![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/323830343a316363303a3a2f33322d3333203d3e203631363733.roa
File: 323830343a316363303a3a2f33322d3333203d3e203631363733.roa (raw, json)
Hash identifier: 7ukOtblCQDXTpgamvmXNNPWY37tf39J0xSgWRy+mFBI=
Subject key identifier: F7:EA:0E:25:16:13:D1:79:E4:C0:6D:16:09:42:A5:51:23:03:65:E8
Certificate issuer: /CN=47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E
Certificate serial: 1BBE46DE1EFEB9F7FD14FF7FA4149C7FD3D138DA
Authority key identifier: 47:B9:FF:ED:FC:07:80:C9:12:B1:95:AD:F6:D4:F6:1D:34:4E:CC:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/323830343a316363303a3a2f33322d3333203d3e203631363733.roa
Signing time: Mon 20 Nov 2023 14:03:07 +0000
ROA not before: Mon 20 Nov 2023 13:58:07 +0000
ROA not after: Mon 18 Nov 2024 14:03:07 +0000
asID: 61673
IP address blocks: 2804:1cc0::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:be:46:de:1e:fe:b9:f7:fd:14:ff:7f:a4:14:9c:7f:d3:d1:38:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E
Validity
Not Before: Nov 20 13:58:07 2023 GMT
Not After : Nov 18 14:03:07 2024 GMT
Subject: CN=F7EA0E251613D179E4C06D160942A551230365E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:5b:fe:5f:be:9f:44:b1:38:8b:ab:fa:20:
b8:7a:fc:0f:86:b2:84:41:b8:dc:6d:a4:91:1f:1f:
08:ad:16:23:6b:45:0b:04:b2:47:ab:b1:89:c6:3b:
a3:99:e7:5b:6b:db:a9:77:c9:40:e2:4e:2f:a7:57:
9d:77:2a:2c:24:6e:86:91:53:64:76:d3:bf:f0:39:
a7:c2:db:e3:56:22:26:e5:0e:af:a9:ae:f3:5d:d0:
10:dc:c5:23:43:80:30:64:68:e7:dd:b3:4a:24:c1:
fc:fc:22:cb:fb:89:30:fd:26:78:6f:ac:eb:bf:05:
e0:30:48:dd:d4:60:3b:f0:a4:e4:9f:c1:3b:6e:dc:
b8:9b:7e:87:da:e1:9d:a3:e3:15:e8:51:3b:4f:0d:
d1:80:4b:8d:cc:10:4e:e7:43:bb:65:57:ab:2f:54:
e1:52:53:f4:b0:fe:38:9d:c9:7d:f0:8c:59:16:e9:
77:ee:aa:8a:40:0a:61:57:89:40:c8:09:a8:8d:d0:
c7:5d:1a:36:10:54:d3:ae:ed:3f:9b:79:be:9c:4e:
11:d5:ab:9f:76:cf:42:50:0a:7f:04:0b:a8:86:fb:
63:27:65:ca:f2:75:61:f9:bd:05:14:ad:31:fb:01:
0d:5c:f8:57:9a:c0:27:0a:a8:11:70:21:eb:fa:f1:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:0E:25:16:13:D1:79:E4:C0:6D:16:09:42:A5:51:23:03:65:E8
X509v3 Authority Key Identifier:
keyid:47:B9:FF:ED:FC:07:80:C9:12:B1:95:AD:F6:D4:F6:1D:34:4E:CC:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/323830343a316363303a3a2f33322d3333203d3e203631363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:21:5d:93:12:a9:48:14:84:31:e4:19:a9:5e:c6:65:84:b0:
5c:3c:4f:43:b2:46:74:df:85:7c:04:bd:ec:51:6e:74:76:ed:
05:2b:f7:ac:77:4f:3f:f1:07:46:a9:67:06:bf:e8:f7:77:db:
a8:20:c3:cf:9b:26:6b:97:ab:c5:a6:b9:e9:a3:cb:8a:ca:41:
30:4f:16:c8:7f:fc:cd:db:d2:d7:b4:f2:5a:db:2f:af:53:ae:
88:c5:54:39:9f:7e:36:78:23:df:68:3a:ab:aa:3a:a2:bf:76:
03:ca:07:dd:89:ab:27:1e:86:5b:b8:a8:b4:dd:19:5e:b6:b9:
25:57:6c:3a:4b:85:6f:a8:d3:31:ec:da:c7:1a:b9:c8:94:77:
e5:de:be:8c:78:35:5e:ba:5b:33:c0:a5:66:de:df:e6:55:31:
ab:dd:4b:9e:34:5c:ba:1e:40:e3:e6:5f:38:54:68:0d:31:56:
97:da:ca:8f:e1:c1:14:8c:74:3a:08:f8:0d:9f:5d:78:fe:6a:
80:cb:56:4d:5d:f6:8e:9f:a6:40:58:1f:c3:a9:aa:11:1a:cc:
02:33:e3:7d:16:31:9d:83:d9:19:53:49:e6:e5:3f:90:4e:99:
f1:95:73:b0:ed:c8:39:93:50:2c:c1:fd:20:e3:65:95:15:ce:
99:55:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:32 2025 by rpki-client