This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          XI5NfJqOqRb1YH/XNVnd9zLq7gfAoeWD8HdPVmnBW4g=
Subject key identifier:   C2:B5:8B:AF:01:69:D6:06:A8:7C:E9:CF:2B:A2:6D:59:60:08:89:6E
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       142466C1C49EA4DF1BBCE8BBDA4168987EB24C82
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:25 +0000
ROA not before:           Tue 01 Jul 2025 22:41:25 +0000
ROA not after:            Tue 30 Jun 2026 22:46:25 +0000
asID:                     264422
IP address blocks:        2804:1e58:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:24:66:c1:c4:9e:a4:df:1b:bc:e8:bb:da:41:68:98:7e:b2:4c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:25 2025 GMT
            Not After : Jun 30 22:46:25 2026 GMT
        Subject: CN=C2B58BAF0169D606A87CE9CF2BA26D596008896E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:2d:3b:f8:f2:91:ff:b7:cc:fd:6c:72:f8:
                    aa:52:75:eb:69:57:7e:69:32:c6:bd:73:75:29:71:
                    aa:63:be:f7:6a:06:e4:e5:a0:d3:b6:d7:d5:dc:93:
                    07:3a:08:b5:67:47:ca:76:be:2a:66:4a:79:7e:25:
                    6a:1f:72:a5:ea:a2:ca:53:bd:e6:45:f1:7b:69:72:
                    8f:45:74:e1:e5:ea:c9:ae:5b:86:1f:30:d5:21:72:
                    89:50:68:67:f7:bf:a7:95:64:9b:d3:2f:cf:fa:56:
                    88:db:8d:14:99:d8:c7:c8:88:68:ea:86:c9:70:57:
                    67:cc:85:a2:0c:cd:77:aa:cf:e2:a1:62:b0:7c:ff:
                    ee:a1:c9:c2:6d:f3:f9:bb:a7:4f:44:eb:89:95:2d:
                    6c:11:d6:95:6b:c2:ff:1c:ff:36:b9:08:f9:2a:77:
                    d9:ef:b3:38:24:24:62:eb:5c:42:7f:6e:95:10:8d:
                    f8:e3:83:a6:c0:d7:ac:85:6a:85:a8:8a:46:e8:e1:
                    3a:43:13:9f:a2:6f:0d:9a:44:ff:d0:a4:0a:27:53:
                    3f:c8:dd:13:ba:cf:6f:a2:48:75:52:40:8a:a2:b1:
                    0f:3d:f4:e1:ca:ba:e3:30:56:53:e3:31:35:b3:e2:
                    32:86:b2:b7:78:92:7a:8f:0c:61:1b:16:78:98:06:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:8B:AF:01:69:D6:06:A8:7C:E9:CF:2B:A2:6D:59:60:08:89:6E
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a333030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:cb:0c:34:fa:86:b2:05:aa:4d:51:8f:ed:8c:49:36:20:
         14:5c:10:ed:49:97:a8:24:13:5a:80:ac:fe:d3:e2:1a:b9:9d:
         90:ae:dd:5d:a6:7e:ad:d2:96:32:df:46:e7:3d:1f:82:9f:71:
         2e:85:c6:d0:88:e6:89:af:b1:fa:71:0f:0e:55:ed:77:66:e1:
         8a:d6:dd:54:93:36:40:3d:55:00:7b:63:58:bc:ba:f3:5c:ba:
         5f:fe:57:20:56:61:c9:00:b3:3c:df:df:0a:75:95:cf:2c:60:
         7c:13:d4:20:3b:14:35:c3:32:13:d2:a8:a9:cd:48:93:65:03:
         42:ef:c0:26:32:6e:d5:98:3a:57:6f:c5:03:52:4d:2f:0f:01:
         c6:85:42:cf:11:12:a4:01:63:fd:a7:8e:ad:37:24:48:f8:5c:
         1c:d7:29:59:df:6a:0f:9d:f5:b2:2a:b4:10:d8:e4:94:9d:ff:
         f8:7f:44:70:32:10:50:cb:10:60:3b:7f:50:b8:9f:dc:05:e8:
         32:31:26:1c:26:02:d5:ca:74:eb:30:87:2b:0b:7b:52:eb:6e:
         f0:52:13:e9:e3:c4:46:65:2d:03:98:b1:ab:ee:d3:b9:bc:2a:
         fc:24:77:20:c5:e1:94:e8:f7:a3:f1:fa:b4:46:c3:6c:a3:0c:
         7a:83:ce:e2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFCRmwcSepN8bvOi72kFomH6yTIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VEOTk3QUUwRUI3MTc2Q0E4RkIyRjREMzlGQzZENUE5
N0FCRTQxRTAeFw0yNTA3MDEyMjQxMjVaFw0yNjA2MzAyMjQ2MjVaMDMxMTAvBgNV
BAMTKEMyQjU4QkFGMDE2OUQ2MDZBODdDRTlDRjJCQTI2RDU5NjAwODg5NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsi07+PKR/7fM/Wxy+KpSdetp
V35pMsa9c3UpcapjvvdqBuTloNO219Xckwc6CLVnR8p2vipmSnl+JWofcqXqospT
veZF8Xtpco9FdOHl6smuW4YfMNUhcolQaGf3v6eVZJvTL8/6VojbjRSZ2MfIiGjq
hslwV2fMhaIMzXeqz+KhYrB8/+6hycJt8/m7p09E64mVLWwR1pVrwv8c/za5CPkq
d9nvszgkJGLrXEJ/bpUQjfjjg6bA16yFaoWoikbo4TpDE5+ibw2aRP/QpAonUz/I
3RO6z2+iSHVSQIqisQ899OHKuuMwVlPjMTWz4jKGsrd4knqPDGEbFniYBloBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwrWLrwFp1gaofOnPK6JtWWAIiW4wHwYDVR0j
BBgwFoAUPtmXrg63F2yo+y9NOfxtWper5B4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC8zRUQ5OTdBRTBFQjcxNzZDQThGQjJGNEQzOUZDNkQ1QTk3QUJFNDFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRDk5N0FFMEVCNzE3NkNB
OEZCMkY0RDM5RkM2RDVBOTdBQkU0MUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHlgwMA0GCSqGSIb3DQEBCwUA
A4IBAQAPpMsMNPqGsgWqTVGP7YxJNiAUXBDtSZeoJBNagKz+0+IauZ2Qrt1dpn6t
0pYy30bnPR+Cn3EuhcbQiOaJr7H6cQ8OVe13ZuGK1t1UkzZAPVUAe2NYvLrzXLpf
/lcgVmHJALM8398KdZXPLGB8E9QgOxQ1wzIT0qipzUiTZQNC78AmMm7VmDpXb8UD
Uk0vDwHGhULPERKkAWP9p46tNyRI+Fwc1ylZ32oPnfWyKrQQ2OSUnf/4f0RwMhBQ
yxBgO39QuJ/cBegyMSYcJgLVynTrMIcrC3tS627wUhPp48RGZS0DmLGr7tO5vCr8
JHcgxeGU6Pej8fq0RsNsowx6g87i
-----END CERTIFICATE-----