This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a383030303a3a2f33342d3334203d3e20323638313732.roa
File:                     323830343a353932383a383030303a3a2f33342d3334203d3e20323638313732.roa (raw, json)
Hash identifier:          s/Dzas3b/CiEthW5pNgsCINM/TOf1BTjxzklaPZkiqU=
Subject key identifier:   C6:10:51:E0:2E:A4:70:59:81:B8:83:7F:65:29:BD:43:13:63:BB:C8
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       610EFE56EA4A506ED2E18D45FDE81E956A2C3931
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a383030303a3a2f33342d3334203d3e20323638313732.roa
Signing time:             Fri 04 Apr 2025 15:20:24 +0000
ROA not before:           Fri 04 Apr 2025 15:15:24 +0000
ROA not after:            Fri 03 Apr 2026 15:20:24 +0000
asID:                     268172
IP address blocks:        2804:5928:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0e:fe:56:ea:4a:50:6e:d2:e1:8d:45:fd:e8:1e:95:6a:2c:39:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr  4 15:15:24 2025 GMT
            Not After : Apr  3 15:20:24 2026 GMT
        Subject: CN=C61051E02EA4705981B8837F6529BD431363BBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:9c:0e:6b:28:8d:b4:86:81:9e:25:3b:8c:
                    27:d2:ce:68:77:28:15:d9:95:f0:79:89:e6:fe:b3:
                    8b:71:19:78:df:50:13:cf:15:71:81:57:03:b3:c7:
                    4d:d1:2a:2b:4b:73:f8:bc:4a:20:39:30:ae:f0:51:
                    56:be:e6:5a:ec:6f:f6:98:5e:72:3f:5f:e4:87:1c:
                    79:83:ca:f5:3b:f6:ba:60:4b:d2:7f:84:d3:a0:64:
                    29:3f:b0:dc:3a:9c:26:ed:18:2f:fc:69:c7:87:28:
                    9b:a0:66:0f:6f:e7:fa:eb:54:3b:5d:46:40:4e:ec:
                    d4:35:3a:77:db:6f:f2:94:2d:65:73:80:65:9b:ca:
                    ba:63:11:3b:73:71:c2:7c:25:08:2d:37:f8:20:f4:
                    cd:f5:ab:bc:e5:bd:84:20:7f:b2:ce:e9:49:7a:e8:
                    2a:00:cc:cb:91:65:ad:3b:e2:b6:6d:f9:1f:45:87:
                    9e:40:5e:2f:16:eb:f1:03:1f:07:e8:fc:4a:86:dc:
                    54:c2:4e:da:01:70:4f:d2:67:a4:29:2e:76:91:99:
                    9f:6c:39:6a:7b:9d:2b:28:88:07:83:e7:b0:1d:da:
                    70:56:e1:8b:91:c9:d7:77:87:ed:a6:1d:1e:ee:58:
                    59:86:ee:26:c1:c8:5b:99:55:5d:21:e0:1d:7a:fc:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:10:51:E0:2E:A4:70:59:81:B8:83:7F:65:29:BD:43:13:63:BB:C8
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a383030303a3a2f33342d3334203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a9:f6:9b:f9:ef:74:78:2b:a1:88:b7:b4:37:48:80:c7:6e:5b:
