This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/323830343a333539383a3a2f33322d3438203d3e20323636323935.roa
File:                     323830343a333539383a3a2f33322d3438203d3e20323636323935.roa (raw, json)
Hash identifier:          ldhGvFp/HOrCCF/rjB6qEAQ1yra9MxKTI4ZH6bf9AxU=
Subject key identifier:   6B:EF:7F:C9:CD:BA:8E:4D:D2:D6:06:C0:FD:EB:51:09:F6:C2:8D:C0
Certificate issuer:       /CN=87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0
Certificate serial:       7C1C5FB82C6DAF25182FAA6E00C3EC58F132C724
Authority key identifier: 87:E7:9B:8A:AB:22:0A:B9:FC:F5:12:35:BC:77:BC:D4:BA:57:BC:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/323830343a333539383a3a2f33322d3438203d3e20323636323935.roa
Signing time:             Mon 28 Apr 2025 15:04:33 +0000
ROA not before:           Mon 28 Apr 2025 14:59:33 +0000
ROA not after:            Mon 27 Apr 2026 15:04:33 +0000
asID:                     266295
IP address blocks:        2804:3598::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1c:5f:b8:2c:6d:af:25:18:2f:aa:6e:00:c3:ec:58:f1:32:c7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0
        Validity
            Not Before: Apr 28 14:59:33 2025 GMT
            Not After : Apr 27 15:04:33 2026 GMT
        Subject: CN=6BEF7FC9CDBA8E4DD2D606C0FDEB5109F6C28DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:66:00:27:fa:5e:e7:9e:40:ce:c2:cf:de:
                    32:24:1e:2b:49:2e:76:ca:6e:93:21:4b:80:97:03:
                    a9:d5:d8:21:5d:fd:7e:0a:27:44:64:91:f9:7a:52:
                    1b:35:5f:3a:12:79:67:d6:48:49:74:fd:90:46:47:
                    65:33:2e:86:96:b2:cc:49:8b:11:66:26:3f:b2:74:
                    a5:df:8e:ce:91:e6:31:64:27:d5:d2:f3:7d:70:fd:
                    d6:b1:a5:dc:ab:2f:a1:84:e2:d3:e0:fa:9b:13:7d:
                    f0:0e:4c:e6:54:e1:e9:26:d5:0b:2e:a1:5a:e5:50:
                    0f:fa:2f:a4:b2:69:6b:d4:0b:b9:78:0a:c1:27:09:
                    79:49:6c:bd:13:2f:48:78:35:00:66:2c:c9:97:54:
                    70:16:59:53:af:e7:9d:48:ed:f1:c8:07:ba:e8:1b:
                    a0:9a:70:5c:f0:d8:7b:6c:70:2a:fc:9d:f7:b7:07:
                    dd:de:d6:e0:d9:1b:4c:0d:80:df:14:93:79:a0:c8:
                    ba:35:77:9b:ef:fe:fd:84:35:df:16:c2:a0:4c:a8:
                    0a:33:50:6f:96:3f:ba:0b:4f:8f:fe:b2:01:33:7d:
                    89:f3:be:7d:ae:8d:48:83:d5:e2:13:40:e9:96:77:
                    e0:24:f4:58:e2:a4:dc:4c:cd:ee:db:8e:cd:d1:b8:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EF:7F:C9:CD:BA:8E:4D:D2:D6:06:C0:FD:EB:51:09:F6:C2:8D:C0
            X509v3 Authority Key Identifier:
                keyid:87:E7:9B:8A:AB:22:0A:B9:FC:F5:12:35:BC:77:BC:D4:BA:57:BC:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/323830343a333539383a3a2f33322d3438203d3e20323636323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3598::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:b6:de:30:03:7c:4c:43:e1:2f:e7:3c:c9:f3:aa:08:64:
         f9:28:bd:0f:ba:3b:3c:7f:69:69:eb:9e:ef:a2:87:15:34:92:
         4f:4a:c0:96:7a:8f:8a:17:14:8f:4b:4f:1b:e7:da:26:82:f6:
         e9:34:e7:a4:09:90:32:69:69:24:40:df:61:59:4a:42:37:54:
         12:49:f0:63:eb:1b:a4:cb:07:a1:bd:1e:8a:17:07:44:b1:38:
         e0:69:d6:4c:d3:5b:c1:0e:d2:72:d8:de:5d:55:b1:9e:ed:21:
         f5:0b:87:82:11:c0:91:dd:f0:44:23:04:08:8d:3c:79:cd:23:
         a4:bd:1f:75:11:53:6f:48:2b:a3:47:e3:22:f5:81:b4:d5:0a:
         e3:76:88:43:fc:f9:54:d8:fd:d0:7d:2e:d0:f3:81:f9:79:79:
         7a:b7:e4:8b:26:9b:2d:6b:ed:ee:7d:d5:0f:1e:67:9f:31:95:
         e0:ac:4f:45:e3:92:b6:e3:87:89:f8:0a:67:84:9c:9f:d4:42:
         5f:24:e6:7b:42:31:f4:54:e8:4c:a8:36:e5:e0:c4:2d:6c:24:
         84:ac:1a:25:04:d8:ce:13:ac:cc:d9:db:5f:c5:e9:a9:ca:8c:
         dd:4e:4f:50:bb:a2:79:c2:bb:ce:cf:e5:5c:0d:40:fe:39:0c:
         08:8c:a5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----