This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33332d3333203d3e20323638313732.roa
File:                     323830343a353932383a3a2f33332d3333203d3e20323638313732.roa (raw, json)
Hash identifier:          u2ysZbSD+EXmkgUh8ykWO2aMQQhxkyTLIikT+5PLONo=
Subject key identifier:   18:10:E3:30:2C:09:44:71:2C:62:93:98:A0:28:62:4C:ED:A8:29:DB
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       2DA51BB54A46B5D14BA1067DC60EA0D4A36FBEB8
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33332d3333203d3e20323638313732.roa
Signing time:             Fri 04 Apr 2025 15:20:25 +0000
ROA not before:           Fri 04 Apr 2025 15:15:25 +0000
ROA not after:            Fri 03 Apr 2026 15:20:25 +0000
asID:                     268172
IP address blocks:        2804:5928::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a5:1b:b5:4a:46:b5:d1:4b:a1:06:7d:c6:0e:a0:d4:a3:6f:be:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr  4 15:15:25 2025 GMT
            Not After : Apr  3 15:20:25 2026 GMT
        Subject: CN=1810E3302C0944712C629398A028624CEDA829DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:fb:2c:ba:47:f8:1a:e4:4f:12:e5:5b:4c:
                    3d:db:a5:1b:b6:b2:73:5b:c7:1a:ea:4e:79:c2:43:
                    81:f2:f8:f9:38:13:14:25:49:06:8b:28:8c:2e:03:
                    75:92:6b:ee:db:b5:84:8c:ef:0d:f2:cf:d5:89:6c:
                    57:d3:85:6a:e9:d7:ff:af:38:c4:41:c3:4a:6f:ee:
                    69:b8:0c:d7:48:23:14:a9:aa:56:7b:87:0b:f2:a1:
                    f2:b5:7d:53:52:dd:11:b4:3c:d3:8f:d2:78:89:21:
                    16:35:be:ea:a7:b3:5b:59:77:c3:b0:dc:e3:84:21:
                    c1:14:5c:30:64:4d:25:71:43:15:ef:6f:cb:90:02:
                    07:13:10:93:f8:e9:a8:de:b0:f4:e2:ab:d1:1f:c5:
                    55:09:a9:f0:a2:95:ee:83:4f:8f:2b:d7:74:32:43:
                    9c:49:43:3d:33:f5:5b:db:bb:1c:3e:e7:85:26:38:
                    e6:20:bf:3f:a5:ff:78:fc:d3:dd:bd:49:cb:34:73:
                    8b:0d:4d:25:4c:82:e3:c4:63:ae:60:8b:d1:73:f8:
                    ff:44:19:66:2f:f4:01:e5:31:fd:1e:79:fd:ef:2e:
                    53:33:45:d6:5b:5c:79:d8:0a:1a:c4:54:75:02:72:
                    10:5c:41:52:f4:cc:d7:e3:b7:8d:b8:b7:c6:f2:16:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:E3:30:2C:09:44:71:2C:62:93:98:A0:28:62:4C:ED:A8:29:DB
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a3a2f33332d3333203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:91:2e:a9:c2:30:0c:34:29:43:63:b6:fd:cb:6e:1f:c0:14:
         39:c7:e4:a7:49:55:01:0f:79:cf:e8:da:2f:8c:e8:32:6f:55:
         08:5e:4b:02:e5:26:b1:f2:28:c3:b2:c3:38:df:18:43:fd:93:
         16:5a:ce:3c:9b:2f:8e:e4:2a:45:b3:40:eb:aa:9e:e8:ce:4e:
         d8:4a:a0:89:d4:7d:d6:0e:2b:8a:2d:a3:87:59:bd:22:65:97:
         49:ba:4c:91:02:9e:cc:d3:8c:94:b0:36:82:41:c8:71:47:cb:
         4c:bf:09:95:35:07:ec:42:4b:c8:dd:34:76:c3:2e:2b:fa:9d:
         5c:1c:52:9d:19:4d:04:5c:55:3b:57:df:df:cb:35:58:c6:ad:
         7d:cc:57:da:50:40:aa:f3:c9:23:d2:6e:04:81:41:3f:c2:18:
         88:4b:6c:f2:18:92:42:b9:4f:d1:e5:d2:8d:24:79:5d:43:77:
         04:6e:e9:bb:7a:55:6b:61:d6:ae:90:68:07:71:e5:1a:76:63:
         d7:33:b6:44:a9:0a:66:9e:74:3a:02:5b:e3:30:09:66:48:a0:
         02:31:82:fe:23:ac:af:61:3c:cc:d7:7e:12:e6:52:f2:05:74:
         65:e6:d5:01:1a:6c:e4:f4:50:b8:6f:e4:72:0f:14:0c:37:59:
         d4:c2:81:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----