![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a333030303a3a2f33362d3336203d3e20323637343531.roa
File: 323830343a343162343a333030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier: yVWY0vvAFh7U9zkym2+/zMRHeUZKFxlUaXfU8/BErGU=
Subject key identifier: 26:3A:E6:BA:A0:D8:37:CD:F2:C0:48:C3:D8:0E:CF:80:0D:B6:C1:A5
Certificate issuer: /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial: 6DB5E0F05F36D9FDF2F91929DFFB8FE5DD3BF3A3
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a333030303a3a2f33362d3336203d3e20323637343531.roa
Signing time: Mon 13 Mar 2023 15:52:34 +0000
ROA not before: Mon 13 Mar 2023 15:47:34 +0000
ROA not after: Mon 11 Mar 2024 15:52:34 +0000
asID: 267451
IP address blocks: 2804:41b4:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b5:e0:f0:5f:36:d9:fd:f2:f9:19:29:df:fb:8f:e5:dd:3b:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Validity
Not Before: Mar 13 15:47:34 2023 GMT
Not After : Mar 11 15:52:34 2024 GMT
Subject: CN=263AE6BAA0D837CDF2C048C3D80ECF800DB6C1A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:a5:92:48:d0:e6:73:36:96:73:6b:a3:54:
e7:82:0e:b1:99:5c:54:f0:8a:39:00:0d:d8:28:81:
97:c8:d6:72:ea:89:2a:e9:3c:46:d3:37:83:5c:5b:
c1:cb:6f:ab:00:0f:1e:ed:8d:b0:59:12:2a:de:e1:
6f:2a:2c:21:92:d7:6b:4f:e7:27:e8:c6:24:a2:11:
4c:cd:ad:72:a7:14:61:e2:02:5d:a9:94:b4:fa:b0:
ed:4d:ac:20:a5:e6:c5:7c:f8:2a:57:8a:57:e7:12:
55:87:99:09:26:13:f3:34:31:46:01:b9:df:ce:30:
45:f4:71:20:c6:38:6e:78:a1:77:4a:c3:de:76:d4:
35:64:84:c5:fd:30:46:09:1d:6d:12:5b:dd:cf:3a:
bb:e5:68:f7:e2:1e:ac:ea:08:ab:e3:ae:8c:3d:c4:
40:fa:8c:06:39:38:bf:f4:b5:77:ec:97:a7:94:79:
ca:7d:65:18:f8:14:4e:cf:b4:53:db:b9:95:c1:64:
07:e3:48:ca:0c:55:73:3c:b2:7e:60:cc:75:86:7c:
79:23:05:ef:4d:42:c7:0a:e4:fd:8f:85:92:b0:f8:
d7:95:f3:e8:32:51:36:8b:7a:cb:35:68:02:66:ea:
9e:ac:19:41:be:24:5a:ae:85:84:67:53:2e:9d:d9:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:E6:BA:A0:D8:37:CD:F2:C0:48:C3:D8:0E:CF:80:0D:B6:C1:A5
X509v3 Authority Key Identifier:
keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a333030303a3a2f33362d3336203d3e20323637343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41b4:3000::/36
Signature Algorithm: sha256WithRSAEncryption
0b:07:76:5a:d7:93:bf:14:69:03:55:cd:81:52:44:04:99:a4:
2c:17:80:90:ef:85:ef:68:a5:36:91:bb:a9:e2:84:49:64:4a:
d8:a1:48:fe:18:33:35:be:a3:93:d8:2c:b1:04:70:eb:c0:73:
fa:65:c9:83:66:45:7a:a2:92:f6:70:bc:71:75:ce:34:b3:f9:
f7:92:45:09:d0:b0:0c:82:70:2a:94:1b:99:8e:b9:4d:a1:fb:
c8:ef:7d:67:44:c2:3e:47:a3:eb:e6:c1:95:d3:e0:a4:c3:38:
58:8e:8e:ae:42:a1:59:47:99:1f:38:23:f2:a2:22:2b:a4:a7:
bd:04:d7:b3:2a:71:55:c7:1b:6c:bb:25:43:14:8e:99:ba:f4:
e6:d3:89:b5:b2:ce:b7:61:b2:7b:86:9d:c5:14:06:65:b3:e7:
54:a9:c9:0e:d5:46:61:8f:5a:99:3f:18:53:77:7e:a2:02:d0:
49:79:37:42:d2:7a:b0:57:dc:d6:2a:60:61:57:fd:d4:1e:2b:
11:18:f9:ca:e8:cc:5d:94:bb:c1:05:ef:db:21:06:ce:ed:28:
6a:2b:e7:0e:73:2e:c5:72:0f:4a:4f:19:55:e3:ce:93:f4:cc:
98:21:0b:43:5b:95:ea:d4:e5:88:6d:44:e6:00:ba:d7:e6:36:
80:0b:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:51 2025 by rpki-client