![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a383030303a3a2f33342d3334203d3e20323731333335.roa
File: 323830343a373965383a383030303a3a2f33342d3334203d3e20323731333335.roa (raw, json)
Hash identifier: 31SsBw3jp789IGMeOHIV0qchifI1Nw3DosbdGqGwz7E=
Subject key identifier: D1:1C:15:9D:B1:87:94:E0:32:93:0B:FE:DA:6D:D0:67:8F:3D:DE:87
Certificate issuer: /CN=F480C4379294C536904F68B3310E84F3A994704C
Certificate serial: 35C7EE39F49B89133B5C5EC3E071BCD8383CAC68
Authority key identifier: F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a383030303a3a2f33342d3334203d3e20323731333335.roa
Signing time: Sat 11 Nov 2023 13:50:33 +0000
ROA not before: Sat 11 Nov 2023 13:45:33 +0000
ROA not after: Sat 09 Nov 2024 13:50:33 +0000
asID: 271335
IP address blocks: 2804:79e8:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c7:ee:39:f4:9b:89:13:3b:5c:5e:c3:e0:71:bc:d8:38:3c:ac:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F480C4379294C536904F68B3310E84F3A994704C
Validity
Not Before: Nov 11 13:45:33 2023 GMT
Not After : Nov 9 13:50:33 2024 GMT
Subject: CN=D11C159DB18794E032930BFEDA6DD0678F3DDE87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:b9:36:58:51:9e:bd:5a:9c:fc:97:a5:55:
5d:3c:81:83:d8:46:c0:95:4e:b9:ec:08:cf:83:fd:
be:91:a7:d7:ce:9b:31:c3:1e:6c:56:8f:a7:8e:1c:
04:d1:6b:50:fa:d3:77:cb:e5:2f:2e:f3:a7:3e:20:
2c:08:57:a8:0d:2b:e4:19:b0:68:e5:6f:62:ad:62:
97:c6:11:b8:37:b0:70:ff:0f:f2:a8:59:4b:54:d9:
a9:bc:bd:c2:17:32:42:20:93:b8:11:89:3f:5f:5c:
11:d3:f2:ba:4d:a0:54:f8:ea:36:b6:82:4f:63:d9:
57:ab:e1:57:01:91:85:42:5e:f5:6e:ea:44:51:44:
b8:27:6f:aa:84:ea:18:ee:58:91:4d:54:40:96:23:
5b:79:e9:6c:81:7a:05:0a:98:de:3b:46:b2:f7:c1:
84:19:8c:75:8f:7e:d8:4c:cd:51:b2:ad:9d:d2:05:
32:99:f1:df:c4:c5:6f:30:7c:81:9b:3f:54:12:1d:
ef:e6:84:44:1e:6e:4b:4a:31:b2:9e:a8:da:22:e6:
53:ad:19:82:94:57:32:0b:0c:1b:bd:bc:cf:4e:1e:
d0:09:a3:c1:f0:26:82:15:cc:0e:8f:ab:93:ad:2c:
b5:2b:94:03:50:5c:50:06:77:3a:50:13:63:71:0f:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:15:9D:B1:87:94:E0:32:93:0B:FE:DA:6D:D0:67:8F:3D:DE:87
X509v3 Authority Key Identifier:
keyid:F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/F480C4379294C536904F68B3310E84F3A994704C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a383030303a3a2f33342d3334203d3e20323731333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:79e8:8000::/34
Signature Algorithm: sha256WithRSAEncryption
a4:ed:0f:f0:4a:c7:62:3c:9e:03:ca:36:5b:13:67:6b:9e:4c:
15:92:88:8a:98:05:7b:ba:66:4e:74:42:0e:c9:34:b1:28:90:
