![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
File: 323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa (raw, json)
Hash identifier: +gudfr8lc8GQi4RKv7nBnefIAC6zwkgzTqwGoTBtcek=
Subject key identifier: D3:E2:87:95:E4:D2:57:35:B0:BA:54:56:6F:54:4E:23:94:21:C1:AA
Certificate issuer: /CN=39B0A79080E6A51773F6AE71E043B42C04011838
Certificate serial: 6AD0AB37134D057D4881E6D4D83D067AFBA3B209
Authority key identifier: 39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39B0A79080E6A51773F6AE71E043B42C04011838.cer
Subject info access: rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
Signing time: Fri 27 Oct 2023 18:34:54 +0000
ROA not before: Fri 27 Oct 2023 18:29:54 +0000
ROA not after: Fri 25 Oct 2024 18:34:54 +0000
asID: 269555
IP address blocks: 2804:6664:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d0:ab:37:13:4d:05:7d:48:81:e6:d4:d8:3d:06:7a:fb:a3:b2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B0A79080E6A51773F6AE71E043B42C04011838
Validity
Not Before: Oct 27 18:29:54 2023 GMT
Not After : Oct 25 18:34:54 2024 GMT
Subject: CN=D3E28795E4D25735B0BA54566F544E239421C1AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:02:5e:9c:94:2a:16:99:ee:6a:9c:2a:65:
f0:a4:b4:36:a9:c8:11:78:59:80:62:d4:05:31:07:
f2:ff:38:de:19:2a:d5:de:38:f8:2c:63:c5:ad:ed:
9b:1f:4f:fe:1c:92:7b:7d:58:47:ba:03:c2:8e:f3:
9e:ce:e5:8a:6f:2d:0a:a0:96:c2:00:72:fd:c0:dd:
9a:c3:cf:8e:df:cc:94:f3:4e:4c:66:b3:75:22:c3:
8a:7e:82:e5:4b:41:71:4f:d7:af:e9:04:c6:70:cc:
2f:37:0c:8b:fe:08:7e:3c:f8:bf:96:92:6b:2a:e6:
5a:08:33:ff:67:82:cc:65:d4:56:50:cd:40:92:cf:
ce:ac:a0:17:99:c4:db:93:80:c0:c2:01:4e:53:90:
88:8c:97:45:c4:61:56:e3:eb:ed:e9:ca:1a:95:22:
a9:c4:d2:a9:7d:22:a5:25:b7:c9:17:5d:e1:81:d0:
82:7e:7d:5b:12:1c:7e:5c:f1:d6:57:6e:c1:03:80:
be:96:c8:99:2e:59:c8:46:d2:1a:62:84:51:7f:b2:
81:12:38:e3:bb:13:b0:5e:d9:12:9f:86:58:0f:84:
27:a1:6d:d4:4e:99:1e:84:c5:69:8a:bd:ee:90:2e:
36:4e:3b:7a:1e:95:34:c7:03:91:75:96:6c:bb:ee:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:87:95:E4:D2:57:35:B0:BA:54:56:6F:54:4E:23:94:21:C1:AA
X509v3 Authority Key Identifier:
keyid:39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/39B0A79080E6A51773F6AE71E043B42C04011838.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39B0A79080E6A51773F6AE71E043B42C04011838.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6664:8000::/33
Signature Algorithm: sha256WithRSAEncryption
d0:71:38:40:b9:02:bb:f4:d3:29:06:ff:f8:06:f7:10:00:79:
69:54:7c:b5:8b:42:fc:6b:0f:ae:f7:9a:7e:fe:eb:19:c7:4a:
b1:79:48:d8:2b:0e:43:c6:6b:67:f6:79:17:11:bb:4f:a2:35:
e1:26:6b:14:56:89:f8:6a:a5:a8:e4:82:41:20:52:36:ea:0e:
ae:98:82:5a:c9:f1:13:66:4f:79:cc:cc:3a:38:9d:cf:13:06:
21:0a:cf:4b:e8:f8:de:2b:24:b8:a8:77:d5:46:2d:1f:05:e2:
eb:63:3d:b2:33:68:d9:85:4f:d8:05:b2:33:2e:f3:62:ba:ad:
49:68:75:1e:22:d0:83:eb:88:65:a2:16:a9:85:65:c7:4e:42:
e1:3c:76:e8:9f:3f:e7:f5:43:76:b1:9b:99:64:7a:92:55:8d:
a2:fd:e3:c1:d7:1e:9d:d4:8d:ea:c9:5f:a7:a0:44:6e:27:41:
91:67:cc:fa:71:02:0d:85:31:32:04:05:49:b0:3e:cd:05:a5:
42:40:d6:da:82:fa:8f:21:02:56:b5:a0:e0:d6:e0:00:75:d0:
60:36:4b:84:ea:4a:4c:c0:a9:88:85:28:9d:fa:b0:41:5c:5e:
36:1d:0a:ab:01:cd:f5:78:17:6d:9c:c2:78:2e:ea:45:2b:59:
3e:57:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:09 2025 by rpki-client