![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33362d3336203d3e20323633303533.roa
File: 323830343a3932303a343030303a3a2f33362d3336203d3e20323633303533.roa (raw, json)
Hash identifier: dqt/SQwC4ad/fJS3OfN2nEJZieSuwSNPnc/1juFkd/c=
Subject key identifier: 73:D8:2E:59:A7:40:EB:57:57:F3:66:82:2D:F9:69:F5:94:8A:C5:AA
Certificate issuer: /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial: 65F576D61BFC8E9F592DF85C68056AE4AA0D1BAC
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33362d3336203d3e20323633303533.roa
Signing time: Fri 06 Jan 2023 22:00:02 +0000
ROA not before: Fri 06 Jan 2023 21:55:02 +0000
ROA not after: Fri 05 Jan 2024 22:00:02 +0000
asID: 263053
IP address blocks: 2804:920:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f5:76:d6:1b:fc:8e:9f:59:2d:f8:5c:68:05:6a:e4:aa:0d:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Validity
Not Before: Jan 6 21:55:02 2023 GMT
Not After : Jan 5 22:00:02 2024 GMT
Subject: CN=73D82E59A740EB5757F366822DF969F5948AC5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:6a:50:76:34:4b:b6:b2:ed:4d:fe:f5:17:
2d:6e:fd:bc:aa:56:d5:fd:1b:32:a9:02:7c:93:cc:
86:95:39:a4:11:78:94:21:2c:1c:0a:2f:c6:50:89:
c1:b9:b6:41:e5:e0:07:dd:59:cd:ff:1a:64:e6:85:
90:1d:a4:9c:c9:9b:7c:b4:39:3c:b7:8f:ef:db:02:
52:20:48:e7:a6:bb:f8:f5:67:db:6c:0b:fc:fd:7d:
d7:3a:ec:f3:1c:94:ea:84:a9:9b:bf:00:49:ee:c8:
3d:bb:2c:74:6e:14:96:19:09:b0:e3:d1:45:5e:ca:
a3:c2:51:84:fa:e9:d5:7e:6d:99:36:5f:b3:4e:8a:
c6:56:27:7d:35:11:ef:3d:69:03:26:ea:1a:58:ab:
84:7f:c0:36:68:a7:1f:c7:22:84:1e:33:b2:b0:f7:
c3:99:c6:a3:62:ec:1b:71:4e:d8:61:b7:bb:41:a5:
5a:52:af:8b:5e:4e:69:e4:db:2b:d8:e8:1a:84:d5:
e9:f5:00:73:ec:40:81:78:c7:1b:81:07:6a:57:1d:
35:39:78:0e:ba:9c:fd:0b:54:43:33:34:11:61:72:
57:08:e3:15:50:63:2f:95:40:91:fb:11:a1:ab:ed:
7f:8d:fc:5c:99:c1:f1:45:76:6c:94:d2:fb:f2:fa:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:2E:59:A7:40:EB:57:57:F3:66:82:2D:F9:69:F5:94:8A:C5:AA
X509v3 Authority Key Identifier:
keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33362d3336203d3e20323633303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:920:4000::/36
Signature Algorithm: sha256WithRSAEncryption
5f:de:12:5b:72:98:73:9f:0a:5a:9d:83:64:c3:82:08:3e:51:
9d:ad:73:cd:b2:11:56:a7:49:87:32:a8:bc:2a:e6:2f:8f:be:
34:16:2d:6f:37:70:1a:59:90:52:99:c0:d6:b2:b2:f8:c1:88:
0a:42:cf:60:5e:07:9d:58:7c:ce:3a:92:15:70:b8:b0:8f:6a:
a4:c1:ec:61:c9:47:f4:49:71:f1:79:ed:fe:da:ea:7e:82:cc:
71:53:db:0e:c6:ab:8b:52:c8:27:9d:d3:34:dd:36:98:94:e4:
01:b0:a5:e2:70:63:c7:6c:30:37:b3:82:35:61:e1:e9:b8:a6:
d7:38:b8:8b:b9:15:b6:a3:ea:ba:17:ed:41:4c:9f:8c:be:2e:
f7:f3:42:e1:99:a9:87:79:2e:86:36:a4:79:ea:f1:8b:b9:e0:
9c:a8:4b:c7:f5:f5:13:80:c5:1f:53:32:5b:0a:1c:76:04:d0:
68:a0:df:e3:90:4e:42:15:cb:2a:35:bb:75:9f:18:0f:1d:2b:
a6:70:fc:39:0c:7f:bc:e6:83:2e:6d:95:6c:30:93:f4:02:d5:
27:c8:0d:4a:e0:84:78:fa:26:2b:2c:14:c9:94:c1:68:19:38:
88:fb:a5:e7:95:f4:fb:1d:91:e5:6e:4b:a7:21:12:c5:ef:76:
db:fe:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:43 2025 by rpki-client