![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa
File: 323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa (raw, json)
Hash identifier: AYXutMoZ/seW2UD7dskTV/uH3/uhmZXa3HhpKr/BLr8=
Subject key identifier: 75:18:A4:FD:EA:69:FD:73:E3:68:87:E2:32:BD:C4:36:27:AC:58:06
Certificate issuer: /CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Certificate serial: 0F0502EA39D190D9836D34B59F6E04993BA40891
Authority key identifier: 4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa
Signing time: Fri 23 Feb 2024 12:30:41 +0000
ROA not before: Fri 23 Feb 2024 12:25:41 +0000
ROA not after: Fri 21 Feb 2025 12:30:41 +0000
asID: 267325
IP address blocks: 2804:4bb4:100::/40 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:05:02:ea:39:d1:90:d9:83:6d:34:b5:9f:6e:04:99:3b:a4:08:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Validity
Not Before: Feb 23 12:25:41 2024 GMT
Not After : Feb 21 12:30:41 2025 GMT
Subject: CN=7518A4FDEA69FD73E36887E232BDC43627AC5806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:6d:eb:60:9c:45:a7:27:52:1a:2d:a3:2a:
f4:c6:70:c2:cc:f1:c5:8e:b9:3b:fb:80:c1:15:32:
a0:ee:7f:36:57:e1:bb:1a:ed:8f:da:55:12:0f:d2:
13:38:62:d5:a1:b1:24:3e:8c:93:22:24:f3:88:4a:
c4:23:fe:fd:28:d2:9c:31:16:69:d7:66:44:33:c9:
4d:cb:09:4e:aa:a8:03:00:ed:0e:76:f9:83:34:e0:
4c:1d:82:17:5f:8f:55:a9:c1:e4:a7:a1:79:e4:3c:
d1:ef:87:65:1c:26:26:e4:89:9c:d3:4f:a1:ab:8b:
fd:be:52:f1:f9:cb:8d:f2:9b:16:8f:5e:73:39:46:
d4:58:81:ac:42:78:97:b4:8c:3a:62:e7:d8:2a:d8:
92:16:39:80:b9:3e:b4:45:54:db:d8:60:ff:a5:4d:
97:11:e8:cc:db:34:bc:6f:5e:71:75:84:0c:84:6c:
8f:94:61:c5:89:d5:4c:d5:a2:40:a1:5e:36:f3:b2:
a4:02:b6:c4:b9:a4:7e:8e:02:7e:f5:c2:66:b9:40:
13:a2:02:f2:71:79:01:a5:ef:7f:ee:6e:4c:8c:91:
96:fd:5d:0b:65:8d:04:de:cc:fb:f1:66:2b:c2:5b:
dc:0e:18:5b:c6:e2:09:fb:13:18:a2:30:9f:e4:d3:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:18:A4:FD:EA:69:FD:73:E3:68:87:E2:32:BD:C4:36:27:AC:58:06
X509v3 Authority Key Identifier:
keyid:4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bb4:100::/40
Signature Algorithm: sha256WithRSAEncryption
65:70:84:f4:9c:75:3f:ce:fc:26:42:a9:d1:24:8a:c4:5c:97:
3d:67:a5:92:84:70:63:f3:2e:5b:e7:51:e6:81:97:6c:7b:14:
23:4b:1a:7f:ef:64:be:e1:45:98:be:41:67:9c:39:f6:45:05:
0c:4d:97:d2:4f:84:cd:cc:d9:40:90:98:a2:7d:34:5b:7d:a6:
4e:0f:e4:ce:56:ac:18:ca:d9:34:99:b9:f1:10:cf:4a:92:0f:
cb:36:f7:2d:2d:43:10:ea:a1:c9:6e:5f:55:64:fe:ba:5e:5d:
55:1d:71:c4:32:a3:67:c6:d5:ec:3b:11:51:4a:4e:fd:01:2a:
2a:78:44:c3:72:cc:3a:a2:f9:2b:15:e1:25:75:35:0d:20:c4:
43:dd:91:7f:33:11:fb:33:09:51:02:8f:1a:7b:b1:f1:9c:d0:
4e:96:85:60:87:56:99:bf:5c:58:1a:76:c9:c2:0f:bc:60:8f:
bc:9e:1b:51:ca:33:53:d2:33:88:c0:ce:90:bd:93:08:f7:37:
c2:ab:e7:d4:f2:80:f0:f6:9c:d0:37:b1:65:dd:5b:24:31:a6:
f1:7b:c4:7c:d7:a4:a2:9a:44:46:fe:5a:2a:ec:11:a4:08:1e:
10:05:7d:e1:d5:7a:02:1a:e6:10:1b:15:81:22:ba:6e:83:ec:
7f:1b:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:19 2025 by rpki-client