![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d3332203d3e20323733343336.roa
File: 323830343a386539383a3a2f33322d3332203d3e20323733343336.roa (raw, json)
Hash identifier: Mymi+iamLUsUxmbF5hS+6s3NzvzNPPitJ75/UpSx8kY=
Subject key identifier: 08:00:A9:72:19:8A:40:A7:BF:2D:9D:FA:9A:34:39:8E:92:69:73:B2
Certificate issuer: /CN=099D454CA67998593B525B84314AEF2E1AFCFD58
Certificate serial: 2C1D69F25F7102C95B6BC308DD100CB5BA5D2768
Authority key identifier: 09:9D:45:4C:A6:79:98:59:3B:52:5B:84:31:4A:EF:2E:1A:FC:FD:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/099D454CA67998593B525B84314AEF2E1AFCFD58.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d3332203d3e20323733343336.roa
Signing time: Fri 26 Jan 2024 19:02:43 +0000
ROA not before: Fri 26 Jan 2024 18:57:43 +0000
ROA not after: Fri 24 Jan 2025 19:02:43 +0000
asID: 273436
IP address blocks: 2804:8e98::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1d:69:f2:5f:71:02:c9:5b:6b:c3:08:dd:10:0c:b5:ba:5d:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099D454CA67998593B525B84314AEF2E1AFCFD58
Validity
Not Before: Jan 26 18:57:43 2024 GMT
Not After : Jan 24 19:02:43 2025 GMT
Subject: CN=0800A972198A40A7BF2D9DFA9A34398E926973B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:97:9e:28:61:ce:b6:85:0e:5f:db:7f:f5:
7a:6f:c2:2f:c4:b7:20:65:82:80:f1:30:ee:41:1f:
d6:37:14:61:49:9e:e4:6c:84:61:85:f9:84:76:47:
9a:5e:ba:71:4c:b2:86:e6:1e:31:31:f7:d3:97:0b:
d1:ec:6b:46:fc:c0:71:c3:0e:53:27:08:14:ed:8c:
bb:2f:78:82:c6:f2:e9:24:90:43:a2:da:03:15:c8:
85:f5:4f:0b:4e:12:40:56:34:08:53:10:fe:fb:2e:
eb:6b:49:2b:f0:2a:df:f1:34:1e:c2:4a:3d:51:23:
97:63:86:2b:7e:86:20:4a:c9:ef:73:1e:c9:db:f5:
32:85:37:fe:87:ae:71:2d:73:d2:2a:58:db:b7:09:
7a:1f:d2:67:67:ec:03:69:4c:8c:64:02:29:8f:09:
f2:39:d1:c9:90:2b:66:b8:ef:83:5e:59:30:88:04:
07:a6:dd:43:1e:05:92:68:e1:07:3c:e3:31:22:9a:
da:fb:53:21:6f:10:66:93:dd:fd:96:48:d2:ee:c5:
30:b4:ec:62:86:bd:a8:e4:3d:b6:9c:51:4e:86:92:
c6:27:57:4d:28:00:c5:fb:40:17:98:44:ee:c4:aa:
af:b3:fe:62:90:fc:1e:3a:98:c5:2c:cd:2e:87:fa:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:A9:72:19:8A:40:A7:BF:2D:9D:FA:9A:34:39:8E:92:69:73:B2
X509v3 Authority Key Identifier:
keyid:09:9D:45:4C:A6:79:98:59:3B:52:5B:84:31:4A:EF:2E:1A:FC:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/099D454CA67998593B525B84314AEF2E1AFCFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/099D454CA67998593B525B84314AEF2E1AFCFD58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d3332203d3e20323733343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e98::/32
