![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa
File: 323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa (raw, json)
Hash identifier: 2hu+aNMwBzRoH9DtXK4BxUTWOu6vP0zZsTJjLXRj7I4=
Subject key identifier: 2B:64:B3:9C:9F:61:86:87:42:D9:71:92:E1:D4:15:71:DB:9C:AF:86
Certificate issuer: /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial: 3D679CEB5594A67FA7FC20A9EC51435B1161A38C
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa
Signing time: Thu 08 Feb 2024 14:05:55 +0000
ROA not before: Thu 08 Feb 2024 14:00:55 +0000
ROA not after: Thu 06 Feb 2025 14:05:55 +0000
asID: 271014
IP address blocks: 2804:74f4:d000::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:67:9c:eb:55:94:a6:7f:a7:fc:20:a9:ec:51:43:5b:11:61:a3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Validity
Not Before: Feb 8 14:00:55 2024 GMT
Not After : Feb 6 14:05:55 2025 GMT
Subject: CN=2B64B39C9F61868742D97192E1D41571DB9CAF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:23:d6:96:b3:d6:bf:74:72:fb:a4:3f:1b:
7a:bc:61:7d:3f:4a:01:1c:74:c3:14:39:81:0d:76:
44:48:42:27:31:f6:ea:1f:cd:c8:01:bf:f8:d6:d8:
21:e3:f2:ec:3f:7b:8b:d2:e4:41:7b:e3:29:85:ca:
df:7d:45:1f:3c:02:6c:5b:9f:a9:5e:53:c4:5f:a1:
e2:49:13:bc:ff:6e:e1:34:55:f8:ea:70:fa:fb:9a:
df:75:71:0f:ed:71:99:55:4b:cb:a8:28:8f:c4:ae:
ec:78:b2:62:10:12:6f:1b:fb:d5:c8:89:86:5c:96:
7f:0e:e6:98:f9:3a:eb:a4:c1:5f:d3:f0:58:84:40:
ed:f0:ae:ba:8b:5e:b7:74:b5:a0:7d:37:19:1d:6f:
bd:bb:f4:5e:19:eb:86:e4:63:62:31:6e:d1:df:fb:
43:3e:52:26:e9:55:07:8b:9a:79:c4:05:05:df:d6:
9f:37:d6:78:2b:37:94:a8:f7:99:e8:26:63:90:f9:
9f:f0:2d:b0:35:9e:84:99:21:af:a0:64:67:31:4d:
1d:4b:4f:25:23:58:b3:ce:e1:98:45:10:db:8a:7f:
00:b4:29:85:0e:de:85:cb:86:d3:c0:17:42:87:1b:
92:4a:23:ff:55:b9:a5:43:30:1a:aa:d0:36:f5:8c:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:64:B3:9C:9F:61:86:87:42:D9:71:92:E1:D4:15:71:DB:9C:AF:86
X509v3 Authority Key Identifier:
keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030303a3a2f34352d3435203d3e20323731303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:74f4:d000::/45
Signature Algorithm: sha256WithRSAEncryption
bb:34:e6:80:98:59:f9:f4:26:3e:d0:e2:40:35:3e:1a:6d:b3:
88:53:12:16:2b:18:42:c2:ab:bd:6e:87:26:8f:49:42:ff:29:
7e:3a:f2:2f:fa:ee:ed:db:8d:a9:9a:ee:07:81:74:1a:90:de:
ee:c5:02:58:ff:b7:d1:94:84:ad:b1:87:d1:ea:06:c9:d7:71:
c7:a8:19:90:64:45:78:6b:c7:7a:62:a7:fa:ac:0f:f6:b3:fc:
f8:24:7a:c4:b3:d5:4b:8f:e8:d7:44:cd:f2:53:db:3a:34:94:
3d:8b:96:4a:75:39:03:68:06:bd:65:9b:6d:be:c4:77:e0:1f:
89:c0:98:77:0c:e0:c2:4f:31:f3:07:98:67:29:41:60:d8:ac:
38:b2:1d:7f:be:0f:16:2f:3d:71:29:ba:b7:45:4b:e6:d3:50:
7d:1d:40:eb:e7:28:05:20:69:4e:7e:16:6d:e6:34:8d:80:ed:
52:14:49:66:f2:7b:0b:00:54:82:25:29:66:22:09:87:90:2d:
36:0f:2c:02:cc:58:40:78:7e:7e:db:09:ee:f5:4a:f1:4f:93:
57:b4:a5:d6:ec:46:5f:6b:2b:34:9a:9d:8d:4a:e8:b3:bb:f6:
a0:66:fa:71:e3:1a:f9:f5:1c:10:4a:4c:16:71:8a:20:b7:e2:
d3:6a:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:39 2025 by rpki-client