![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: EiOOt3poLIOAzT1RWvTd5oskiMGlGmZSYwJt3zV5yPk=
Subject key identifier: A7:92:BE:25:91:74:3D:7E:7D:DA:CC:18:9C:6D:DB:4D:E7:91:76:2F
Certificate issuer: /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial: 60E300A147AE5D110D8632C2355E2249A90034B4
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa
Signing time: Thu 03 Aug 2023 13:09:08 +0000
ROA not before: Thu 03 Aug 2023 13:04:08 +0000
ROA not after: Thu 01 Aug 2024 13:09:08 +0000
asID: 262617
IP address blocks: 2804:90c:204::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e3:00:a1:47:ae:5d:11:0d:86:32:c2:35:5e:22:49:a9:00:34:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Validity
Not Before: Aug 3 13:04:08 2023 GMT
Not After : Aug 1 13:09:08 2024 GMT
Subject: CN=A792BE2591743D7E7DDACC189C6DDB4DE791762F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:94:b0:18:f6:8d:5c:d3:f7:ce:8e:6f:9d:
49:b0:97:ff:9e:4a:8a:82:29:2a:23:43:c6:f2:a1:
28:ee:8b:dc:3f:86:31:d2:13:b8:e1:64:8a:0d:44:
f5:7c:91:f8:30:a5:07:fc:c6:b1:d5:62:ac:2a:0a:
10:57:4f:cb:78:79:4b:9f:b6:90:a6:fa:c4:5e:13:
65:3d:a8:70:a1:43:f0:30:40:09:9d:12:7f:c9:47:
9c:0a:70:0c:4d:c4:17:54:05:8c:df:6f:80:22:fa:
1a:d5:65:71:32:d7:9a:40:63:c6:f2:eb:1d:fa:67:
c4:30:d2:44:3d:75:28:fd:9a:3f:72:86:74:c6:47:
d5:b8:0a:c7:03:d0:7f:8d:04:b5:13:0f:60:ec:f5:
13:73:26:63:50:ff:cc:c4:ea:93:c5:77:97:24:a6:
69:c4:4a:12:c4:d5:7e:42:64:9c:c9:a1:38:67:6f:
61:23:6b:2a:6c:5f:00:a0:45:07:f8:f5:7f:15:1e:
5c:95:ea:12:fc:70:57:99:d2:a5:69:3d:62:d4:14:
b5:89:0f:05:30:74:a6:c9:5a:e1:83:88:d3:60:30:
85:7c:2e:35:32:65:35:1f:61:71:32:7f:3f:4d:3b:
3e:a2:12:1d:0b:bd:ee:b7:13:b5:b5:7e:18:02:e0:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:92:BE:25:91:74:3D:7E:7D:DA:CC:18:9C:6D:DB:4D:E7:91:76:2F
X509v3 Authority Key Identifier:
keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:204::/48
Signature Algorithm: sha256WithRSAEncryption
7e:7c:d6:e8:26:c7:e5:7d:f6:4f:7a:ab:17:8e:db:fc:6e:80:
dd:32:8c:8e:27:9b:d9:9a:6b:ef:ef:87:f3:46:0d:0a:61:51:
93:6d:46:fe:05:61:b8:3a:5d:05:66:5c:56:6e:2f:36:7d:db:
e8:9a:5d:33:91:cc:59:dc:84:5d:45:53:13:d3:9a:32:13:5f:
b4:3e:3f:3f:1e:a5:e0:c7:1b:30:b9:f4:18:a2:f7:8d:2d:d3:
17:4f:a1:ed:ed:85:de:ca:a1:17:d1:8e:e2:df:1e:1a:a3:b8:
87:2a:42:89:85:1e:40:c1:e1:d8:0f:24:5e:9e:d1:74:8b:82:
dd:aa:35:e1:e5:8f:d9:43:c7:72:22:ae:1a:e3:8b:dd:e5:45:
22:20:47:28:d7:3e:52:b3:33:16:cb:c5:4f:1b:98:1f:e8:c1:
e1:d4:65:b1:90:e4:da:27:c6:7a:36:a4:fa:d0:70:e9:95:3e:
97:a8:2a:59:73:5f:bd:4e:62:af:f1:e3:09:bf:95:e8:e5:d6:
44:ee:35:99:3f:27:52:6d:cb:7a:f3:c5:16:47:b2:d5:69:01:
a1:a7:e4:11:c8:c7:db:70:43:21:fb:2a:93:2c:00:02:ed:d1:
71:6e:a9:73:16:2d:56:ec:2a:b8:4b:30:e2:e1:71:85:08:3e:
95:24:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:38 2025 by rpki-client