![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa
File: 323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa (raw, json)
Hash identifier: wHHQrbw+ACehXPpsRYvKXKvNV1lwpNvt+CgYd29acJM=
Subject key identifier: DD:AE:21:24:AB:0C:E5:64:68:9A:A2:7B:82:A5:F4:CB:C4:82:30:1C
Certificate issuer: /CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Certificate serial: 763F3D4679FFEA22EBE100FFA4D24773CB3A0554
Authority key identifier: 5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa
Signing time: Mon 20 Nov 2023 18:16:29 +0000
ROA not before: Mon 20 Nov 2023 18:11:29 +0000
ROA not after: Mon 18 Nov 2024 18:16:29 +0000
asID: 268633
IP address blocks: 2804:542c:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3f:3d:46:79:ff:ea:22:eb:e1:00:ff:a4:d2:47:73:cb:3a:05:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Validity
Not Before: Nov 20 18:11:29 2023 GMT
Not After : Nov 18 18:16:29 2024 GMT
Subject: CN=DDAE2124AB0CE564689AA27B82A5F4CBC482301C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:3d:c5:9e:43:a9:6d:99:39:0f:df:b6:8b:
d9:a8:4c:35:21:86:64:29:9d:c3:b3:d1:53:5d:3d:
bb:a4:90:9a:86:cb:89:de:32:b2:30:f5:af:67:a6:
d1:d8:bf:3e:e4:e3:a8:61:92:43:d0:34:68:9c:f8:
0b:e3:a7:a7:63:4f:8e:1b:5a:63:f5:05:a9:2c:ca:
0f:43:7b:be:b4:d6:9c:bf:1c:65:ec:00:1b:06:10:
13:f0:dd:c5:03:3f:b3:30:d4:10:74:ff:c8:d8:8d:
07:2f:ff:5a:08:f8:78:7b:d8:2f:05:6a:22:9f:6c:
bb:aa:e1:8b:42:b8:84:20:67:82:83:9b:67:ff:4f:
84:cb:2c:53:e0:93:14:1e:c8:03:6c:33:1b:23:9f:
1f:5a:a8:81:c6:8a:a2:b8:67:72:93:49:14:30:5f:
b0:63:45:a2:45:ad:2a:00:bb:00:ab:09:6c:7b:79:
4b:b7:fc:80:0e:0a:ef:71:ec:08:d9:1c:7f:5d:58:
20:40:da:0e:73:9f:78:f9:a0:57:a9:50:be:15:7c:
34:7e:1d:7b:de:54:06:cb:ef:36:d1:a8:9d:91:82:
a0:52:b5:72:e7:2b:e7:fc:bb:11:6a:40:f7:50:1a:
1d:31:75:a4:ea:e1:56:03:d4:6f:e4:97:be:f0:ef:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:21:24:AB:0C:E5:64:68:9A:A2:7B:82:A5:F4:CB:C4:82:30:1C
X509v3 Authority Key Identifier:
keyid:5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3130303a3a2f34302d3430203d3e20323638363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:542c:100::/40
Signature Algorithm: sha256WithRSAEncryption
6d:2d:7c:62:ac:51:ea:64:dc:b6:9d:e7:ff:d8:26:2d:83:97:
69:1a:d2:67:f2:20:44:63:af:59:09:57:e1:eb:09:05:09:96:
ca:84:b8:ff:7a:77:93:ec:5a:00:51:b5:41:94:13:a9:a5:11:
5f:ed:bf:78:3a:1f:96:4f:8a:16:90:91:c9:7d:16:9f:36:a1:
d5:c2:d3:7f:d0:d6:39:25:d0:ff:79:24:db:6e:23:e4:f4:79:
1e:b4:f8:4a:11:9b:c7:34:00:ac:46:66:16:7d:f1:2c:d3:99:
9a:07:52:83:ed:5e:dd:36:95:64:b2:ba:15:7a:c8:39:af:0f:
b0:93:13:8f:6f:58:b2:b4:26:d3:53:b2:98:b6:34:87:04:27:
5d:c8:3b:f9:07:36:9d:74:11:71:c1:9a:d2:bb:4f:6c:3b:fc:
68:0f:3a:82:09:79:50:e0:7b:f2:8c:cd:33:5d:45:78:96:97:
3e:b0:1b:6c:7b:23:b0:17:96:45:1d:b9:d1:0e:f0:ff:1b:26:
51:ec:62:a5:be:07:a1:ed:f7:a7:37:26:43:9c:75:8a:29:a0:
2e:13:6e:d2:12:33:e7:e6:34:5b:10:24:5f:f4:14:fa:07:40:
b7:fe:0c:91:fd:c1:08:c1:1f:82:93:51:41:c0:d9:61:ea:39:
55:7f:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:42 2025 by rpki-client