![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/323830343a336134343a343030303a3a2f33342d3334203d3e20323636303830.roa
File: 323830343a336134343a343030303a3a2f33342d3334203d3e20323636303830.roa (raw, json)
Hash identifier: jWjY3jEb9t1au1NNPL+KBCxOGcY9RRDcF4InfmEeL1Q=
Subject key identifier: 90:0D:7D:DC:42:44:D7:98:0C:40:7D:05:D4:85:44:CC:A7:92:79:98
Certificate issuer: /CN=332114655712F86B1FFE277DAA3E55AC2887C145
Certificate serial: 02C3FA9E86409AF99FDFD470C21FE8877AF92864
Authority key identifier: 33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/323830343a336134343a343030303a3a2f33342d3334203d3e20323636303830.roa
Signing time: Fri 15 Sep 2023 12:42:08 +0000
ROA not before: Fri 15 Sep 2023 12:37:08 +0000
ROA not after: Fri 13 Sep 2024 12:42:08 +0000
asID: 266080
IP address blocks: 2804:3a44:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c3:fa:9e:86:40:9a:f9:9f:df:d4:70:c2:1f:e8:87:7a:f9:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332114655712F86B1FFE277DAA3E55AC2887C145
Validity
Not Before: Sep 15 12:37:08 2023 GMT
Not After : Sep 13 12:42:08 2024 GMT
Subject: CN=900D7DDC4244D7980C407D05D48544CCA7927998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:73:4f:21:85:6a:47:77:bf:b5:ce:e3:55:
2b:3e:33:d8:0c:f0:0a:a0:b8:ae:d1:b8:ee:ab:03:
e0:87:36:30:48:e9:43:b8:6e:e9:56:74:17:50:62:
b6:4b:95:d6:6c:3c:9d:0e:74:78:d0:6b:c4:93:05:
58:a9:bd:fb:9e:e0:0a:4b:22:8d:11:13:98:de:e8:
6a:ca:53:9f:fd:be:83:7b:64:f9:5d:b5:f3:59:9b:
f3:dc:4f:7b:c6:d4:90:e4:91:f2:9a:7a:83:05:d3:
40:a4:64:3f:c6:27:a1:fd:a4:5e:b6:5f:75:a9:53:
aa:1b:71:db:44:f1:5f:95:ec:d0:f1:7d:fd:80:a3:
a2:de:27:16:71:99:0a:53:f4:ef:7f:38:ef:24:45:
1e:0a:28:16:ff:f4:cc:08:d8:b9:a9:d3:f9:c6:18:
0f:7c:2e:90:85:88:2f:52:f9:35:b5:5d:c5:ee:7c:
7c:9a:54:27:93:d5:bf:ea:28:05:74:47:98:44:7f:
7e:a0:59:c3:70:e8:30:12:93:37:7c:21:ba:e9:9b:
ff:6e:7a:e0:73:ef:17:83:ab:ee:dd:10:8d:db:63:
7f:f5:0a:d2:46:75:8c:49:16:a0:d7:46:32:e6:c4:
df:21:51:47:26:2a:f6:6c:56:22:94:4a:96:9d:a4:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:7D:DC:42:44:D7:98:0C:40:7D:05:D4:85:44:CC:A7:92:79:98
X509v3 Authority Key Identifier:
keyid:33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/332114655712F86B1FFE277DAA3E55AC2887C145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/323830343a336134343a343030303a3a2f33342d3334203d3e20323636303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3a44:4000::/34
Signature Algorithm: sha256WithRSAEncryption
46:13:ec:27:b1:cb:76:53:7d:e3:6f:56:19:c0:de:4d:25:d3:
91:ea:04:43:d8:2b:3a:c1:e5:a0:b3:a7:10:f1:e8:7f:35:4a:
59:81:d8:bf:42:52:ec:a6:72:b4:5a:0c:1a:e9:32:ec:8d:b8:
e0:c4:b1:d1:ec:7f:e2:92:23:8b:51:b6:6d:58:88:b5:41:d4:
99:16:f4:43:46:7f:76:10:98:c6:48:0f:3a:90:16:10:35:0b:
ea:16:4e:95:72:ed:ba:1c:7d:da:85:72:ff:82:2d:2d:d8:f1:
59:c9:7d:73:3f:ce:a8:5a:33:29:29:36:96:c4:8a:dd:17:d3:
ce:9c:49:74:6b:bc:2b:5f:4b:63:13:12:ff:ea:a2:53:05:ab:
56:2f:b0:6d:7c:e3:b7:aa:b1:44:ab:cf:8f:4b:d8:9c:e2:30:
78:a0:45:eb:77:58:9f:d7:ce:cc:a5:16:96:c7:d7:27:86:3a:
b7:bf:18:16:32:dc:dc:bd:e1:e6:ac:f7:21:f4:dc:50:8b:dc:
82:81:7b:f1:e3:dc:16:a7:99:c1:67:d7:12:66:c9:f9:28:2a:
33:9e:af:3e:44:ce:ce:9a:d0:c3:f8:b8:c7:17:1d:64:53:95:
a9:b2:c3:3f:4a:9c:84:aa:fc:7d:bb:31:84:2f:7a:1c:2b:26:
6e:05:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:25 2025 by rpki-client