         b0:8b:8b:b5:d6:11:5f:06:17:e3:c2:78:2d:60:94:ff:0c:a4:
         33:92:64:0c:04:59:54:7a:0a:95:2a:86:d7:f5:d5:c5:b4:db:
         8a:b1:30:a3:05:4d:89:da:bf:d3:60:af:74:9f:08:01:ec:fd:
         be:ef:25:06:3a:ca:1b:23:ef:a4:e1:b0:a5:17:4a:7e:f6:2a:
         3f:4b:bb:62:49:c5:06:9c:eb:90:3d:cb:f4:a0:c3:c8:01:80:
         0b:b5:0e:e9:d1:62:d8:8f:80:2d:2d:6b:97:ca:42:e2:c3:89:
         66:1c:a0:e9:76:d8:5c:1b:43:9a:ff:fe:46:27:45:fb:43:38:
         f5:20:38:16:c5:89:88:2a:db:a6:7e:6b:22:0b:4f:bb:cf:1d:
         6b:bc:42:b4:05:4c:cd:89:47:b4:aa:3a:1e:17:91:22:2b:1c:
         8c:4c:ae:aa:c0:88:46:28:36:73:68:0c:1e:0e:37:91:37:b3:
         35:3e:1d:e0:c6:c6:52:b7:d5:b2:df:a3:b0:a3:d9:f5:87:d3:
         6c:97:e5:7c:03:a9:eb:8e:73:09:cd:8b:82:24:94:41:eb:e7:
         0e:9e:37:4d:7e:fa:50:a7:33:64:ec:74:35:58:1e:7c:f8:35:
         18:78:b3:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYQ7+VupKUG7S4Y1F/egelWosOTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q5MEQ2MDM3NDlBRjU3MDQwRjcwOTJERjFGMkQyNjY2
NzJFNDdFNzAeFw0yNTA0MDQxNTE1MjRaFw0yNjA0MDMxNTIwMjRaMDMxMTAvBgNV
BAMTKEM2MTA1MUUwMkVBNDcwNTk4MUI4ODM3RjY1MjlCRDQzMTM2M0JCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVJwOayiNtIaBniU7jCfSzmh3
KBXZlfB5ieb+s4txGXjfUBPPFXGBVwOzx03RKitLc/i8SiA5MK7wUVa+5lrsb/aY
XnI/X+SHHHmDyvU79rpgS9J/hNOgZCk/sNw6nCbtGC/8aceHKJugZg9v5/rrVDtd
RkBO7NQ1Onfbb/KULWVzgGWbyrpjETtzccJ8JQgtN/gg9M31q7zlvYQgf7LO6Ul6
6CoAzMuRZa074rZt+R9Fh55AXi8W6/EDHwfo/EqG3FTCTtoBcE/SZ6QpLnaRmZ9s
OWp7nSsoiAeD57Ad2nBW4YuRydd3h+2mHR7uWFmG7ibByFuZVV0h4B16/Fe5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUxhBR4C6kcFmBuIN/ZSm9QxNju8gwHwYDVR0j
BBgwFoAUPZDWA3Sa9XBA9wkt8fLSZmcuR+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2hWZGdTYXVEUmo2ZERpWXl3OXEyOG9HVDZCUFJrdG9HMTdDRENqNWF0
eEYvMC8zRDkwRDYwMzc0OUFGNTcwNDBGNzA5MkRGMUYyRDI2NjY3MkU0N0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEOTBENjAzNzQ5QUY1NzA0
MEY3MDkyREYxRjJEMjY2NjcyRTQ3RTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdoVmRnU2F1RFJqNmREaVl5dzlxMjhvR1Q2QlBSa3RvRzE3Q0RDajVhdHhGLzAv
MzIzODMwMzQzYTM1MzkzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMxMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWSiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCp9pv573R4K6GIt7Q3SIDHbluwi4u11hFfBhfjwngtYJT/DKQzkmQMBFlU
egqVKobX9dXFtNuKsTCjBU2J2r/TYK90nwgB7P2+7yUGOsobI++k4bClF0p+9io/
S7tiScUGnOuQPcv0oMPIAYALtQ7p0WLYj4AtLWuXykLiw4lmHKDpdthcG0Oa//5G
J0X7Qzj1IDgWxYmIKtumfmsiC0+7zx1rvEK0BUzNiUe0qjoeF5EiKxyMTK6qwIhG
KDZzaAweDjeRN7M1Ph3gxsZSt9Wy36Owo9n1h9Nsl+V8A6nrjnMJzYuCJJRB6+cO
njdNfvpQpzNk7HQ1WB58+DUYeLPy
-----END CERTIFICATE-----