74:6f:03:36:e9:
b3:69:1a:d5:ad:e1:35:0e:5a:37:a1:d0:88:35:9c:50:03:08:
d4:0e:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:35 2025 by rpki-client