Signature Algorithm: sha256WithRSAEncryption
5a:9a:9f:79:98:34:60:d5:0d:14:80:bc:69:b4:6a:43:b1:6c:
96:14:2c:81:44:76:f4:ae:6f:f0:39:1f:62:48:94:ce:df:5c:
ad:41:a6:97:48:56:14:5d:60:f2:87:e3:19:da:7a:8b:b8:d8:
97:33:bc:85:65:5a:c1:8e:5c:e8:99:70:24:16:9a:24:77:d2:
38:3e:75:83:dc:ea:8e:df:04:1a:96:ce:4b:84:6e:a8:19:be:
58:e0:d8:b8:0b:e4:45:43:29:36:b2:21:d3:c1:73:e6:26:29:
82:29:01:76:b4:a1:b7:63:4d:ac:ca:b2:18:a4:91:06:53:5a:
39:5d:9b:d1:92:49:07:1c:9a:8a:b6:a5:c4:5b:2a:31:74:ac:
be:96:2d:21:5e:23:05:ad:08:cc:79:de:e7:83:1e:93:20:aa:
96:de:06:84:6a:8e:f2:64:c0:d0:1c:61:b5:0c:1d:a8:95:94:
ba:3d:5d:29:2a:8b:41:f5:0a:24:3d:8f:e4:bc:70:1f:12:3f:
3e:b0:ce:db:ad:72:a4:ac:40:3d:7c:e3:72:72:30:0c:ff:f0:
d8:fd:b3:00:88:db:c7:d5:c1:bd:ec:58:7a:7c:7d:f5:3d:89:
61:92:63:0b:87:c9:bd:06:9f:f7:a5:48:a3:00:fb:e4:d7:da:
57:63:6f:c4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULB1p8l9xAslba8MI3RAMtbpdJ2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk5RDQ1NENBNjc5OTg1OTNCNTI1Qjg0MzE0QUVGMkUx
QUZDRkQ1ODAeFw0yNDAxMjYxODU3NDNaFw0yNTAxMjQxOTAyNDNaMDMxMTAvBgNV
BAMTKDA4MDBBOTcyMTk4QTQwQTdCRjJEOURGQTlBMzQzOThFOTI2OTczQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjpeeKGHOtoUOX9t/9Xpvwi/E
tyBlgoDxMO5BH9Y3FGFJnuRshGGF+YR2R5peunFMsobmHjEx99OXC9Hsa0b8wHHD
DlMnCBTtjLsveILG8ukkkEOi2gMVyIX1TwtOEkBWNAhTEP77LutrSSvwKt/xNB7C
Sj1RI5djhit+hiBKye9zHsnb9TKFN/6HrnEtc9IqWNu3CXof0mdn7ANpTIxkAimP
CfI50cmQK2a474NeWTCIBAem3UMeBZJo4Qc84zEimtr7UyFvEGaT3f2WSNLuxTC0
7GKGvajkPbacUU6GksYnV00oAMX7QBeYRO7Eqq+z/mKQ/B46mMUszS6H+kRnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCACpchmKQKe/LZ36mjQ5jpJpc7IwHwYDVR0j
BBgwFoAUCZ1FTKZ5mFk7UluEMUrvLhr8/VgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2Ja
cXAvMC8wOTlENDU0Q0E2Nzk5ODU5M0I1MjVCODQzMTRBRUYyRTFBRkNGRDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA5OUQ0NTRDQTY3OTk4NTkz
QjUyNUI4NDMxNEFFRjJFMUFGQ0ZENTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIM1o4ZVJwYmJuQnpNZVBiRDZMb0h2VDhUdm5WNE1ZM3p1WkFLc0diWnFwLzAv
MzIzODMwMzQzYTM4NjUzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzQzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASOmDANBgkqhkiG9w0BAQsFAAOCAQEAWpqfeZg0
YNUNFIC8abRqQ7FslhQsgUR29K5v8DkfYkiUzt9crUGml0hWFF1g8ofjGdp6i7jY
lzO8hWVawY5c6JlwJBaaJHfSOD51g9zqjt8EGpbOS4RuqBm+WODYuAvkRUMpNrIh
08Fz5iYpgikBdrSht2NNrMqyGKSRBlNaOV2b0ZJJBxyairalxFsqMXSsvpYtIV4j
Ba0IzHne54MekyCqlt4GhGqO8mTA0BxhtQwdqJWUuj1dKSqLQfUKJD2P5LxwHxI/
PrDO261ypKxAPXzjcnIwDP/w2P2zAIjbx9XBvexYenx99T2JYZJjC4fJvQaf96VI
owD75NfaV2NvxA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:28 2025 by rpki-client