![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d313238203d3e20323634393534.roa
File: 323830343a333037633a3a2f33322d313238203d3e20323634393534.roa (raw, json)
Hash identifier: GiqzqjCoYhwN6fsSYgWqXb61V7fSUPofMhc0Q+CPuNQ=
Subject key identifier: 84:65:D7:FB:8A:9B:03:99:C1:F1:11:A4:9F:B3:97:EB:72:35:22:6F
Certificate issuer: /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial: 3749088A854A30290EE37A505B4CE05AA363F86F
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d313238203d3e20323634393534.roa
Signing time: Mon 16 Oct 2023 19:01:15 +0000
ROA not before: Mon 16 Oct 2023 18:56:15 +0000
ROA not after: Mon 14 Oct 2024 19:01:15 +0000
asID: 264954
IP address blocks: 2804:307c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:49:08:8a:85:4a:30:29:0e:e3:7a:50:5b:4c:e0:5a:a3:63:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Validity
Not Before: Oct 16 18:56:15 2023 GMT
Not After : Oct 14 19:01:15 2024 GMT
Subject: CN=8465D7FB8A9B0399C1F111A49FB397EB7235226F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:38:fb:5e:97:5b:2c:5e:6c:1c:c8:2f:c5:bf:
93:5b:ef:02:12:cb:9f:04:89:3e:aa:39:32:aa:d9:
75:9e:78:63:fd:56:bb:b3:9e:25:44:46:0b:32:e9:
38:bd:13:e8:0d:29:d0:cb:4f:be:4d:d1:86:df:b7:
1f:91:e0:aa:4d:80:7e:5d:30:12:14:4c:8a:25:ec:
d0:14:37:df:42:5a:fe:b2:00:6d:9b:b2:2a:f3:c6:
05:89:35:17:80:71:a3:61:b7:42:24:1b:64:c2:e1:
bd:0f:d0:61:2a:54:29:fc:2c:3c:2a:c2:a4:fe:29:
5b:83:1b:6f:8d:1b:c9:2e:47:4a:b1:49:db:9c:97:
39:33:93:28:72:72:72:9d:f7:b3:af:98:da:d5:d2:
2e:98:ab:f6:97:e1:ac:68:31:94:93:78:dd:e5:07:
4e:0b:25:21:61:44:2d:f0:82:c5:61:1d:e9:d3:e1:
0f:e2:fb:07:2f:e5:3f:f8:bc:08:a1:fe:55:a4:eb:
64:43:64:b2:fd:44:69:b3:3b:48:1d:38:b4:bb:b8:
e5:77:dd:1c:b0:63:fd:38:72:1d:ce:06:a9:a5:62:
38:8a:f8:24:8f:3e:46:bb:93:b9:da:be:94:2f:e9:
68:b1:b6:dc:39:29:09:db:44:cc:a1:43:49:9a:67:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:65:D7:FB:8A:9B:03:99:C1:F1:11:A4:9F:B3:97:EB:72:35:22:6F
X509v3 Authority Key Identifier:
keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d313238203d3e20323634393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:307c::/32
Signature Algorithm: sha256WithRSAEncryption
27:56:09:6f:67:8d:1c:24:3f:7d:90:73:bf:b4:bd:46:74:df:
69:1e:3c:b9:1b:c0:ea:d9:6d:e4:92:f3:fa:98:5b:ea:c7:8e:
f9:d0:c8:9d:bf:eb:dc:8e:00:e3:6f:d8:73:30:2c:90:cb:b7:
a4:28:02:19:9f:23:50:e2:0f:cd:60:7c:a0:5a:a1:3f:66:8a:
3c:7a:0b:bb:6d:d8:ce:87:35:e8:79:67:76:45:18:4c:ee:34:
57:cc:02:80:45:be:33:4d:32:94:ac:2a:1f:a0:e3:1a:e7:18:
12:b3:b6:b7:72:60:ca:6a:82:f0:71:95:fe:d2:ff:e9:6b:96:
bb:61:f0:6f:88:05:30:fa:2c:a5:22:93:15:f1:5b:36:da:e1:
33:07:dd:f1:18:4d:2d:01:dc:e4:0d:ab:c9:28:48:81:fb:9c:
c5:d5:75:24:0f:e7:91:d5:51:67:0f:5a:af:3e:a2:8c:a5:38:
88:b5:60:04:47:f2:3b:b5:59:b6:6b:dd:c4:50:e2:61:d5:b4:
ce:cc:61:f1:90:f5:29:28:cd:ac:4c:d5:97:15:63:e7:fb:2b:
62:aa:36:06:3b:5a:c9:76:70:84:be:c7:41:13:f4:78:24:9b:
30:e2:81:0e:75:5a:ba:d0:84:58:8a:96:01:1b:ec:3c:e5:32:
5f:10:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:59 2025 by rpki-client