![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa
File: 323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa (raw, json)
Hash identifier: DznholbEQ2yGtzhE5j9bbnkr/Y5h1kGWtG/VzThls1Y=
Subject key identifier: 77:CA:F6:CB:AF:52:5F:69:1F:DF:BA:1F:5B:E8:A3:12:6C:80:66:3F
Certificate issuer: /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial: 29ECBB8C85029B396F6ABBA663BBC1A380C225E2
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa
Signing time: Tue 30 Jul 2024 17:48:51 +0000
ROA not before: Tue 30 Jul 2024 17:43:51 +0000
ROA not after: Tue 29 Jul 2025 17:48:51 +0000
asID: 264500
IP address blocks: 2804:2098:c000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ec:bb:8c:85:02:9b:39:6f:6a:bb:a6:63:bb:c1:a3:80:c2:25:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Validity
Not Before: Jul 30 17:43:51 2024 GMT
Not After : Jul 29 17:48:51 2025 GMT
Subject: CN=77CAF6CBAF525F691FDFBA1F5BE8A3126C80663F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:da:04:9c:53:1d:39:16:f8:97:04:7e:35:
01:96:9e:52:45:6b:1a:20:e2:cb:9b:3d:73:5d:25:
c2:88:92:c9:44:7e:4b:fb:76:b3:cd:3a:fc:d6:7f:
54:e6:9d:3c:51:f1:cf:e1:fa:fd:2a:15:39:f1:59:
93:88:34:71:a9:5f:78:aa:cf:b7:bf:e3:83:f1:df:
79:f7:f2:b8:81:d3:63:f7:2e:4b:6d:5e:6e:9e:cc:
c0:ac:c7:47:91:db:6b:fd:3e:67:7c:29:8b:d4:a8:
52:0e:a1:be:19:03:54:b6:9a:d7:d1:3a:ac:a6:07:
91:65:f1:35:99:eb:16:50:0f:37:21:4f:6d:95:be:
c1:56:c1:9b:59:3f:b9:d0:90:50:26:ed:c9:47:3c:
75:00:40:f0:e1:db:df:e5:58:c7:44:71:72:5e:82:
ad:0b:41:8c:36:56:6c:1c:dc:92:29:be:e3:77:20:
75:66:49:88:d7:e4:4b:a5:55:7b:55:06:49:7e:78:
24:f1:5e:91:6f:02:9e:eb:6c:af:17:4d:33:4c:1b:
c4:ef:5b:82:48:cc:01:83:43:80:e5:7a:24:88:3e:
75:02:4e:54:2d:3f:7c:1d:b4:8d:7c:b3:bb:f7:0e:
df:b3:08:45:4b:f6:81:64:ab:96:2d:09:21:21:83:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:F6:CB:AF:52:5F:69:1F:DF:BA:1F:5B:E8:A3:12:6C:80:66:3F
X509v3 Authority Key Identifier:
keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a633030303a3a2f33352d3335203d3e20323634353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2098:c000::/35
Signature Algorithm: sha256WithRSAEncryption
a0:f7:d4:93:7f:38:77:a6:e4:29:a4:f0:e9:7b:75:a8:1a:5e:
91:39:f7:f4:fb:2c:97:7e:e9:5e:87:97:00:57:ee:e9:da:d5:
7a:fc:28:68:67:53:2c:53:98:8a:87:df:4b:3a:6a:76:27:e7:
01:9c:0b:6e:28:8f:9a:7b:45:86:0a:11:09:f3:e5:09:54:f8:
fc:11:a8:e6:e6:4a:c5:9c:71:39:5c:d0:a1:c2:3d:10:08:88:
14:01:7a:ae:7c:62:af:86:16:ba:a8:4d:76:a6:ba:0e:57:27:
08:44:6d:04:90:4c:32:3a:e2:e0:f7:27:5e:dc:cc:cd:34:d5:
2b:ad:4a:2f:18:f7:9d:a8:1f:26:5d:e9:75:96:73:25:ab:b5:
ca:9a:45:f4:f5:83:9f:a0:ba:16:09:e8:ff:6f:f5:e8:fa:94:
ec:c8:8c:24:68:64:29:00:d9:33:e4:58:26:a7:e0:e3:ee:64:
fe:24:ca:d2:23:a7:32:70:85:84:89:67:ba:41:88:23:d3:92:
3b:14:d2:61:e2:d3:3f:05:14:36:7d:a6:9b:e6:f9:e1:27:c5:
aa:86:3b:54:38:5b:00:1a:eb:0e:5e:66:d6:0b:54:f4:0e:ea:
f0:e1:68:5b:20:2c:64:57:ee:fe:ad:0d:79:da:0e:1a:34:56:
af:56:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:41 2025 by rpki-client