![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa
File: 323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa (raw, json)
Hash identifier: s2cEpXGdqXKpchoJzSKWm+rM4/tDvSDOxLfYyO21F44=
Subject key identifier: 4A:5F:FE:D7:5B:3C:4E:14:AF:FA:BA:FE:01:85:39:55:9B:93:DD:1C
Certificate issuer: /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial: 44E5BFFE5D7FBA980DC7433BBAAFA189884B6F20
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa
Signing time: Mon 13 Mar 2023 15:55:03 +0000
ROA not before: Mon 13 Mar 2023 15:50:03 +0000
ROA not after: Mon 11 Mar 2024 15:55:03 +0000
asID: 267451
IP address blocks: 2804:41b4:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e5:bf:fe:5d:7f:ba:98:0d:c7:43:3b:ba:af:a1:89:88:4b:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Validity
Not Before: Mar 13 15:50:03 2023 GMT
Not After : Mar 11 15:55:03 2024 GMT
Subject: CN=4A5FFED75B3C4E14AFFABAFE018539559B93DD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:e9:39:cb:35:9b:0a:40:da:d1:00:ea:e2:
36:fe:37:d6:e1:25:32:7b:68:90:36:a7:9a:78:40:
55:1f:d5:9b:6d:c1:9d:c0:e0:26:a0:12:fb:ed:62:
a6:7d:1d:4b:b5:69:01:26:78:33:b6:55:34:07:05:
b2:cd:dd:dc:ff:34:58:1f:e8:98:d1:83:31:9c:2e:
50:75:ea:c0:f8:57:a6:18:d0:b7:06:a6:65:6a:6c:
54:e7:e2:d7:80:9b:2f:2e:ef:f3:fe:d5:f6:88:47:
60:43:9b:a2:18:c7:f3:be:b0:81:69:dc:34:cc:b3:
92:f4:6e:c1:9c:86:1c:72:cf:3c:79:c3:d5:07:ba:
a2:6f:67:59:bf:7c:ca:39:16:de:be:70:7e:0c:f8:
36:f5:6b:ee:1d:7b:94:38:cf:ba:0d:eb:62:0b:d5:
f7:8f:cb:cd:29:79:e9:32:83:c6:01:aa:e0:db:e5:
c5:0a:63:79:c1:7e:71:ab:00:dc:50:7f:a0:86:5b:
54:d3:f0:d8:64:0b:60:9e:ea:52:ae:6d:e5:14:e1:
9f:ef:72:fa:4b:4b:e9:d9:f8:59:7a:7c:60:d9:1b:
9f:e8:a7:24:f0:3c:1d:42:e2:64:e3:a7:87:ec:84:
fe:fe:e2:93:84:14:d3:2e:07:9f:e4:cd:39:e4:9a:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:FE:D7:5B:3C:4E:14:AF:FA:BA:FE:01:85:39:55:9B:93:DD:1C
X509v3 Authority Key Identifier:
keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a633030303a3a2f33342d3334203d3e20323637343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41b4:c000::/34
Signature Algorithm: sha256WithRSAEncryption
30:37:19:b5:ec:b8:6c:3b:64:3e:26:0e:1f:73:7f:94:f8:a1:
e1:ba:cf:6f:37:6f:5c:93:50:f8:e8:2c:a9:08:87:94:87:bd:
38:e4:ab:9a:ad:20:75:76:fb:37:51:f7:37:53:ca:e6:a4:0f:
2c:52:39:47:fd:6a:14:65:f2:9e:2f:22:e1:03:86:3e:7c:ff:
ea:57:8b:83:db:61:67:2c:7f:68:09:89:b5:e4:c9:27:cc:a3:
7d:e9:99:ea:bd:45:9e:d4:bc:0a:b8:a4:4c:d7:10:07:75:4a:
74:da:36:6f:eb:46:29:22:17:93:40:23:fc:b7:57:49:f3:a9:
c6:19:39:9a:c7:65:55:b6:33:a5:a9:ea:ab:73:a6:28:e0:3e:
d2:f3:18:ef:9b:a1:e5:00:cc:28:5e:f3:f7:44:9b:ae:fc:d1:
62:3c:f3:10:a3:9c:61:b4:ae:94:f1:a0:69:b4:5e:6a:fd:7f:
03:30:46:c1:f2:d1:e7:7a:e5:68:5f:5f:5c:85:f3:d9:4e:a3:
c1:25:55:6f:1f:9a:26:8b:b0:9d:e5:ec:4f:57:26:06:83:3e:
8f:03:15:c1:f4:6f:02:db:d3:9c:6c:4a:ed:c4:c4:8b:14:e5:
6e:01:21:9c:a4:ef:c7:c7:ab:da:51:93:93:93:52:b3:ad:4a:
48:49:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:59 2025 by rpki-client