![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a633030303a3a2f33342d3334203d3e20323730323536.roa
File: 323830343a363933383a633030303a3a2f33342d3334203d3e20323730323536.roa (raw, json)
Hash identifier: N6h9gpeuFfmS2uoyrjmr8sJ2MZYL+EKTRfIJYmYBWh8=
Subject key identifier: C9:24:98:26:95:E0:68:90:41:3C:AF:8A:C0:75:00:B2:B5:90:E4:AE
Certificate issuer: /CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Certificate serial: 746450660DF3697C89F08CF203A717E69A0DBD99
Authority key identifier: E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a633030303a3a2f33342d3334203d3e20323730323536.roa
Signing time: Mon 30 Jan 2023 18:09:17 +0000
ROA not before: Mon 30 Jan 2023 18:04:17 +0000
ROA not after: Mon 29 Jan 2024 18:09:17 +0000
asID: 270256
IP address blocks: 2804:6938:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:64:50:66:0d:f3:69:7c:89:f0:8c:f2:03:a7:17:e6:9a:0d:bd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Validity
Not Before: Jan 30 18:04:17 2023 GMT
Not After : Jan 29 18:09:17 2024 GMT
Subject: CN=C924982695E06890413CAF8AC07500B2B590E4AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:1c:4c:c8:3b:4b:74:50:3f:86:8c:94:be:
ea:77:53:56:24:8a:f8:f3:e8:e7:10:d8:39:b1:2d:
d4:2a:e2:f2:4b:4d:9a:10:af:c2:4a:e8:86:9c:d5:
2b:f5:d2:59:1b:d1:4a:7e:44:d0:2b:09:d2:81:08:
93:14:3a:9e:9c:c9:8d:17:1d:e8:83:50:eb:3a:71:
20:19:9c:84:e2:6f:31:16:ed:90:de:38:06:d3:91:
96:c2:a5:e6:37:b0:06:bb:14:6a:85:36:ce:7a:60:
a6:05:e6:16:07:77:cb:cb:3d:65:22:eb:42:81:8e:
be:60:75:e7:d7:f3:95:4a:2f:22:79:6a:69:3b:20:
ec:f6:c8:5b:24:bf:8a:05:b1:c2:42:7d:e9:90:2d:
89:68:80:a6:76:eb:94:dc:20:44:de:23:8c:7d:3d:
cb:33:f0:86:93:d3:a9:71:7d:28:fe:f7:ec:c7:ed:
7d:e3:23:40:27:5c:4f:81:74:56:f1:68:12:2d:21:
5d:bb:3e:2a:7a:9e:2e:76:4c:3e:b9:57:fa:cd:ce:
b5:cf:78:9f:99:07:36:14:dc:43:c2:20:2b:b8:5d:
da:38:e7:63:39:57:c9:ca:80:c3:b4:be:da:a4:f7:
1f:28:56:8e:4e:cb:db:40:90:be:e0:01:d8:4f:3a:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:98:26:95:E0:68:90:41:3C:AF:8A:C0:75:00:B2:B5:90:E4:AE
X509v3 Authority Key Identifier:
keyid:E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a633030303a3a2f33342d3334203d3e20323730323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6938:c000::/34
Signature Algorithm: sha256WithRSAEncryption
08:92:c1:3b:12:26:63:a2:e6:a0:f6:61:47:32:5d:ae:17:5a:
e4:db:7e:3a:2b:06:f7:9d:df:b8:92:1a:77:bc:7d:a4:d7:1d:
32:11:d8:f8:49:ed:6b:d0:1d:eb:7d:22:19:d9:27:29:cd:04:
11:b7:1d:b5:b1:2d:8f:44:b2:ea:04:60:ce:b5:8c:01:6d:f0:
a1:63:c2:0a:27:aa:ac:83:18:b1:70:e8:ea:1d:39:71:93:3e:
cf:b8:48:2a:35:30:3e:d2:52:71:d0:45:c3:bb:e6:62:98:d3:
d6:b1:37:de:34:15:25:62:ac:8f:61:fb:cb:48:d8:98:90:4e:
27:94:1d:44:4c:3f:7e:81:28:d0:70:fe:9f:98:f7:12:67:96:
4a:6c:12:78:77:be:22:14:24:a9:d6:25:6e:5f:9b:86:99:9b:
5c:6e:49:aa:c7:5a:6d:35:f0:bb:8c:d0:e6:c2:dc:59:13:d4:
2b:e9:66:c4:a7:55:43:9d:91:d7:84:7a:92:34:4f:dd:20:54:
4a:61:2e:b4:e6:70:6a:39:0e:42:e3:e8:33:02:38:42:c5:89:
e4:51:30:02:00:94:0f:af:52:1e:0a:cb:0a:7a:fd:4d:03:96:
96:cc:9b:29:d0:62:ec:f6:6b:92:9c:4a:3b:89:32:29:9f:f3:
a5:7e:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:26 2025 by rpki-client