![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a383030303a3a2f33332d3333203d3e203532363936.roa
File: 323830343a6336303a383030303a3a2f33332d3333203d3e203532363936.roa (raw, json)
Hash identifier: MXcHSiRu9TYZ2OixSQmem6VTf1VEf9aGJ86As+3AnRo=
Subject key identifier: A7:08:81:80:18:E8:45:DF:C0:7A:05:82:5F:82:21:01:3F:0E:48:1E
Certificate issuer: /CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
Certificate serial: 6F2F9CF60EE3E633C8BA4074E0559AF709A59D23
Authority key identifier: C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a383030303a3a2f33332d3333203d3e203532363936.roa
Signing time: Wed 07 Feb 2024 05:40:50 +0000
ROA not before: Wed 07 Feb 2024 05:35:50 +0000
ROA not after: Wed 05 Feb 2025 05:40:50 +0000
asID: 52696
IP address blocks: 2804:c60:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2f:9c:f6:0e:e3:e6:33:c8:ba:40:74:e0:55:9a:f7:09:a5:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8207CBCDD5C588AA6F98954E4642BACD9C206F5
Validity
Not Before: Feb 7 05:35:50 2024 GMT
Not After : Feb 5 05:40:50 2025 GMT
Subject: CN=A708818018E845DFC07A05825F8221013F0E481E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:b2:11:89:13:15:07:a8:46:63:76:45:96:
61:96:39:a4:9e:37:19:19:44:fb:cb:fb:14:2a:10:
c3:ed:84:3c:0a:96:cc:15:04:f6:0a:35:74:dd:f8:
30:5d:8c:e5:a2:4e:f4:bf:c3:d6:c3:b8:c8:23:e0:
48:d3:8e:ca:5b:09:7d:bc:60:1f:b7:bd:69:00:ea:
0c:b2:88:a5:57:21:25:d5:98:23:5e:a6:90:86:ac:
7c:b9:3a:47:88:46:20:7d:23:0d:59:17:5f:35:0c:
05:2a:9f:4b:a7:3d:5d:d3:db:f6:af:31:01:36:f0:
f5:25:26:be:ae:7a:2e:03:f2:fa:8b:30:62:c1:44:
92:14:db:f5:5b:ec:f6:b9:44:88:4b:c2:78:f5:75:
9b:ac:36:7e:a9:38:e5:f2:90:a1:52:7a:47:28:5b:
2c:d8:07:4f:5f:dc:2c:09:67:c6:08:c1:07:26:f1:
18:d6:e7:fc:bd:bc:4c:6a:37:ae:c3:59:72:83:f7:
36:54:84:34:30:2f:58:b9:2c:a8:4d:5a:f1:69:ac:
86:27:b5:3b:02:5f:ee:d0:b9:ff:9f:d9:35:95:68:
45:29:65:5a:29:8f:a7:8a:e0:dd:76:a5:ba:09:fa:
47:37:fc:a7:29:f1:1a:5d:98:f7:96:28:e2:eb:fb:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:81:80:18:E8:45:DF:C0:7A:05:82:5F:82:21:01:3F:0E:48:1E
X509v3 Authority Key Identifier:
keyid:C8:20:7C:BC:DD:5C:58:8A:A6:F9:89:54:E4:64:2B:AC:D9:C2:06:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8207CBCDD5C588AA6F98954E4642BACD9C206F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a383030303a3a2f33332d3333203d3e203532363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c60:8000::/33
Signature Algorithm: sha256WithRSAEncryption
19:67:1c:d3:a6:e7:07:f2:7d:6a:68:fb:ea:b6:fe:96:bc:c1:
62:10:9f:bf:23:2e:fa:4d:c8:ad:9d:67:3d:f6:7e:49:96:39:
e9:01:74:e9:d8:b0:cc:62:88:79:ff:be:cd:a6:f2:48:1c:f0:
8e:be:82:7f:55:04:55:59:82:af:ec:b3:ba:f3:8f:65:7a:e1:
bc:8f:09:fd:e6:a3:88:45:22:ea:c4:57:5d:77:6f:67:1a:0b:
14:ca:02:70:6c:3e:ff:3d:4d:f5:a5:ce:c5:d1:c6:4d:fe:1f:
50:6e:7f:61:7f:bc:8f:4c:56:a2:48:11:34:0d:c9:b2:d2:1c:
9b:bd:44:d1:69:97:1e:1f:e8:81:3f:d0:56:b7:65:9e:1f:1c:
56:27:24:58:da:b0:27:40:74:a3:35:6b:28:40:00:5b:f8:2a:
dd:12:45:60:0f:82:86:69:a2:b5:f5:13:2d:7a:31:64:bf:3b:
c7:c8:97:94:b0:6c:80:af:01:fd:ad:34:c2:44:7b:ef:50:fa:
6f:56:fa:a1:b0:76:50:dd:13:17:f8:47:11:2f:c4:fe:9f:2c:
c8:66:b2:b0:4b:77:48:4a:89:4a:58:73:49:81:59:ce:d0:17:
43:ec:1f:84:c0:c5:c4:e1:47:0b:a2:ee:e8:7e:c3:de:78:ce:
25:bb:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:16 2025 by rpki-client