![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3338203d3e20323637333235.roa
File: 323830343a346262343a313030303a3a2f33362d3338203d3e20323637333235.roa (raw, json)
Hash identifier: kjHeiI99fcpWaT3HqCkHkmZZkzbUw1oG3P6uSTkF8Dg=
Subject key identifier: A0:2E:73:E5:CB:ED:2A:B1:DD:7D:E0:98:22:C8:1D:32:3A:C5:C0:FE
Certificate issuer: /CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Certificate serial: 2C7A49F57B4D33C9860739A6C6140F95A47CA88C
Authority key identifier: 4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3338203d3e20323637333235.roa
Signing time: Fri 23 Feb 2024 12:30:59 +0000
ROA not before: Fri 23 Feb 2024 12:25:59 +0000
ROA not after: Fri 21 Feb 2025 12:30:59 +0000
asID: 267325
IP address blocks: 2804:4bb4:1000::/36 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7a:49:f5:7b:4d:33:c9:86:07:39:a6:c6:14:0f:95:a4:7c:a8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Validity
Not Before: Feb 23 12:25:59 2024 GMT
Not After : Feb 21 12:30:59 2025 GMT
Subject: CN=A02E73E5CBED2AB1DD7DE09822C81D323AC5C0FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:98:59:f7:e5:c5:b9:52:14:70:db:6a:ef:
2f:c7:40:60:d1:78:77:aa:2c:a0:8b:12:9e:56:d5:
55:51:a7:ad:a7:30:69:43:5b:76:15:59:50:dd:a3:
9f:e7:4d:ee:69:3d:27:14:38:79:26:f5:b2:c2:20:
84:b6:48:2f:22:d1:68:7e:99:49:d2:fb:6b:b2:d7:
34:e3:29:e5:e0:a9:27:3b:50:e3:3c:ad:82:16:84:
0c:73:7d:2f:66:7f:39:97:ab:6d:3a:56:0e:a1:75:
e2:1d:66:36:19:a0:0f:10:b6:84:52:05:ea:66:59:
2f:d4:3e:6f:7d:23:38:1e:e1:a3:9a:27:1e:16:89:
9b:1c:8a:22:65:17:83:ab:b3:b1:33:76:36:be:7d:
10:f9:8d:b1:8a:6b:9e:65:6a:b9:ef:75:91:fa:6c:
5b:c4:26:35:85:f3:0c:ba:35:50:c8:e4:ec:9e:1f:
51:54:af:6e:c5:ea:d8:2c:80:aa:d6:fb:38:be:b5:
d9:3a:eb:74:86:b9:89:8c:d0:af:4f:ff:eb:37:65:
ff:97:98:aa:98:e0:43:ca:bc:4a:14:4f:97:62:f3:
92:a4:77:8e:7e:d6:8a:1c:46:9a:9c:a6:4a:b9:90:
e0:f8:cd:98:8b:b9:5b:78:89:59:66:3e:98:32:95:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:73:E5:CB:ED:2A:B1:DD:7D:E0:98:22:C8:1D:32:3A:C5:C0:FE
X509v3 Authority Key Identifier:
keyid:4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3338203d3e20323637333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bb4:1000::/36
Signature Algorithm: sha256WithRSAEncryption
c8:b0:e0:0d:fb:69:3b:d4:d1:30:67:39:ca:d6:00:82:5d:31:
46:18:a0:1b:29:9e:35:40:06:fd:38:28:56:e2:29:9e:f4:be:
df:c9:e0:5e:2d:f6:6d:0c:5c:45:6d:2f:1c:11:fd:41:fc:e9:
75:8f:78:66:6d:6e:b1:0e:42:9b:c1:af:f4:aa:d9:e9:68:dd:
7d:4d:39:19:b9:06:94:31:16:a8:9c:cd:17:59:c4:8f:06:65:
8c:f2:8b:cb:33:7c:86:ea:5b:13:60:f8:eb:8e:ea:bb:75:d8:
97:bd:d1:81:28:5e:8a:8d:1a:65:76:37:fa:c4:33:e9:38:4a:
76:fd:b9:c7:2e:77:e3:9b:42:e9:4f:68:6a:53:08:65:4c:4b:
29:23:c5:21:3b:2a:95:b5:0d:72:7c:80:27:93:21:9b:b0:23:
25:13:1a:6d:54:15:1e:ce:b3:69:de:e8:4e:bd:ba:f1:76:f7:
71:d9:8d:8b:c0:6c:3f:7a:81:94:52:94:ce:6b:1f:94:73:18:
ab:3e:99:53:23:c4:08:24:75:b5:10:1e:1d:b4:2f:dd:39:82:
ad:44:e6:40:ae:20:1b:30:b2:bb:09:2a:38:ee:35:c0:d9:92:
56:00:ae:f7:ac:07:ef:4b:50:5b:86:c9:58:8f:c0:27:73:a4:
a0:f6:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:32 2025 by rpki-client