Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa
File: 323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa (raw, json)
Hash identifier: pU4lv0IhZCsCEj9q4G7SntKBWRY7QjvCrK0XuUqjpew=
Subject key identifier: B2:9A:08:D4:DB:55:B8:56:C2:DD:70:42:02:FD:05:9A:AD:02:02:FE
Certificate issuer: /CN=475E83C51035E9041EFB6506FC8A7B253E2D6DB9
Certificate serial: 5D7E3947D547EFE964C32FA6A5BEEC7747CE96DC
Authority key identifier: 47:5E:83:C5:10:35:E9:04:1E:FB:65:06:FC:8A:7B:25:3E:2D:6D:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa
Signing time: Tue 22 Apr 2025 20:43:48 +0000
ROA not before: Tue 22 Apr 2025 20:38:48 +0000
ROA not after: Tue 21 Apr 2026 20:43:48 +0000
asID: 262533
IP address blocks: 2801:80:290::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7e:39:47:d5:47:ef:e9:64:c3:2f:a6:a5:be:ec:77:47:ce:96:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475E83C51035E9041EFB6506FC8A7B253E2D6DB9
Validity
Not Before: Apr 22 20:38:48 2025 GMT
Not After : Apr 21 20:43:48 2026 GMT
Subject: CN=B29A08D4DB55B856C2DD704202FD059AAD0202FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:e0:3a:ba:40:24:d0:58:85:19:e2:3c:a1:
f6:4f:41:81:75:a6:3e:3a:6d:4d:3b:2e:db:25:0f:
d6:24:d1:b3:09:37:9e:55:c4:50:38:c6:61:4e:06:
27:c2:c8:b0:d7:b4:2a:86:21:60:37:4e:78:8f:b4:
b3:3a:ab:b1:98:40:c3:f7:0c:e4:18:11:92:21:c6:
22:eb:e3:ea:46:c6:e2:bc:50:70:ba:cc:9c:33:ef:
0a:5e:94:ae:17:db:dc:da:21:7a:13:7b:01:30:5f:
7f:dc:fc:2e:d5:c5:02:be:05:4b:96:d6:ff:8c:27:
b2:57:52:c9:74:a5:95:0f:de:a0:55:3f:51:d3:19:
5e:4b:f3:76:41:79:18:ea:0c:8e:99:d2:0f:4b:ec:
01:46:a5:5d:8d:d4:2f:0d:91:e9:e5:8c:67:44:cc:
ec:9e:cb:10:c5:92:08:1f:19:40:b5:48:86:19:ef:
3b:83:8f:64:11:31:08:c2:f5:fe:ef:4e:b8:68:56:
1b:48:22:98:49:7e:08:5d:42:84:e0:bd:39:be:2f:
22:79:dc:06:bf:51:c3:bc:55:47:17:f8:7e:83:fd:
85:93:bc:64:62:f2:52:8f:2a:51:79:bd:e5:60:7e:
f6:4f:c3:a4:f6:af:a2:33:8a:8c:b7:de:11:8c:ab:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:08:D4:DB:55:B8:56:C2:DD:70:42:02:FD:05:9A:AD:02:02:FE
X509v3 Authority Key Identifier:
keyid:47:5E:83:C5:10:35:E9:04:1E:FB:65:06:FC:8A:7B:25:3E:2D:6D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:290::/48
Signature Algorithm: sha256WithRSAEncryption
38:67:bc:29:cd:f8:89:69:23:02:f2:6c:31:ff:fa:5b:6c:13:
c3:dd:39:4f:b7:c2:4e:1b:a0:6e:04:1a:fe:d2:18:9f:90:5c:
03:f2:12:7a:fe:d0:0b:d2:21:80:02:01:f9:56:ff:62:17:11:
da:68:39:ed:0a:2b:2a:7a:c1:30:de:ef:01:12:4b:f6:cd:14:
5e:20:ce:62:e6:61:15:54:22:2f:ab:4e:a1:05:53:1d:4e:1d:
38:a5:cc:1e:a5:ec:93:4e:86:ae:fb:cc:23:a7:43:bd:c4:7a:
16:45:c0:44:39:94:33:2a:7a:47:21:3c:39:75:3f:01:a8:f1:
15:29:ca:e7:fe:7c:fe:c0:b1:9b:67:10:19:a1:0b:fc:bf:66:
29:95:5b:c4:a9:6c:88:97:1d:af:bd:62:77:08:ba:f7:3d:83:
a5:1d:a2:e3:bb:46:e8:14:32:ed:4b:df:36:78:ad:9f:b4:c8:
21:ba:1c:39:7e:26:1b:ec:ae:9a:f4:e2:b1:9c:b1:16:75:7c:
5d:56:1a:a9:72:7d:af:8d:95:4b:de:ea:11:bf:e3:c6:0a:2f:
7e:10:90:36:24:cf:69:e1:9e:59:40:d9:b9:cb:d6:94:bb:dc:
00:c1:d7:58:6b:2b:7c:b8:f6:bb:e7:7b:d6:67:93:a0:95:0e:
10:a4:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:52:43 2025 by rpki-client