This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/323830343a386633303a3a2f33322d313238203d3e20323733343734.roa
File:                     323830343a386633303a3a2f33322d313238203d3e20323733343734.roa (raw, json)
Hash identifier:          nIt7NAttx5sGd1GC1vsfe3jO8ptURAUh96W0mokvrSc=
Subject key identifier:   20:82:70:AF:66:5F:3E:AC:03:12:9F:3C:3C:A4:F5:F7:6F:51:89:E4
Certificate issuer:       /CN=4BF41E282365D362432C934CFF11E10D841AA067
Certificate serial:       77EE07CFAD5FF86AC142E173F24727DD5B3D1456
Authority key identifier: 4B:F4:1E:28:23:65:D3:62:43:2C:93:4C:FF:11:E1:0D:84:1A:A0:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF41E282365D362432C934CFF11E10D841AA067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/323830343a386633303a3a2f33322d313238203d3e20323733343734.roa
Signing time:             Fri 21 Mar 2025 20:47:54 +0000
ROA not before:           Fri 21 Mar 2025 20:42:54 +0000
ROA not after:            Fri 20 Mar 2026 20:47:54 +0000
asID:                     273474
IP address blocks:        2804:8f30::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ee:07:cf:ad:5f:f8:6a:c1:42:e1:73:f2:47:27:dd:5b:3d:14:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF41E282365D362432C934CFF11E10D841AA067
        Validity
            Not Before: Mar 21 20:42:54 2025 GMT
            Not After : Mar 20 20:47:54 2026 GMT
        Subject: CN=208270AF665F3EAC03129F3C3CA4F5F76F5189E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:b4:6e:fd:6c:71:14:03:3f:bd:0e:e9:5a:
                    a6:44:b1:89:fa:cc:a2:3e:d6:cb:78:28:5b:cd:b3:
                    a2:0a:33:a7:72:2b:59:46:f6:66:d8:8a:16:30:0f:
                    bc:b9:ae:49:1c:6f:25:12:79:28:dd:d6:a7:56:30:
                    39:da:9c:3d:48:61:70:48:e5:dc:78:39:05:72:95:
                    1a:6c:39:1d:75:f7:2b:70:b3:aa:51:ee:1b:63:ed:
                    e4:b2:3a:1b:13:a5:19:4a:28:02:74:60:e2:bb:dd:
                    34:75:8f:9b:79:0c:87:ad:de:64:89:b9:85:05:be:
                    6d:2a:0b:27:83:18:d6:b1:84:08:23:b2:29:ba:70:
                    46:17:93:3e:50:68:91:74:85:bf:44:e1:0e:f4:10:
                    99:f8:d7:8c:13:95:a3:84:60:25:77:ee:c8:90:f1:
                    05:23:a3:72:d2:a4:04:76:f3:9e:0a:0e:98:60:f4:
                    10:2f:7d:bc:6c:b5:42:ad:38:6d:8f:29:16:d3:42:
                    da:56:8b:78:51:a0:d1:96:5e:60:98:50:36:fd:1c:
                    4f:89:16:38:a7:ed:19:53:d3:c8:37:da:71:2a:e3:
                    79:82:24:55:7a:a1:30:3a:7f:d6:e4:8e:e3:62:f2:
                    70:09:6a:f5:86:4f:eb:21:cf:23:f1:12:9c:8c:55:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:82:70:AF:66:5F:3E:AC:03:12:9F:3C:3C:A4:F5:F7:6F:51:89:E4
            X509v3 Authority Key Identifier:
                keyid:4B:F4:1E:28:23:65:D3:62:43:2C:93:4C:FF:11:E1:0D:84:1A:A0:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4BF41E282365D362432C934CFF11E10D841AA067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF41E282365D362432C934CFF11E10D841AA067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/323830343a386633303a3a2f33322d313238203d3e20323733343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:6a:2d:30:7c:5c:04:2b:d0:f1:f9:1d:1d:c1:dd:1b:c1:
         43:74:60:a9:c9:13:57:b8:04:47:37:5f:7f:c4:d7:18:3b:b3:
         89:d9:d4:1a:19:d5:a7:d7:61:e4:97:b9:24:84:15:84:83:fb:
         c3:d6:4e:9a:5c:82:ed:d2:21:39:0b:f7:05:9e:32:31:f6:ab:
         2a:24:22:bd:bc:37:39:c1:28:f0:4e:ec:55:e8:4c:03:6d:26:
         5e:4a:99:de:31:fd:a5:07:dc:20:c9:0a:4a:36:95:a0:65:37:
         f5:0d:80:2f:17:1c:11:aa:35:b9:bb:e3:b6:ee:47:bd:a0:88:
         37:d5:64:b2:a4:52:d7:cf:46:55:77:8a:9a:96:8a:a5:a6:b0:
         c5:02:98:11:8c:79:f7:fb:c1:dc:39:81:96:9f:62:cd:b5:c7:
         ca:0d:14:7c:ab:3c:e7:81:28:7e:74:3a:43:3d:60:e5:90:fe:
         24:40:2e:d7:cc:cd:5b:32:d1:f8:29:a3:38:a3:8a:0c:1b:ef:
         3f:c8:e9:ba:03:f3:16:32:86:76:1c:ff:a1:1c:1c:6e:fd:d5:
         f1:09:21:f4:de:8d:1b:50:37:27:37:40:b4:c5:81:18:ee:3b:
         7c:2c:c9:d0:e5:57:15:69:91:25:94:20:a2:fa:e7:ee:12:d9:
         c0:b1:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----