![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a3a2f33322d313238203d3e20323632353835.roa
File: 323830343a386637303a3a2f33322d313238203d3e20323632353835.roa (raw, json)
Hash identifier: mT60PmRXYOfxNx8KBhXDDjRWZPJCUc5ejw4wwKq745c=
Subject key identifier: AF:CA:9C:B8:FF:3B:33:6B:B8:A7:1D:53:16:20:AC:43:E6:94:61:E0
Certificate issuer: /CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
Certificate serial: 0EC84D32B0D13B6A3B12E5593D6738F132221CF9
Authority key identifier: 2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a3a2f33322d313238203d3e20323632353835.roa
Signing time: Thu 16 May 2024 18:25:06 +0000
ROA not before: Thu 16 May 2024 18:20:06 +0000
ROA not after: Thu 15 May 2025 18:25:06 +0000
asID: 262585
IP address blocks: 2804:8f70::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c8:4d:32:b0:d1:3b:6a:3b:12:e5:59:3d:67:38:f1:32:22:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
Validity
Not Before: May 16 18:20:06 2024 GMT
Not After : May 15 18:25:06 2025 GMT
Subject: CN=AFCA9CB8FF3B336BB8A71D531620AC43E69461E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:13:38:00:e7:e8:e7:94:aa:ac:12:4f:65:
c6:cf:ad:d7:48:5c:c4:f3:44:0b:b1:d5:9c:1a:a7:
0e:ff:14:d0:1d:2b:3e:45:18:63:a2:d3:19:11:f3:
9c:23:0f:3e:00:cc:c1:19:63:1c:8d:2f:24:c4:ef:
b7:65:97:c0:94:9d:3a:2f:31:42:b6:a9:39:e9:c0:
38:5c:b9:87:2b:01:bb:55:df:87:86:d6:18:a2:49:
fc:9d:2c:fe:66:68:2f:ac:36:c1:e7:1f:da:6f:e1:
d5:98:48:f2:63:cf:78:d8:28:66:b2:8b:a9:7c:e8:
a2:d7:75:35:f7:a1:18:ee:8d:e7:77:a6:66:03:f1:
a0:21:18:a4:8f:d8:cf:1e:f9:d2:6d:0b:df:3d:b1:
04:42:bd:ce:85:7a:1f:2c:a2:70:be:17:45:53:1a:
66:e9:02:3b:53:95:f6:ca:43:35:b2:88:b7:d0:a9:
e0:47:4b:56:65:54:01:15:aa:4e:89:88:0e:35:75:
ae:24:cb:a7:af:0c:a8:dc:49:bd:b0:d3:0c:1f:e7:
9b:8b:8d:d4:56:aa:7f:10:8d:5d:b5:ef:05:26:ea:
cb:ec:1d:7a:03:f3:1f:ed:08:01:e4:34:ea:3a:50:
cc:8b:52:b0:c9:5b:6d:a7:77:01:ed:f1:0c:f3:12:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CA:9C:B8:FF:3B:33:6B:B8:A7:1D:53:16:20:AC:43:E6:94:61:E0
X509v3 Authority Key Identifier:
keyid:2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a3a2f33322d313238203d3e20323632353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f70::/32
Signature Algorithm: sha256WithRSAEncryption
a9:19:46:60:4b:ed:a3:d5:5c:62:84:52:85:0a:bc:10:00:cf:
fd:aa:74:49:5b:27:ec:c2:f3:91:d3:b0:8d:92:90:4d:80:12:
64:1c:d5:a5:48:9a:0d:79:b9:45:dc:09:64:69:af:79:88:bb:
18:b6:15:18:cb:ba:8f:89:cc:85:61:8a:53:99:8d:12:7c:dd:
4d:64:31:a9:f6:75:a7:b9:c3:d3:72:2c:3f:6c:70:5b:be:79:
02:5c:0c:7b:f5:62:85:69:9b:be:2f:ac:e1:ce:a9:1c:ef:ec:
f5:ba:f9:7b:ac:b0:0d:bb:85:58:33:09:03:47:90:4d:3b:70:
fb:49:52:59:cb:a1:c1:6e:0e:64:9b:eb:e6:21:2e:22:79:33:
58:ef:d1:81:0e:7a:84:c4:56:70:cc:63:17:fc:85:13:53:33:
5e:1a:b1:af:40:b0:7f:48:1d:76:3e:7a:94:7a:26:29:8f:bd:
3d:9f:30:c0:96:72:3b:70:03:7d:05:15:8a:d3:72:39:45:c2:
c8:0c:53:4b:86:9d:15:32:a9:d5:e5:72:d9:16:18:98:b9:0a:
1c:0c:88:8e:05:f9:ab:f1:ae:35:c2:a6:28:b8:5c:26:3d:23:
61:62:7b:38:79:b9:a1:58:5e:33:5b:18:7e:06:72:34:e1:78:
f0:2a:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:21 2025 by rpki-client