This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa
File:                     323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (raw, json)
Hash identifier:          ETxIJeAD+Mu+7r+AWo3Nm9UhNL8Bg/5nxFe6vkKlSOE=
Subject key identifier:   7A:61:B5:03:BD:11:7E:87:48:3B:66:3F:96:9D:96:C3:09:CE:72:B4
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       56A008799A78E8910973E3FABEE197E8DEC7F2A6
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a0:08:79:9a:78:e8:91:09:73:e3:fa:be:e1:97:e8:de:c7:f2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=7A61B503BD117E87483B663F969D96C309CE72B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:d7:17:f9:b9:22:ad:d0:d4:40:cd:e9:42:
                    24:e7:2d:ea:d5:d8:9a:df:9f:47:05:1e:76:29:4d:
                    00:37:54:5e:47:b7:9c:44:d4:ce:5d:25:d9:75:95:
                    aa:b2:b6:8f:28:96:72:10:29:b8:b6:6a:50:56:cf:
                    70:f7:41:f7:82:54:42:60:59:6e:5a:71:fc:32:e3:
                    b4:9c:95:48:92:e7:56:7e:a5:3f:9a:ed:00:04:43:
                    83:b4:8f:ca:87:a6:30:38:ea:f1:ac:ee:4a:66:3f:
                    3c:37:f1:a5:8e:fb:4f:ad:09:7f:3f:45:a0:98:0b:
                    93:c0:ea:5f:2f:1a:96:cc:bc:cb:83:5c:8d:20:23:
                    2c:46:38:52:b7:f7:f2:52:4c:a2:46:01:a2:a0:ea:
                    a5:c4:f1:9a:45:52:f4:68:95:39:8f:c6:ff:6b:d5:
                    9a:16:be:74:0f:ae:bb:fb:89:d2:47:ed:c4:06:39:
                    49:d9:45:80:f2:8f:b4:7f:92:37:93:40:ed:dc:7d:
                    7f:6f:f7:3c:8f:b2:5c:5e:3a:a5:0c:44:ff:33:af:
                    5c:86:33:0e:55:71:59:ed:e7:8c:db:2e:84:2a:b9:
                    21:80:47:86:4b:d5:ba:20:d4:ae:c4:36:15:02:a5:
                    0d:28:b4:5e:92:72:4a:5a:4d:b4:73:b2:27:d4:ab:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:B5:03:BD:11:7E:87:48:3B:66:3F:96:9D:96:C3:09:CE:72:B4
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:6d:63:3a:b1:b8:e6:31:e6:94:68:bb:f5:45:88:c7:d8:95:
         49:c7:6c:b1:cb:ef:2a:8e:59:22:39:8c:92:f7:c3:db:26:5f:
         e5:a8:4a:30:64:ea:e2:1d:6a:58:97:21:2d:2c:bc:fc:01:05:
         cc:35:04:75:c0:d0:aa:7c:46:93:19:84:ec:2f:48:3b:40:d6:
         f6:7b:33:0c:c1:45:5f:48:d1:73:c0:e1:76:1d:75:a1:85:9e:
         75:9b:a8:ed:ad:48:2f:40:3a:ff:dc:ca:92:f5:ba:4a:0b:da:
         f4:a7:ae:57:c1:b3:21:56:98:b1:dd:1e:2c:ed:9c:b9:91:fc:
         72:32:92:4f:7d:ca:7b:6e:86:e8:66:63:83:f6:88:f7:55:9d:
         77:32:2a:67:57:38:37:54:59:fb:b4:4b:d0:03:55:d0:85:87:
         69:0f:2e:bc:96:a4:44:37:85:15:4e:31:a8:1b:b9:67:3f:0f:
         a9:f7:5d:c1:0d:2c:9f:57:12:7d:f4:60:6c:4d:51:a8:f9:9b:
         27:fd:fc:09:dc:16:5f:dc:ea:32:12:40:0a:89:73:b7:79:97:
         9f:a5:e2:af:f6:82:68:7b:fc:09:80:4b:f0:c7:7d:67:87:9a:
         7e:da:e4:d5:9e:1e:db:dd:66:ed:af:17:a0:2f:66:41:3c:23:
         dc:ec:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----