![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a3a2f34382d3438203d3e20323730353938.roa
File: 323830343a366537343a3a2f34382d3438203d3e20323730353938.roa (raw, json)
Hash identifier: 3NiZ+DIviWJTog/BULdQP5fCEaIu0F8xomqiy1JoPxs=
Subject key identifier: F1:66:57:C2:FF:49:76:F3:F0:16:28:F0:2A:8F:83:11:BA:99:5D:E5
Certificate issuer: /CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
Certificate serial: 460AA55A5423D09860B8084203D611BB7DE22567
Authority key identifier: 94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a3a2f34382d3438203d3e20323730353938.roa
Signing time: Tue 05 Dec 2023 13:44:27 +0000
ROA not before: Tue 05 Dec 2023 13:39:27 +0000
ROA not after: Tue 03 Dec 2024 13:44:27 +0000
asID: 270598
IP address blocks: 2804:6e74::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0a:a5:5a:54:23:d0:98:60:b8:08:42:03:d6:11:bb:7d:e2:25:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
Validity
Not Before: Dec 5 13:39:27 2023 GMT
Not After : Dec 3 13:44:27 2024 GMT
Subject: CN=F16657C2FF4976F3F01628F02A8F8311BA995DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:e2:80:4d:93:72:4b:34:c0:04:4a:9a:a5:
a5:aa:ff:ec:cd:65:d1:9a:0e:a3:f3:dd:4b:0f:14:
24:1f:df:90:58:c0:b1:40:fe:6d:43:39:d5:8c:fe:
77:e0:75:88:c9:10:7f:54:10:98:3d:ea:1c:9d:eb:
26:a7:51:43:dc:25:26:11:4b:89:f5:ef:7c:8c:c8:
b9:50:42:c1:2d:76:bb:86:32:6b:4b:76:2b:bf:ec:
51:32:db:90:b2:1a:8e:3c:ba:ab:9e:21:53:3e:68:
db:91:f0:aa:b6:8a:72:b5:d2:c3:48:8d:d2:6d:8e:
49:a7:3a:da:1f:eb:1d:7b:5d:b3:29:6b:60:4d:29:
ca:10:85:52:78:95:16:56:32:ad:f8:ac:99:df:d7:
ff:bb:41:f3:70:26:19:55:f0:b8:75:cc:4d:dc:75:
9a:c6:ea:1f:31:8b:e5:de:e0:63:68:5b:92:ba:72:
e4:31:64:93:ab:67:4d:7a:9b:1d:79:3d:33:03:7a:
55:61:cb:7b:a3:64:4b:ee:54:5f:48:4a:60:80:c0:
63:bd:ba:42:d3:51:eb:41:52:26:3a:f6:d8:1d:ea:
8b:06:84:7d:42:09:50:b7:09:5e:58:1b:f6:50:17:
28:bf:91:e9:13:6b:ec:86:f0:3b:42:2a:6b:d4:df:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:57:C2:FF:49:76:F3:F0:16:28:F0:2A:8F:83:11:BA:99:5D:E5
X509v3 Authority Key Identifier:
keyid:94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a3a2f34382d3438203d3e20323730353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e74::/48
Signature Algorithm: sha256WithRSAEncryption
7d:4d:45:84:a8:de:80:47:61:8b:db:98:dd:34:f1:87:12:62:
e7:a0:5b:a0:63:48:9f:5f:78:be:a7:44:da:8b:9a:11:9a:6c:
c1:a4:a3:e3:3d:d6:a2:e8:34:f1:19:d7:f4:0b:10:0f:df:5c:
02:bd:0d:96:01:d6:fb:9a:ca:d4:88:02:00:a1:7d:23:10:54:
36:2f:60:9a:28:f6:33:75:96:ac:90:e9:8e:90:30:d0:2e:50:
fd:31:dc:42:da:1a:41:10:41:9c:d7:17:f5:49:e3:c4:ae:f8:
5f:43:81:34:72:6a:95:75:72:17:d8:90:77:7a:00:a2:96:be:
6c:dd:87:25:b1:2b:73:29:3a:4d:06:82:66:07:2f:84:bc:9b:
89:05:d6:b4:f8:4f:89:8c:c5:77:65:7a:9e:e5:15:ed:b3:c3:
c4:d1:b0:30:29:cd:bb:70:6b:47:00:5d:bd:71:9b:44:96:36:
22:2e:dc:f8:de:09:2a:25:84:41:89:53:5b:32:24:29:60:5c:
84:a8:e0:cb:9c:0e:e8:94:48:11:a1:b2:8f:3e:6d:e1:22:01:
85:a0:70:38:af:99:bf:13:d9:a3:22:f8:d0:65:1e:5d:d6:df:
dd:21:7b:b0:80:53:86:e1:49:e7:97:e4:8b:51:e8:f9:e4:1e:
a6:e9:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:50 2025 by rpki-client