![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa
File: 323830343a386466343a3a2f33322d3438203d3e20323733333932.roa (raw, json)
Hash identifier: Nxjw0X37zdHEQQS5VveuN44AeaEmQ06Tw/Zcn01HGRM=
Subject key identifier: 1D:E5:E3:3A:64:68:BF:D4:4A:6C:0F:6C:4C:19:98:FD:63:D2:4D:CB
Certificate issuer: /CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
Certificate serial: 5BB96AA487B563DA9CBC215F6C3BB315E196EB08
Authority key identifier: 52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa
Signing time: Thu 04 Jan 2024 22:48:40 +0000
ROA not before: Thu 04 Jan 2024 22:43:40 +0000
ROA not after: Thu 02 Jan 2025 22:48:40 +0000
asID: 273392
IP address blocks: 2804:8df4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b9:6a:a4:87:b5:63:da:9c:bc:21:5f:6c:3b:b3:15:e1:96:eb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
Validity
Not Before: Jan 4 22:43:40 2024 GMT
Not After : Jan 2 22:48:40 2025 GMT
Subject: CN=1DE5E33A6468BFD44A6C0F6C4C1998FD63D24DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:4d:46:43:fa:07:19:f8:35:9f:be:9d:36:
00:25:11:90:e2:66:73:7a:48:e7:ab:89:7a:46:95:
bd:33:cf:50:fe:9f:22:ec:50:46:f3:49:16:27:5c:
4c:e5:ca:9f:71:51:0c:88:00:d2:55:43:85:2c:c6:
78:66:2b:58:07:ba:eb:65:ab:57:a9:0b:c5:db:e7:
89:84:9b:67:18:18:88:77:15:5c:05:87:31:e3:9f:
c4:d3:cc:d5:7e:ff:de:c9:3e:15:a5:dd:cb:6c:63:
3f:e8:a2:59:1c:09:83:51:7a:fa:3c:59:65:06:e4:
45:3a:ae:2f:d6:c9:c0:58:e8:16:71:f4:c1:bf:c4:
c6:3c:5d:16:89:45:a7:7a:1d:24:3c:e6:e1:c3:29:
c2:0c:f5:7d:e6:ab:67:8a:f3:8e:f0:c8:53:96:4a:
ce:60:78:73:fa:6d:cc:52:ce:b0:96:e2:aa:3f:40:
24:f7:a5:69:8b:97:ed:0d:cd:71:ba:fb:02:d9:bf:
61:3c:84:ac:b4:91:7d:e5:5d:0f:2f:df:2f:0d:ab:
29:5f:5e:6d:48:fb:47:f4:2b:eb:c0:10:8b:0b:60:
30:84:76:07:77:e2:be:22:a5:a2:f9:4c:46:ed:6f:
dc:0b:54:f6:69:df:af:b1:63:01:46:e8:78:60:15:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E5:E3:3A:64:68:BF:D4:4A:6C:0F:6C:4C:19:98:FD:63:D2:4D:CB
X509v3 Authority Key Identifier:
keyid:52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8df4::/32
Signature Algorithm: sha256WithRSAEncryption
2f:34:a3:da:99:a9:d5:12:7c:c4:33:17:85:2a:04:d9:a6:a9:
8b:8b:be:88:f6:a9:5c:14:ab:49:31:19:e7:87:87:7c:c5:df:
28:70:03:9a:c2:33:e2:62:2b:c3:77:fd:0c:a8:62:6b:d8:52:
57:72:65:1f:8b:8a:4c:9a:66:d6:e3:01:2d:9d:33:69:03:e2:
42:ee:56:e3:73:45:57:bc:8f:f6:07:0d:2f:ab:cf:58:27:b7:
79:f6:ef:49:1f:52:fc:1a:94:ba:6b:a1:fd:89:fc:13:b6:f4:
4f:e8:d1:49:f8:88:b2:31:25:64:0e:06:3f:ec:fc:57:63:77:
2c:a1:0d:d6:03:96:56:cb:07:30:c8:ab:ab:00:a1:b2:ff:ce:
4f:bd:87:b0:4f:f1:bc:13:99:86:cf:d5:1a:14:92:e1:95:b9:
70:39:ae:6c:1c:5f:36:a1:a3:b6:a0:51:7c:b7:7d:29:ff:c1:
1c:c4:f8:40:f9:4d:7c:1a:e2:18:82:75:22:26:e8:fa:72:82:
15:d5:a9:32:7c:66:38:1e:45:6e:72:9f:ba:1f:1a:f6:7e:f9:
61:f5:ab:96:3a:14:55:58:fe:eb:39:e5:0a:7d:e4:4a:0e:34:
73:7b:44:d1:6b:ee:e6:79:97:f1:43:75:a1:63:a3:e7:f7:f1:
f9:50:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:42 2025 by rpki-client