This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa
File:                     323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa (raw, json)
Hash identifier:          KVu7BWA6lXL2b/fgPF/llndpELv/wWkWLmloLx1QiaM=
Subject key identifier:   6F:D7:DD:F1:39:BB:87:8F:14:CF:F4:3E:8B:22:F6:F8:B7:2C:74:29
Certificate issuer:       /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
Certificate serial:       46F54930B0243828983934EC8D3EB0E693EB284A
Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa
Signing time:             Tue 29 Jul 2025 15:15:10 +0000
ROA not before:           Tue 29 Jul 2025 15:10:10 +0000
ROA not after:            Tue 28 Jul 2026 15:15:10 +0000
asID:                     265384
IP address blocks:        2804:3340:bb00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f5:49:30:b0:24:38:28:98:39:34:ec:8d:3e:b0:e6:93:eb:28:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
        Validity
            Not Before: Jul 29 15:10:10 2025 GMT
            Not After : Jul 28 15:15:10 2026 GMT
        Subject: CN=6FD7DDF139BB878F14CFF43E8B22F6F8B72C7429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:dc:2d:5b:0e:d0:4b:41:3e:8d:20:46:7a:
                    d5:9e:94:0f:22:db:a4:a4:c4:10:4d:31:2c:12:c6:
                    5f:53:f7:f7:0b:4f:d1:6a:2e:db:97:31:43:62:13:
                    00:87:d9:35:e4:42:a2:de:96:9f:b1:63:e5:6a:51:
                    24:06:88:d6:da:5a:1f:5f:1b:64:ce:80:dd:a9:1b:
                    2b:80:4b:67:39:e5:aa:25:05:ac:ef:94:63:b2:42:
                    16:d5:d7:08:0c:72:16:e1:49:b6:1f:b4:f1:b5:63:
                    70:7a:9b:4b:f9:96:fc:da:76:79:49:f7:08:6b:26:
                    cc:e1:3e:b4:f3:f9:a3:12:79:21:2c:47:5c:1e:df:
                    ca:88:f9:5b:18:04:48:0b:fc:bd:3e:d9:f4:4b:d4:
                    14:69:c5:62:ce:c2:c0:5b:69:a3:3e:75:fe:ec:97:
                    f5:55:f0:76:a5:ce:cd:a9:cd:e4:da:a7:f5:fe:16:
                    e6:78:e6:3a:5c:f5:dd:f2:08:f6:bf:b6:fe:35:93:
                    51:29:d9:ea:38:0f:25:01:b8:99:04:25:df:d2:25:
                    87:0f:92:19:5b:64:5c:41:70:1a:02:58:47:c1:b8:
                    f7:96:0d:13:45:40:db:80:77:0b:92:28:63:57:4c:
                    b2:cb:f6:63:1b:90:a5:bd:f2:f6:f0:19:cd:a0:a9:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D7:DD:F1:39:BB:87:8F:14:CF:F4:3E:8B:22:F6:F8:B7:2C:74:29
            X509v3 Authority Key Identifier:
                keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:bb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:e6:ab:c7:63:50:dd:c7:d2:9a:19:77:17:e4:29:2f:42:
         2c:10:8a:49:ba:a6:24:04:bd:52:21:73:9a:75:d4:8a:cd:a6:
         fe:10:83:80:10:ca:ef:91:3b:8b:9e:cb:0e:95:9d:85:5c:04:
         f0:84:09:86:f5:ae:cc:53:3f:44:e5:e0:78:d9:38:a4:3e:7a:
         5c:8c:d8:f9:97:7d:f5:17:18:d4:f7:e5:5b:63:07:3d:cb:ce:
         70:af:05:ef:fe:10:d5:2f:6a:99:d1:ad:cb:b9:7b:b4:3c:2c:
         78:24:1c:11:49:11:27:32:45:06:7c:5a:5a:7f:a5:ac:72:05:
         e5:e7:00:c0:dd:17:b8:77:4f:5c:14:36:64:db:60:b5:4a:f2:
         0b:ca:1d:3b:60:e5:f6:86:65:34:ab:15:93:a9:43:8e:d3:ff:
         59:b8:fd:94:f9:c8:5c:a1:4d:d0:eb:8c:40:89:b3:f5:b0:4f:
         c1:df:2d:78:b5:b9:4e:42:23:b8:ed:8b:22:a5:7d:76:a2:a1:
         a8:2f:63:00:75:e6:6b:0a:1d:cb:aa:91:5c:90:bd:39:4c:b3:
         29:cd:7d:40:9c:da:a2:fa:53:86:12:7d:6b:4e:c7:ed:4c:9f:
         0f:3f:e7:92:6d:16:76:7d:69:47:b2:86:5d:63:9b:b4:78:dd:
         ec:6e:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----