![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a633030303a3a2f33342d3334203d3e20323733343434.roa
File: 323830343a386562383a633030303a3a2f33342d3334203d3e20323733343434.roa (raw, json)
Hash identifier: jD7DaEy1zt9EXKumWAI30XM/UTySH+kId6WI5+/F7VE=
Subject key identifier: 9B:69:7B:F9:C0:72:1D:66:FB:7E:4A:CF:B2:F3:C4:9F:04:C5:80:AC
Certificate issuer: /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial: 4A9E3233DABD0DD4CF68E3BBB16B0D8E6E2739C6
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a633030303a3a2f33342d3334203d3e20323733343434.roa
Signing time: Mon 28 Oct 2024 12:46:13 +0000
ROA not before: Mon 28 Oct 2024 12:41:13 +0000
ROA not after: Mon 27 Oct 2025 12:46:13 +0000
asID: 273444
IP address blocks: 2804:8eb8:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9e:32:33:da:bd:0d:d4:cf:68:e3:bb:b1:6b:0d:8e:6e:27:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Validity
Not Before: Oct 28 12:41:13 2024 GMT
Not After : Oct 27 12:46:13 2025 GMT
Subject: CN=9B697BF9C0721D66FB7E4ACFB2F3C49F04C580AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:fc:60:4c:39:37:26:13:dd:cc:40:c4:43:
19:33:c9:18:e4:fd:7c:79:37:45:b9:98:dc:6f:e3:
42:fa:45:6f:4b:19:09:8e:b2:dc:7c:f4:f0:5d:6d:
23:a1:3c:5b:e1:9f:b0:c2:cf:40:f6:24:36:64:f6:
04:1a:e0:9d:14:14:30:79:a2:81:57:e8:16:4c:ee:
11:26:64:46:92:94:24:a8:ee:b2:c4:2f:27:10:68:
e0:2c:c6:e4:d7:8b:8e:35:1b:10:c5:f6:7e:ba:53:
ab:6f:13:f7:12:56:a6:4d:8b:7d:29:d4:c0:b7:77:
af:82:b3:f5:be:fe:a7:14:7d:1d:9d:f1:2c:10:df:
2c:28:f0:a6:b4:b3:36:e7:15:ec:11:57:65:26:44:
e9:84:b7:62:d0:e9:8d:1c:b1:52:05:51:55:8e:51:
81:3d:35:49:d7:58:3d:f1:eb:5f:10:75:fd:c6:35:
bd:59:75:1e:25:fb:8b:a1:80:f7:39:f6:86:95:7b:
e1:d4:2a:9a:0c:b2:11:34:4f:d7:3a:a0:72:6f:7d:
bc:08:f2:de:0e:8c:38:4e:68:25:ce:0a:99:ea:0a:
b0:be:4b:62:81:10:ff:db:bf:b7:8c:43:93:81:e4:
31:31:a0:96:33:bb:38:41:60:d7:44:32:3d:e8:44:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:69:7B:F9:C0:72:1D:66:FB:7E:4A:CF:B2:F3:C4:9F:04:C5:80:AC
X509v3 Authority Key Identifier:
keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a633030303a3a2f33342d3334203d3e20323733343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8eb8:c000::/34
Signature Algorithm: sha256WithRSAEncryption
26:bb:41:35:48:dc:ab:38:1b:c7:21:65:5a:10:68:b3:65:0e:
d2:04:c9:23:b3:e2:cf:97:de:3e:e9:11:2e:e8:8a:78:c0:ec:
b0:e1:57:bf:5d:54:7a:e5:94:5d:60:14:6f:20:76:2c:5b:9f:
f7:21:52:88:d6:df:e7:e9:33:fd:8d:9d:3d:57:c3:f3:c8:61:
a4:c4:20:04:2c:c3:39:fe:bf:02:9a:d8:6c:0c:7d:98:8b:0b:
b8:fb:2e:11:42:6e:61:05:7b:ea:3d:81:d7:34:aa:87:35:aa:
b7:4a:e6:7d:4a:0f:89:b8:0f:b1:2f:d2:b1:39:c7:b4:92:71:
da:4d:d0:31:ed:21:76:f5:97:a3:bc:40:c4:5c:80:27:8b:c3:
39:4d:ce:aa:f1:62:9d:79:e6:c4:9a:b3:0e:08:3a:1d:9a:0a:
31:0f:38:2d:0d:f6:ce:2a:aa:8e:c4:69:c4:91:82:f7:49:46:
b2:a3:13:74:d2:ea:99:50:d5:19:6f:1a:21:40:ae:f4:dc:d4:
33:65:86:72:9c:ba:91:dc:4d:27:87:41:b5:cc:7a:12:44:c0:
a8:d7:23:b7:8b:60:05:44:c9:2e:e1:3b:7c:46:53:d8:51:60:
0f:39:07:fb:eb:ba:8e:85:64:26:26:c5:2c:2f:5b:04:3d:f0:
7f:f0:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:44 2025 by rpki-client