This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33322d3332203d3e20323638313732.roa
File:                     323830343a353932383a3a2f33322d3332203d3e20323638313732.roa (raw, json)
Hash identifier:          oOsvNKxW4JPWr+3R2gdvlw/SjCmV7wLG5C/tp0iTVB0=
Subject key identifier:   C0:30:20:CE:A0:E7:17:8E:B7:C8:B8:12:51:11:F8:D3:55:68:47:5D
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       0AE152D0F3683FB2B5F1B7B0037E39AB6C7202F8
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33322d3332203d3e20323638313732.roa
Signing time:             Fri 04 Apr 2025 15:20:24 +0000
ROA not before:           Fri 04 Apr 2025 15:15:24 +0000
ROA not after:            Fri 03 Apr 2026 15:20:24 +0000
asID:                     268172
IP address blocks:        2804:5928::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:52:d0:f3:68:3f:b2:b5:f1:b7:b0:03:7e:39:ab:6c:72:02:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr  4 15:15:24 2025 GMT
            Not After : Apr  3 15:20:24 2026 GMT
        Subject: CN=C03020CEA0E7178EB7C8B8125111F8D35568475D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:d3:56:53:1f:1f:68:2f:46:fe:d3:e9:7e:
                    05:ca:79:5d:3d:9a:af:79:b9:70:0d:1f:7a:68:29:
                    54:93:58:51:13:28:8c:ae:b7:0b:93:90:e9:cd:44:
                    62:72:bb:d5:07:bb:4c:01:a6:68:3d:0c:1e:d9:4e:
                    6e:24:85:e9:d1:e4:ff:3e:c7:1b:fb:fe:6d:f6:bd:
                    7c:c0:31:a0:61:5c:4c:c0:c4:8a:cf:c0:c1:68:40:
                    92:d0:b7:d6:97:e9:20:f2:5b:06:64:fd:ce:8d:82:
                    f4:fc:be:0d:0b:2e:08:41:5b:56:2d:2a:1c:1c:fd:
                    c2:42:1d:1f:ef:03:db:94:b6:d3:e6:33:93:82:62:
                    aa:6d:a1:83:9d:53:89:0f:5b:97:c3:d5:c1:0c:c0:
                    ce:c9:42:11:e4:d5:0d:b6:49:da:9e:b6:64:aa:76:
                    68:a6:37:02:e6:d2:db:cd:08:f7:c2:c2:5b:12:d4:
                    8e:68:3b:00:96:e1:94:b1:d2:9e:bf:4e:f3:13:6d:
                    6d:5c:bd:aa:57:7e:a7:0b:48:85:f1:38:ae:66:bb:
                    d7:5f:65:6a:e1:23:38:09:11:a5:e8:fa:70:55:39:
                    17:26:48:eb:9d:ac:b8:60:e2:e6:40:5c:96:33:13:
                    42:64:6b:90:df:a6:23:e6:28:0b:12:4b:53:3a:9d:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:30:20:CE:A0:E7:17:8E:B7:C8:B8:12:51:11:F8:D3:55:68:47:5D
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33322d3332203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:79:c6:a7:90:7c:ae:af:dd:a4:9c:16:8d:76:a0:b9:7d:e8:
         52:b0:37:83:6c:1e:0b:7f:84:92:d5:5b:22:c4:b5:33:b9:f2:
         ae:c2:22:b8:85:18:06:fb:31:6b:32:34:88:15:58:bf:17:e1:
         23:71:e6:46:f7:ee:3b:ae:9a:1e:d5:1f:bb:2d:68:8b:ae:84:
         64:90:3a:8a:f9:58:71:6f:83:7b:e4:76:75:88:9d:53:27:34:
         a6:18:5a:ea:78:00:1b:8f:df:9e:bd:f1:42:34:7e:df:5f:63:
         a4:73:45:38:00:04:1d:d8:d9:f2:71:19:9d:1a:18:f7:70:97:
         d7:16:b2:dc:f1:ab:3f:3d:01:fe:6b:1c:fa:b7:7c:47:bf:9d:
         3f:bf:79:dd:71:59:fc:5d:ec:8b:b7:ad:75:df:d1:c7:61:a0:
         09:3b:f1:67:2d:d2:ec:0b:43:f8:be:24:cc:4a:e9:51:30:fb:
         d1:c8:fe:2d:64:6f:e6:cd:c9:b3:ee:b4:57:4d:c2:ad:34:bd:
         a8:a9:e3:37:bf:f4:8b:a7:b8:02:69:ac:97:74:16:64:07:35:
         99:42:18:8d:84:ed:35:f6:e7:d1:bb:5b:03:2e:e7:7e:3b:35:
         61:14:e0:8a:21:37:9f:13:28:c7:cd:a0:71:2b:d3:b2:9a:c0:
         09:79:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----