![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a3a2f33332d3333203d3e203238353737.roa
File: 323830343a6437343a3a2f33332d3333203d3e203238353737.roa (raw, json)
Hash identifier: jnRdLAMG/ghdUXipEdj2c1tqgWSHDHnaJ40DK4iMPsQ=
Subject key identifier: 57:E7:F2:3A:BB:8A:EF:D6:AD:B3:65:04:E9:6D:88:1E:F1:D4:7A:FE
Certificate issuer: /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial: 7EC995779EA33B35F7FB4D69C0A3DD87EFC939BA
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a3a2f33332d3333203d3e203238353737.roa
Signing time: Tue 30 Jul 2024 18:57:00 +0000
ROA not before: Tue 30 Jul 2024 18:52:00 +0000
ROA not after: Tue 29 Jul 2025 18:57:00 +0000
asID: 28577
IP address blocks: 2804:d74::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c9:95:77:9e:a3:3b:35:f7:fb:4d:69:c0:a3:dd:87:ef:c9:39:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Validity
Not Before: Jul 30 18:52:00 2024 GMT
Not After : Jul 29 18:57:00 2025 GMT
Subject: CN=57E7F23ABB8AEFD6ADB36504E96D881EF1D47AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:7b:9e:46:e9:32:7d:48:7c:36:a8:5a:f8:
f2:7c:4e:e8:25:94:dd:ee:1f:da:d9:2a:9c:be:a8:
20:0b:6d:4c:85:63:62:44:64:e9:06:fd:8b:e7:08:
84:c7:9b:13:e3:e4:54:3f:eb:2b:f1:8f:67:2f:f1:
1f:71:f5:2f:1d:e1:21:62:44:f5:6b:51:72:c6:79:
92:67:15:b5:a0:61:d7:24:6c:77:81:2f:4b:7d:f3:
36:f3:3f:ce:72:7e:1a:93:46:72:ac:90:99:16:d4:
fb:f3:85:96:73:c0:23:e7:aa:a0:26:04:25:f7:1c:
47:b3:f5:cb:31:33:97:f7:9c:48:8d:43:e8:4e:14:
c9:73:07:26:8b:54:0b:cb:66:b0:d9:0f:81:18:5a:
c8:21:fe:61:45:13:64:8e:42:09:6f:bb:84:1e:83:
e0:ed:b3:79:ff:65:24:d8:f8:ba:c1:d7:15:f4:fe:
99:f9:26:bd:0e:f4:3a:0d:a0:f8:69:a0:5f:08:80:
95:24:be:7c:33:77:14:23:5b:d7:16:18:c9:ac:e0:
42:b0:a0:c7:97:b8:16:8e:02:23:cf:47:d6:2a:fd:
37:33:9c:58:6c:b9:ac:13:31:3f:42:14:59:d1:16:
01:49:ac:59:ce:20:51:06:03:e0:ae:02:dc:81:7f:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:F2:3A:BB:8A:EF:D6:AD:B3:65:04:E9:6D:88:1E:F1:D4:7A:FE
X509v3 Authority Key Identifier:
keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/323830343a6437343a3a2f33332d3333203d3e203238353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d74::/33
Signature Algorithm: sha256WithRSAEncryption
22:0a:85:fe:6d:60:ee:5b:9b:77:ef:4b:99:4b:17:71:90:75:
c1:7e:08:b6:a9:28:c8:c5:89:2a:93:9d:a3:62:70:d0:d9:d2:
82:89:2c:be:3d:18:ec:cf:0c:22:a0:06:b4:45:76:f9:93:8b:
3e:3c:3f:76:fc:15:87:df:a2:f5:9d:66:58:b4:af:fa:03:a2:
93:bf:e0:b8:a3:13:49:1c:db:53:05:70:67:27:9e:bb:b1:f4:
ff:14:c2:29:ad:3a:86:1a:0b:84:b0:d8:ef:fa:f7:81:4e:68:
b5:f9:1f:c3:da:c7:9d:7d:69:d4:c0:21:50:92:03:92:df:ad:
75:67:cc:d2:d1:2d:d4:f8:54:84:4f:e0:55:e5:be:05:15:0b:
9e:a6:30:6a:ec:33:2e:72:06:4b:95:bb:ac:3f:a4:aa:eb:89:
fa:94:38:d0:2a:b7:3a:c2:02:98:8d:9e:f4:de:d9:da:55:2f:
da:b4:84:6c:55:12:91:c8:8d:c3:b9:c2:24:8f:54:13:ec:fd:
a9:24:6a:dc:8a:df:79:a6:e4:e2:ed:c9:53:bd:36:df:22:4b:
4c:7e:c0:3f:86:d5:ad:40:0f:0a:74:b6:7c:0b:1b:96:10:a0:
c3:08:95:0d:5c:f1:67:4e:57:49:3a:28:0b:c7:7f:4b:f7:05:
08:6e:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:00 2025 by rpki-client