This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/323830343a336663343a3a2f33322d313238203d3e20323635393133.roa
File:                     323830343a336663343a3a2f33322d313238203d3e20323635393133.roa (raw, json)
Hash identifier:          avJIIlgTSJBAz4gvyT4wCLqOQBYXIzdNarYiaSOpbxA=
Subject key identifier:   DE:14:56:AF:DD:34:7F:4C:F0:06:B6:45:DE:D6:8B:8E:31:56:69:EF
Certificate issuer:       /CN=9D9E3DEED92D096161647544CB8DF6DBE1B40E12
Certificate serial:       630D2D1F4F8D93EFA138DAD5FD1EDF10D93CC33C
Authority key identifier: 9D:9E:3D:EE:D9:2D:09:61:61:64:75:44:CB:8D:F6:DB:E1:B4:0E:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/323830343a336663343a3a2f33322d313238203d3e20323635393133.roa
Signing time:             Thu 06 Mar 2025 12:39:16 +0000
ROA not before:           Thu 06 Mar 2025 12:34:16 +0000
ROA not after:            Thu 05 Mar 2026 12:39:16 +0000
asID:                     265913
IP address blocks:        2804:3fc4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0d:2d:1f:4f:8d:93:ef:a1:38:da:d5:fd:1e:df:10:d9:3c:c3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9E3DEED92D096161647544CB8DF6DBE1B40E12
        Validity
            Not Before: Mar  6 12:34:16 2025 GMT
            Not After : Mar  5 12:39:16 2026 GMT
        Subject: CN=DE1456AFDD347F4CF006B645DED68B8E315669EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:dd:ce:fb:c5:d2:db:b3:a0:49:fe:91:e6:
                    0c:56:20:6a:6d:6c:d4:4a:c3:c6:02:60:51:72:09:
                    b6:d6:dd:b2:73:05:06:7c:58:d9:fd:f2:d9:a5:f1:
                    bb:49:a0:55:4a:d5:3d:e4:12:92:b5:f5:ca:8b:5b:
                    b9:20:7a:90:39:2f:6d:29:ce:e6:8e:ec:3b:15:50:
                    11:45:00:dd:bb:23:a1:4c:a4:93:ff:9d:8b:0a:1f:
                    ce:32:0f:22:1a:fb:d6:fe:92:25:76:ae:2b:8b:48:
                    c0:ad:79:59:6a:cb:e5:3b:47:b7:4d:5b:06:01:53:
                    57:c1:f7:d8:69:1b:5e:f9:2b:9a:b0:59:d3:38:ac:
                    4b:0c:13:7d:b0:89:3f:77:e3:1a:95:13:cc:fe:0d:
                    7c:61:fe:53:ae:91:e9:e8:ca:59:0a:e4:76:43:45:
                    20:63:7e:b4:60:ed:a8:a3:c2:6c:7e:96:d0:bf:f4:
                    7a:f0:24:60:f8:a3:e3:9b:6c:bc:70:42:d1:82:60:
                    ee:75:dd:4a:61:da:4a:b6:4e:90:62:6a:de:ab:42:
                    d8:44:2e:88:a3:e8:0c:0e:7f:48:19:4f:02:49:6e:
                    f7:9b:32:fa:0f:88:a3:5e:09:be:4e:92:1d:b9:da:
                    3d:7b:39:2b:08:41:6d:80:64:cb:f4:24:13:7e:98:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:14:56:AF:DD:34:7F:4C:F0:06:B6:45:DE:D6:8B:8E:31:56:69:EF
            X509v3 Authority Key Identifier:
                keyid:9D:9E:3D:EE:D9:2D:09:61:61:64:75:44:CB:8D:F6:DB:E1:B4:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/323830343a336663343a3a2f33322d313238203d3e20323635393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:44:aa:06:cd:6a:95:c0:b9:4c:3d:66:0e:ec:e7:af:78:
         0e:f5:ff:79:48:88:85:75:e1:ef:d4:7c:96:8c:a4:c4:2c:02:
         6f:9e:e7:ac:f8:42:04:13:4a:4c:f7:74:79:f8:9d:6a:a2:18:
         b2:0b:ab:3d:d6:18:72:79:95:61:5d:e7:11:a0:99:81:15:88:
         39:8a:bc:f2:5a:56:6c:c9:21:a6:a4:c0:ae:11:f1:9f:13:77:
         38:8c:a7:64:88:59:98:e4:0e:e1:74:d3:5c:9d:1a:96:de:3a:
         52:bd:19:dc:cd:6c:8d:22:f2:8b:cc:a4:30:7e:a7:c2:59:8c:
         23:ce:1a:c5:53:24:6f:7d:90:27:72:d6:77:b0:87:b6:c3:aa:
         b4:e2:8d:af:6c:db:30:d3:ab:d8:d7:19:d7:94:45:f8:07:2d:
         95:a6:9e:d8:87:f1:08:ed:64:36:14:dd:a5:d2:a6:f4:c6:fa:
         c3:7b:63:9f:ab:c7:30:3d:0a:31:e3:54:5e:e4:b6:f2:81:ab:
         92:e3:2d:a4:d6:bf:52:5a:03:6f:8f:0b:7f:ea:63:58:2a:68:
         2d:fa:5d:a4:48:ee:0f:df:08:da:80:9e:c0:a6:32:85:4b:9d:
         89:96:a9:80:59:b0:d4:8d:31:5b:2d:d1:fd:b1:30:55:4e:a8:
         73:67:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----