This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa
File:                     323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa (raw, json)
Hash identifier:          frfbE4sDyT5OlLh70pfzbzhyLnXT4LUyQZLjRdNOa1o=
Subject key identifier:   B7:40:C6:7E:38:31:04:5A:02:84:D6:94:D5:75:2E:94:FF:AC:27:68
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       1EBCA187AD720A182621B1F247369AA2433F28AB
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa
Signing time:             Fri 04 Apr 2025 15:20:25 +0000
ROA not before:           Fri 04 Apr 2025 15:15:25 +0000
ROA not after:            Fri 03 Apr 2026 15:20:25 +0000
asID:                     268172
IP address blocks:        2804:5928:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bc:a1:87:ad:72:0a:18:26:21:b1:f2:47:36:9a:a2:43:3f:28:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr  4 15:15:25 2025 GMT
            Not After : Apr  3 15:20:25 2026 GMT
        Subject: CN=B740C67E3831045A0284D694D5752E94FFAC2768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:af:ad:be:d4:0b:a0:13:d4:6d:43:56:27:
                    9d:bf:48:12:04:20:83:e0:51:7e:b8:e0:ae:77:74:
                    a7:47:09:62:bb:c0:cc:c9:a4:bb:ce:db:f3:6a:37:
                    50:35:2d:da:ba:40:cb:43:24:4a:4d:5c:86:18:6a:
                    bb:31:a5:49:42:74:bb:0b:fb:fd:54:29:f0:eb:6a:
                    26:c8:11:6e:79:a8:9c:59:a0:c2:64:99:24:c6:87:
                    45:33:05:c6:e4:3f:81:ad:3e:ee:56:12:60:12:88:
                    9c:a3:ed:81:7d:da:55:a5:b1:35:45:47:5c:c1:65:
                    79:f6:0e:14:f6:c7:88:5d:1a:74:6e:25:f6:f6:d4:
                    a0:c9:88:e0:69:b2:5a:c9:22:19:41:f4:ee:91:97:
                    05:88:87:ba:a6:9a:4a:1e:c1:93:64:c5:d3:3f:c7:
                    33:6c:16:4d:22:af:b2:c0:00:30:e5:ab:9f:60:97:
                    89:d7:70:00:aa:74:55:eb:8b:76:c7:88:2d:df:39:
                    97:6e:4c:39:a6:7d:52:f5:5a:26:e4:9a:e0:8e:39:
                    e7:d2:04:15:06:e3:44:f9:c0:5e:34:ac:7c:ad:d4:
                    53:00:4a:42:cf:96:21:8f:76:7d:0a:fa:4e:66:eb:
                    57:08:5f:9d:91:36:49:38:bd:ba:23:84:5c:41:cc:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:40:C6:7E:38:31:04:5A:02:84:D6:94:D5:75:2E:94:FF:AC:27:68
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:18:6c:5c:a8:28:d5:33:47:40:0b:5c:1d:02:aa:be:0d:53:
         68:9b:8a:ab:07:6b:70:b8:88:3e:20:93:32:78:b3:5f:ca:3b:
         16:7a:34:61:bc:65:bd:4f:9d:6a:58:2d:83:c0:b6:25:47:7b:
         68:75:d4:a8:a8:cd:b8:7a:e1:39:16:00:3b:1d:25:27:a1:68:
         2e:59:40:b9:e5:37:2e:71:49:cf:3d:f7:3a:00:8c:10:13:ab:
         d8:e1:80:e0:3c:e2:2d:ca:97:4b:f8:60:4b:0a:1a:fc:e3:32:
         1f:ad:a4:bf:e7:c6:f8:23:a7:5c:b3:f4:b2:96:59:aa:8b:0f:
         c4:49:f7:01:8b:1b:76:0f:97:95:9f:c4:f0:0a:82:67:65:a3:
         c9:e6:da:b9:0c:ba:d3:8e:9e:8b:bb:59:29:aa:ec:0a:1e:b7:
         be:75:26:80:c4:e6:06:b1:0b:1e:b0:68:d4:d5:66:81:a5:4b:
         ef:3c:39:37:f3:8d:0d:a7:ae:53:c3:62:ad:a4:ef:46:c9:af:
         6f:fb:de:98:62:0c:6a:60:82:61:fc:03:9a:cb:03:a1:01:63:
         0d:83:1e:a0:45:3f:e4:41:7f:51:fa:63:1a:8f:58:15:02:6c:
         c3:3e:9a:e5:da:b5:fb:84:09:d7:4f:c3:33:e0:31:22:cf:af:
         b8:3b:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----