09:53:92:66:90:ee:4f:df:98:98:d0:8a:24:c6:23:59:cc:3a:
4b:9f:d9:5c:71:49:dd:c3:17:1e:11:a9:0b:0e:d5:22:ad:e9:
ae:41:98:e8:bc:a3:7e:ad:dc:20:ee:4c:2e:45:63:cf:27:d4:
69:8b:a1:73:91:76:fb:c9:d6:11:6d:31:7b:1b:00:87:6b:bd:
ef:88:fa:96:40:c8:31:d9:0f:72:2c:79:43:57:f3:49:64:c6:
d3:af:ea:d2:4a:c6:ff:91:69:73:05:5f:60:da:54:f1:68:a1:
ea:4c:0b:59:e5:fe:b2:20:52:da:fe:79:f6:3c:82:53:53:be:
f4:73:2e:1a:72:29:22:9c:cd:92:c4:bf:f8:ba:99:b8:45:a0:
47:b1:1c:fe:69:b8:a3:21:ad:5f:6d:de:a5:fe:93:89:ec:5b:
14:a6:52:66:06:68:e3:5d:14:cb:cf:5e:2f:2c:f6:0e:74:78:
8e:2d:55:1e:4b:51:0d:5d:79:ea:26:f7:b6:5e:9c:b3:63:e5:
1d:36:ee:9f:e8:60:02:65:e3:cb:0b:d3:3c:b3:1c:e0:56:7d:
13:19:32:fb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNcfuOfSbiRM7XF7D4HG82Dg8rGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ4MEM0Mzc5Mjk0QzUzNjkwNEY2OEIzMzEwRTg0RjNB
OTk0NzA0QzAeFw0yMzExMTExMzQ1MzNaFw0yNDExMDkxMzUwMzNaMDMxMTAvBgNV
BAMTKEQxMUMxNTlEQjE4Nzk0RTAzMjkzMEJGRURBNkREMDY3OEYzRERFODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeELk2WFGevVqc/JelVV08gYPY
RsCVTrnsCM+D/b6Rp9fOmzHDHmxWj6eOHATRa1D603fL5S8u86c+ICwIV6gNK+QZ
sGjlb2KtYpfGEbg3sHD/D/KoWUtU2am8vcIXMkIgk7gRiT9fXBHT8rpNoFT46ja2
gk9j2Ver4VcBkYVCXvVu6kRRRLgnb6qE6hjuWJFNVECWI1t56WyBegUKmN47RrL3
wYQZjHWPfthMzVGyrZ3SBTKZ8d/ExW8wfIGbP1QSHe/mhEQebktKMbKeqNoi5lOt
GYKUVzILDBu9vM9OHtAJo8HwJoIVzA6Pq5OtLLUrlANQXFAGdzpQE2NxD2p5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0RwVnbGHlOAykwv+2m3QZ4893ocwHwYDVR0j
BBgwFoAU9IDEN5KUxTaQT2izMQ6E86mUcEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkdwY1hwQ1ZDRnp2TVE4dUpuVmpqa1l6Umh2eWpuTjJzVjUxVzFIWEVv
R3MvMC9GNDgwQzQzNzkyOTRDNTM2OTA0RjY4QjMzMTBFODRGM0E5OTQ3MDRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0ODBDNDM3OTI5NEM1MzY5
MDRGNjhCMzMxMEU4NEYzQTk5NDcwNEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZHcGNYcENWQ0Z6dk1ROHVKblZqamtZelJodnlqbk4yc1Y1MVcxSFhFb0dzLzAv
MzIzODMwMzQzYTM3Mzk2NTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMzMzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEeeiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCk7Q/wSsdiPJ4DyjZbE2drnkwVkoiKmAV7umZOdEIOyTSxKJAJU5JmkO5P
35iY0IokxiNZzDpLn9lccUndwxceEakLDtUiremuQZjovKN+rdwg7kwuRWPPJ9Rp
i6FzkXb7ydYRbTF7GwCHa73viPqWQMgx2Q9yLHlDV/NJZMbTr+rSSsb/kWlzBV9g
2lTxaKHqTAtZ5f6yIFLa/nn2PIJTU770cy4acikinM2SxL/4upm4RaBHsRz+abij
Ia1fbd6l/pOJ7FsUplJmBmjjXRTLz14vLPYOdHiOLVUeS1ENXXnqJve2XpyzY+Ud
Nu6f6GACZePLC9M8sxzgVn0TGTL7
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:29 2025 by rpki-client