![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0/323830343a383962633a3a2f33322d313238203d3e20323733363233.roa
File: 323830343a383962633a3a2f33322d313238203d3e20323733363233.roa (raw, json)
Hash identifier: hV00uRuD3bs044geJ0irY4/rX1IWr3Gq5wW+EKx8kuM=
Subject key identifier: 22:43:1D:03:02:97:A6:D5:43:DD:45:84:AA:7B:CE:78:82:C3:9B:1C
Certificate issuer: /CN=6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F
Certificate serial: 3C3CE2EBF80791ED20209D2271F8009012E84EED
Authority key identifier: 6C:85:C8:A6:39:DB:E7:61:77:5D:88:F6:F1:1E:7F:3E:3E:4C:AA:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0/323830343a383962633a3a2f33322d313238203d3e20323733363233.roa
Signing time: Sat 11 Feb 2023 12:54:39 +0000
ROA not before: Sat 11 Feb 2023 12:49:39 +0000
ROA not after: Sat 10 Feb 2024 12:54:39 +0000
asID: 273623
IP address blocks: 2804:89bc::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3c:e2:eb:f8:07:91:ed:20:20:9d:22:71:f8:00:90:12:e8:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F
Validity
Not Before: Feb 11 12:49:39 2023 GMT
Not After : Feb 10 12:54:39 2024 GMT
Subject: CN=22431D030297A6D543DD4584AA7BCE7882C39B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:fa:00:70:e0:2a:1e:68:66:9d:50:78:f2:
e3:c9:e8:f7:4c:f1:44:ab:e8:1c:0b:e1:00:2f:32:
c1:f7:fa:2b:e1:66:74:b6:e6:6e:9c:bf:c9:d7:1d:
39:33:66:c0:d9:14:db:58:aa:13:32:d1:1c:cb:58:
b1:1d:bc:06:6b:b8:11:15:71:7b:a5:9f:98:8d:c4:
1e:f8:f7:ba:e5:b1:db:5a:25:1a:67:32:89:90:5b:
c9:33:0c:8a:94:7a:08:d9:26:b7:2f:a6:f2:54:e8:
71:d7:8a:0d:bd:e0:98:cb:00:ba:7a:ab:26:fa:7d:
8a:45:29:f1:dc:13:2f:5d:e7:c8:41:dc:75:43:a7:
7e:62:a4:a1:27:cd:f6:1c:93:1d:79:6e:74:6e:92:
05:87:0f:32:d3:ac:a9:da:8d:aa:52:10:95:55:23:
a2:67:bb:52:7f:68:b1:ef:10:86:b4:ce:e8:05:c7:
74:dd:f1:d9:eb:16:5d:8a:5f:a4:84:30:6f:1f:a0:
4f:5f:64:95:cb:49:d3:13:45:5c:93:a9:a6:38:d1:
ea:4e:38:48:f8:eb:8b:b9:dc:4b:b4:1f:4b:8f:24:
5e:69:92:48:c5:07:f2:bf:6c:a3:a0:56:d5:f3:6d:
14:40:fa:75:bd:a2:5c:03:f7:28:44:2b:be:3d:54:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:1D:03:02:97:A6:D5:43:DD:45:84:AA:7B:CE:78:82:C3:9B:1C
X509v3 Authority Key Identifier:
keyid:6C:85:C8:A6:39:DB:E7:61:77:5D:88:F6:F1:1E:7F:3E:3E:4C:AA:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0/6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C85C8A639DBE761775D88F6F11E7F3E3E4CAA9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDNyQ9Zd66tLsVVyrM1y4TjVv67MkFmHjafmcsNBC4QE/0/323830343a383962633a3a2f33322d313238203d3e20323733363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:89bc::/32
Signature Algorithm: sha256WithRSAEncryption
ab:98:df:e4:ae:00:86:83:0c:83:bb:6b:2b:5c:bc:b2:72:9e:
e4:df:d6:71:a4:b8:64:e7:31:7b:13:4b:26:7f:8a:91:2d:71:
b3:b6:45:88:4e:a1:a3:05:c1:f4:99:10:b1:7f:8b:dd:f8:19:
0c:d3:cd:a8:48:9c:60:6c:bf:51:04:a7:63:b2:02:19:b0:c5:
2e:30:13:0f:88:71:e5:99:82:4f:d9:a9:8f:3b:e5:35:18:2b:
42:36:04:30:c2:e2:54:48:2a:66:3d:e7:18:55:5f:24:39:d6:
e4:ec:0f:79:30:86:c4:50:25:89:0d:78:62:8d:4e:dd:97:90:
5d:77:72:90:59:f7:fd:a5:cf:0b:10:7d:89:f8:99:ba:4d:c9:
64:31:1c:a6:a7:0d:c6:18:c5:5d:8e:d5:c8:6d:48:d3:b6:78:
e5:f1:80:07:38:af:71:78:4c:08:1c:65:2b:58:dc:5c:6f:69:
7c:7c:92:e3:b4:ec:f2:d9:07:a3:00:55:9b:91:ac:51:e1:95:
f1:85:5d:c4:94:a5:65:30:82:55:fa:33:37:cb:4c:97:02:cf:
3f:44:76:5c:c4:fb:71:60:40:f3:91:3b:d0:09:12:ec:18:58:
2e:b2:5d:92:3e:8a:f1:e0:7e:62:62:65:7c:af:57:41:61:f0:
bd:b4:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:49 2025 by rpki-client