This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/323830343a393335633a3a2f33322d313238203d3e20323734373732.roa
File:                     323830343a393335633a3a2f33322d313238203d3e20323734373732.roa (raw, json)
Hash identifier:          W8p3iAFv/0+dNep/TwGM3N5W6yI+0A+CaLk1FPet5Zc=
Subject key identifier:   F9:57:FE:40:50:64:B3:9A:F6:43:FF:CF:36:EA:CE:51:68:40:5F:17
Certificate issuer:       /CN=D0C3927791F8468E41A472151D0B19223D07DFB7
Certificate serial:       4AEF9B1E1BBDEE383277C8579D5A3FB7C05505CC
Authority key identifier: D0:C3:92:77:91:F8:46:8E:41:A4:72:15:1D:0B:19:22:3D:07:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C3927791F8468E41A472151D0B19223D07DFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/323830343a393335633a3a2f33322d313238203d3e20323734373732.roa
Signing time:             Mon 19 Jan 2026 22:08:11 +0000
ROA not before:           Mon 19 Jan 2026 22:03:11 +0000
ROA not after:            Mon 18 Jan 2027 22:08:11 +0000
asID:                     274772
IP address blocks:        2804:935c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ef:9b:1e:1b:bd:ee:38:32:77:c8:57:9d:5a:3f:b7:c0:55:05:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C3927791F8468E41A472151D0B19223D07DFB7
        Validity
            Not Before: Jan 19 22:03:11 2026 GMT
            Not After : Jan 18 22:08:11 2027 GMT
        Subject: CN=F957FE405064B39AF643FFCF36EACE5168405F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:10:62:45:7a:ca:34:4f:32:25:4b:b9:64:
                    17:c3:f4:2c:1e:4b:de:9a:f5:13:b8:3e:9e:05:9e:
                    bb:0e:7a:87:74:b7:de:b7:9c:66:2a:ee:bb:02:13:
                    0d:f0:fc:68:ef:fd:46:f3:03:e2:b4:80:9f:ac:54:
                    36:f7:41:b2:1d:58:7e:b6:c4:33:4e:79:8b:e6:46:
                    7a:00:44:50:25:22:52:d3:92:91:fd:de:29:d0:c0:
                    2b:14:48:15:e9:85:51:55:6b:4c:73:f9:18:dc:87:
                    5d:95:9d:ff:eb:ed:43:80:6f:14:cf:38:74:79:27:
                    6d:0b:ee:6e:31:cc:e3:71:29:c6:67:7d:91:3f:21:
                    cc:08:dd:1c:a5:7e:3a:f5:fe:f1:7c:13:44:a0:fa:
                    9f:60:9b:86:61:11:e6:e8:cc:a4:aa:f5:d4:4f:93:
                    ae:34:2a:58:6c:a2:4c:eb:37:1d:36:96:2d:20:bc:
                    c0:a8:81:94:e0:a4:ad:e8:28:e6:ca:8f:c0:3e:8b:
                    a5:f4:f4:dd:17:d8:39:1c:15:96:75:44:e4:76:d0:
                    41:52:df:1a:18:80:f2:ba:15:de:67:dd:ce:2e:4d:
                    75:bc:d6:95:68:4b:76:76:31:1e:4c:a5:23:da:d4:
                    ea:f7:7b:3a:1c:7b:0e:f9:f9:e9:8e:01:27:f4:23:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:57:FE:40:50:64:B3:9A:F6:43:FF:CF:36:EA:CE:51:68:40:5F:17
            X509v3 Authority Key Identifier:
                keyid:D0:C3:92:77:91:F8:46:8E:41:A4:72:15:1D:0B:19:22:3D:07:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/D0C3927791F8468E41A472151D0B19223D07DFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C3927791F8468E41A472151D0B19223D07DFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/323830343a393335633a3a2f33322d313238203d3e20323734373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:935c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:ea:d4:fe:b5:7e:03:48:20:15:83:77:b5:a4:70:df:a8:
         ef:c8:8f:ca:d3:1d:e4:d3:42:ed:c6:8e:5a:65:dd:65:98:bc:
         88:75:21:46:f8:46:a1:23:39:ac:24:3d:bc:f1:46:ad:0e:61:
         4a:7e:e8:78:83:d4:e0:17:c3:4d:0e:5c:32:38:d8:06:bd:4f:
         92:58:5b:b8:1a:ad:89:d8:a7:34:f8:7c:48:4e:24:b5:44:68:
         4f:a1:6d:23:c5:51:7d:c9:5f:5c:59:7f:b2:b8:42:c6:02:f2:
         21:10:74:e5:cc:77:8a:af:ec:b6:51:45:fe:a0:2d:0e:c0:30:
         c5:d6:b8:89:77:05:bf:40:1b:43:2b:d3:d0:d9:2f:c1:8a:0c:
         29:e5:10:54:f3:db:b8:34:ec:ed:db:39:63:4d:e8:d9:48:d5:
         9a:03:57:f1:32:b0:c8:2a:84:6f:79:32:59:08:80:64:16:44:
         01:23:ea:bd:ad:5a:7f:a3:24:a4:a4:d4:da:4c:88:9a:46:c5:
         5f:1c:58:1d:2c:c5:2c:ea:b7:96:9f:57:68:c2:13:63:0d:89:
         e9:a7:90:a9:83:3e:2d:b3:d5:65:9d:20:a0:90:61:14:25:9b:
         c0:f7:6d:cc:b4:08:51:5e:8f:5b:e8:8a:70:3e:b2:fc:9e:99:
         11:d2:e4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----