![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa
File: 323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier: a7cczqIiWVcn+ueHvhZ1s7BZgg2YFyUaBgmwaMM8LzM=
Subject key identifier: 1E:52:49:C5:C5:B2:D2:2B:00:1B:96:44:FB:95:D4:04:D4:54:C4:03
Certificate issuer: /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial: 64BD24095E2739895F56DEF060F19BAE7640C372
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa
Signing time: Thu 28 Dec 2023 17:10:03 +0000
ROA not before: Thu 28 Dec 2023 17:05:03 +0000
ROA not after: Thu 26 Dec 2024 17:10:03 +0000
asID: 263522
IP address blocks: 2804:1338:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bd:24:09:5e:27:39:89:5f:56:de:f0:60:f1:9b:ae:76:40:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Validity
Not Before: Dec 28 17:05:03 2023 GMT
Not After : Dec 26 17:10:03 2024 GMT
Subject: CN=1E5249C5C5B2D22B001B9644FB95D404D454C403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:71:94:7c:d7:29:a5:62:f7:50:56:5f:1f:
96:dd:00:a2:51:5d:a8:13:02:64:ed:66:24:97:74:
f5:88:72:4d:5b:e6:3e:5f:e7:17:17:90:04:2a:29:
8d:0a:4c:9f:00:a4:d6:a3:b9:30:ac:88:72:6c:c7:
32:e0:85:56:d9:c8:c2:cd:9d:3b:fd:ff:c4:44:24:
2a:bd:a9:07:7e:a1:47:cf:01:70:7f:04:a5:12:43:
f0:bd:a0:d1:17:57:a2:bf:80:d2:a1:88:a0:93:11:
d0:ba:83:ea:c0:f6:a7:16:09:b2:6b:e2:db:e3:6f:
64:0c:33:a1:90:1d:98:4d:e0:fa:45:e9:4e:a9:f5:
82:df:01:d6:cf:f1:b6:9e:44:c2:87:dc:06:6f:cb:
bc:bb:f9:57:8c:36:f5:78:64:91:81:0b:c8:dd:69:
81:69:09:94:cd:4f:55:36:66:6d:2e:d7:67:c8:b5:
75:03:1d:7a:d0:cf:ec:42:01:a1:c3:09:0d:27:f4:
8c:61:41:06:d0:10:d3:a9:61:02:f5:2a:41:aa:6b:
ae:c2:0a:47:34:ea:69:c3:a2:bb:8d:2b:59:c5:6c:
f3:c7:ef:2e:8e:5a:e1:df:a0:87:88:7d:df:45:60:
84:50:0a:d2:e6:3a:6d:38:67:84:39:d8:c6:cf:fe:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:49:C5:C5:B2:D2:2B:00:1B:96:44:FB:95:D4:04:D4:54:C4:03
X509v3 Authority Key Identifier:
keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1338:6::/48
Signature Algorithm: sha256WithRSAEncryption
4e:72:08:dc:69:e4:df:3b:f5:34:aa:be:5a:8a:09:6b:cd:98:
fb:e1:0c:d3:cd:51:d6:cf:e7:6b:42:68:61:da:22:3b:fa:2d:
77:52:68:63:b3:19:d5:ab:ac:59:d8:03:b2:a8:4d:11:8e:2f:
a6:aa:28:3c:ce:26:da:3a:46:b3:cf:96:64:5c:e5:d2:a8:b8:
35:2f:ba:72:9f:f4:6a:b2:9c:53:eb:a1:c8:d0:08:88:5a:43:
2b:c5:d7:95:6e:10:d7:06:d2:bf:e5:1f:d4:f1:34:c6:99:d0:
2e:5f:c3:56:aa:01:00:aa:fa:f8:79:76:1e:38:58:ea:d0:8e:
8b:21:a8:78:6c:e1:c1:53:e9:96:cf:53:aa:b8:6b:77:a2:f1:
17:01:70:49:87:0e:9b:48:17:de:d6:47:f1:f4:a6:47:32:2a:
76:2c:09:44:1a:57:c2:04:e0:5c:7d:d9:51:28:1c:4d:cd:b6:
df:07:9c:fa:90:20:2a:c3:bf:26:a2:3f:5a:27:e6:bb:1a:53:
3f:f7:36:d7:46:a7:97:c8:3a:9c:93:b1:cd:db:e7:34:f1:b8:
17:52:54:48:e8:00:66:fe:d1:42:4e:0e:e7:82:4e:cc:0b:a5:
49:e6:92:b5:6f:5e:ee:87:47:b6:fe:85:e5:a2:10:89:93:95:
e0:a8:92:e9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZL0kCV4nOYlfVt7wYPGbrnZAw3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0MkUwMzZEQjNCRUYxQjUwN0NCREI2QTFBQjhBMzZC
OENGNzZFQzAeFw0yMzEyMjgxNzA1MDNaFw0yNDEyMjYxNzEwMDNaMDMxMTAvBgNV
BAMTKDFFNTI0OUM1QzVCMkQyMkIwMDFCOTY0NEZCOTVENDA0RDQ1NEM0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfXGUfNcppWL3UFZfH5bdAKJR
XagTAmTtZiSXdPWIck1b5j5f5xcXkAQqKY0KTJ8ApNajuTCsiHJsxzLghVbZyMLN
nTv9/8REJCq9qQd+oUfPAXB/BKUSQ/C9oNEXV6K/gNKhiKCTEdC6g+rA9qcWCbJr
4tvjb2QMM6GQHZhN4PpF6U6p9YLfAdbP8baeRMKH3AZvy7y7+VeMNvV4ZJGBC8jd
aYFpCZTNT1U2Zm0u12fItXUDHXrQz+xCAaHDCQ0n9IxhQQbQENOpYQL1KkGqa67C
Ckc06mnDoruNK1nFbPPH7y6OWuHfoIeIfd9FYIRQCtLmOm04Z4Q52MbP/rlPAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUHlJJxcWy0isAG5ZE+5XUBNRUxAMwHwYDVR0j
BBgwFoAUbULgNts77xtQfL22oauKNrjPduwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMC82RDQyRTAzNkRCM0JFRjFCNTA3Q0JEQjZBMUFCOEEzNkI4Q0Y3NkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZENDJFMDM2REIzQkVGMUI1
MDdDQkRCNkExQUI4QTM2QjhDRjc2RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzAv
MzIzODMwMzQzYTMxMzMzMzM4M2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEEzgABjANBgkqhkiG9w0BAQsFAAOCAQEA
TnII3Gnk3zv1NKq+WooJa82Y++EM081R1s/na0JoYdoiO/otd1JoY7MZ1ausWdgD
sqhNEY4vpqooPM4m2jpGs8+WZFzl0qi4NS+6cp/0arKcU+uhyNAIiFpDK8XXlW4Q
1wbSv+Uf1PE0xpnQLl/DVqoBAKr6+Hl2HjhY6tCOiyGoeGzhwVPpls9Tqrhrd6Lx
FwFwSYcOm0gX3tZH8fSmRzIqdiwJRBpXwgTgXH3ZUSgcTc223wec+pAgKsO/JqI/
WifmuxpTP/c210anl8g6nJOxzdvnNPG4F1JUSOgAZv7RQk4O54JOzAulSeaStW9e
7odHtv6F5aIQiZOV4KiS6Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:50 2025 by rpki-client