![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/323830343a313736343a3a2f33322d3332203d3e20323633313433.roa
File: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (raw, json)
Hash identifier: lQbUaDw/o+/Lv7WMthSPXSaCYrHbM+DvHQJJSNOar+I=
Subject key identifier: 1B:A7:78:4C:26:08:82:E9:61:40:17:03:3E:AC:96:25:F2:78:4B:13
Certificate issuer: /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial: 2A74A1FD09C3D1791CBA438A3B6AD622623475E4
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/323830343a313736343a3a2f33322d3332203d3e20323633313433.roa
Signing time: Mon 22 Jan 2024 13:46:23 +0000
ROA not before: Mon 22 Jan 2024 13:41:23 +0000
ROA not after: Mon 20 Jan 2025 13:46:23 +0000
asID: 263143
IP address blocks: 2804:1764::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:74:a1:fd:09:c3:d1:79:1c:ba:43:8a:3b:6a:d6:22:62:34:75:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Validity
Not Before: Jan 22 13:41:23 2024 GMT
Not After : Jan 20 13:46:23 2025 GMT
Subject: CN=1BA7784C260882E9614017033EAC9625F2784B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:3a:f8:3c:d0:84:5d:ac:ba:e4:b9:b4:cd:
fb:e7:9c:fa:47:95:be:9a:7f:af:bf:04:e4:fc:b4:
48:b8:5b:fe:d8:7b:67:c2:56:64:86:01:73:9b:6e:
61:11:e9:5b:88:e0:e8:e1:85:b5:ba:74:1d:d0:c9:
28:3b:ef:27:e5:18:8a:45:45:1b:49:e5:22:22:5b:
d3:3e:68:61:4c:95:be:5e:71:a0:fd:a9:08:ad:bd:
c0:c7:9f:51:45:3c:57:f3:21:e5:3e:96:2a:10:bb:
0a:f5:7c:55:ec:81:2e:db:12:f4:59:bb:b7:46:51:
2c:14:1c:fa:12:eb:99:1c:e3:6e:dc:23:b6:53:76:
03:01:c9:1f:bd:59:81:e6:32:90:03:1d:7c:e9:bb:
de:69:0b:33:7a:c6:89:92:c9:d4:c7:47:cb:16:54:
58:bf:cc:7d:f5:02:b2:be:7e:4d:d5:df:f6:3b:50:
1c:d0:16:3b:fb:7b:0b:12:44:e2:8d:64:0b:4f:cb:
76:9e:75:e6:21:0d:95:2b:1b:52:bf:02:25:1f:00:
f7:4a:52:a0:47:2a:29:39:9c:6c:c9:e8:26:ef:98:
2a:07:5c:5a:4c:33:19:37:4c:d4:c4:1e:a5:09:b6:
a3:1b:26:53:ec:ee:3b:ab:15:bc:74:84:f9:74:f2:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A7:78:4C:26:08:82:E9:61:40:17:03:3E:AC:96:25:F2:78:4B:13
X509v3 Authority Key Identifier:
keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/323830343a313736343a3a2f33322d3332203d3e20323633313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1764::/32
Signature Algorithm: sha256WithRSAEncryption
9f:1d:60:c6:83:70:b0:23:83:d2:6b:c9:68:c3:f1:59:de:33:
19:89:be:6e:64:f5:4a:24:02:26:d1:ad:1f:78:fa:64:8d:a9:
e4:16:00:d0:2d:98:e0:e4:ea:7d:9b:14:b2:80:d1:e6:e2:01:
8a:ce:00:0d:a2:de:b2:fa:5e:db:fc:9d:a4:33:ec:d7:b9:8a:
e8:f1:8d:d4:91:31:39:70:d8:61:0f:83:d6:45:fb:c7:ee:33:
87:39:cf:29:bc:36:87:59:3e:3d:97:97:3a:26:50:af:ea:18:
24:79:1e:cf:f6:a5:be:cc:05:b6:d3:20:84:3a:e2:5f:df:2a:
88:0c:af:73:e6:48:d0:52:e1:64:13:ec:ff:54:7e:43:61:3d:
9d:f2:e9:27:35:0f:34:65:d6:71:c6:27:ab:11:48:39:67:f8:
16:a3:85:b6:0b:c1:7c:ef:7b:ad:37:c3:a2:b6:65:b9:ef:43:
9c:00:31:f8:6f:b3:3a:41:51:40:78:84:3e:78:60:42:82:36:
5a:f2:ba:ad:ee:89:57:00:7f:cb:90:da:ba:83:cc:dd:88:8e:
e0:02:d5:0f:dc:da:cb:cb:c3:af:83:dd:53:5e:30:bc:8e:59:
bf:fc:60:16:9c:8e:55:7a:eb:72:9d:4a:6b:55:0f:8e:0f:c0:
7d:6b:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:58 2025 by rpki-client