This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/323830343a333432303a3a2f33332d3333203d3e20323635343337.roa
File:                     323830343a333432303a3a2f33332d3333203d3e20323635343337.roa (raw, json)
Hash identifier:          5z/TNhq7x7wN6UL8WPmw3ldZ2kcZ0X7N4TM3pipyTkg=
Subject key identifier:   BC:DE:D9:DE:EE:EB:48:BA:45:E3:AE:9A:EC:B3:98:55:20:FD:FB:98
Certificate issuer:       /CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
Certificate serial:       1575574372C99E865133970AF47884FD7768AF6D
Authority key identifier: BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/323830343a333432303a3a2f33332d3333203d3e20323635343337.roa
Signing time:             Mon 28 Apr 2025 17:06:26 +0000
ROA not before:           Mon 28 Apr 2025 17:01:26 +0000
ROA not after:            Mon 27 Apr 2026 17:06:26 +0000
asID:                     265437
IP address blocks:        2804:3420::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:75:57:43:72:c9:9e:86:51:33:97:0a:f4:78:84:fd:77:68:af:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
        Validity
            Not Before: Apr 28 17:01:26 2025 GMT
            Not After : Apr 27 17:06:26 2026 GMT
        Subject: CN=BCDED9DEEEEB48BA45E3AE9AECB3985520FDFB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:dc:01:9c:58:68:e3:bb:5d:2e:56:76:69:
                    d4:46:32:5e:74:b4:27:6c:7c:8d:f5:cb:dd:b0:1c:
                    31:5d:44:0a:2f:27:44:17:89:e0:9b:a7:ac:8a:db:
                    b3:37:42:ff:3c:64:09:3e:6e:6c:f7:8c:d9:46:f8:
                    43:db:fd:2c:e3:9c:a2:71:37:03:d2:b8:cd:19:2e:
                    fe:91:00:08:ef:1c:90:27:58:3f:e2:da:ea:d1:46:
                    0d:23:69:e3:6c:43:10:bf:19:ec:c5:84:ce:c8:6e:
                    d7:d4:e3:0b:59:25:2c:69:17:32:3c:67:60:29:97:
                    3f:f8:95:cb:a6:cd:f2:b0:73:3a:b9:77:6b:e2:e3:
                    bd:89:8d:e4:28:ac:3c:0e:8e:db:f9:29:17:8f:28:
                    f9:2d:97:33:a2:68:ae:03:6a:78:d9:bb:a7:b9:7e:
                    7f:7f:78:e7:c9:cf:02:48:64:6c:64:e5:86:76:50:
                    3b:77:3e:99:6b:6d:1f:50:26:c8:b4:ab:27:4e:c4:
                    51:21:f2:b5:11:9c:2d:43:31:36:19:c8:df:56:01:
                    5c:c8:55:33:b5:6e:94:75:e5:4d:63:f3:f3:56:6d:
                    c7:ff:2f:88:b3:c9:3c:d7:1b:c8:b1:60:d2:f3:63:
                    3d:fa:6a:6c:f4:73:02:a0:9a:0f:ba:cd:50:a3:47:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DE:D9:DE:EE:EB:48:BA:45:E3:AE:9A:EC:B3:98:55:20:FD:FB:98
            X509v3 Authority Key Identifier:
                keyid:BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/323830343a333432303a3a2f33332d3333203d3e20323635343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3420::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:54:a6:b5:85:a7:19:88:78:ec:4a:ff:24:cc:49:f2:1d:
         8c:e4:2a:db:63:b4:18:4e:0a:95:98:0e:a5:bb:d9:5e:57:5d:
         c0:9b:84:fb:51:f6:29:f3:ff:27:cb:0d:df:d7:60:55:ed:96:
         4e:ca:fd:30:8a:90:62:0f:35:d4:60:0b:fe:cc:ab:9c:13:ed:
         fb:a9:8b:ed:ea:33:f2:2f:a7:9b:53:ca:76:7b:1c:55:b8:80:
         64:a5:be:61:a4:29:51:5e:99:1a:d4:04:05:1c:ff:c8:b4:6a:
         9b:d4:44:0f:36:dc:ff:61:2e:a1:4f:14:69:17:80:5e:94:da:
         0c:01:f6:6e:97:b0:d1:8d:e1:b6:52:03:05:bc:20:86:21:55:
         f2:f5:4b:0d:e5:56:5c:e6:2f:eb:db:27:ea:08:29:d1:11:0e:
         9f:58:d6:e4:c3:e8:31:4c:0e:92:47:0c:85:32:12:05:3c:fa:
         87:33:36:48:e1:18:77:8c:73:fd:52:d8:4b:29:c1:6f:86:f6:
         53:4c:ca:90:ca:f4:94:ae:89:83:a9:bb:a0:0b:f9:b2:06:07:
         ad:db:33:a2:eb:61:0d:f5:e1:81:70:be:c7:bf:33:eb:6b:0f:
         f7:39:24:c0:aa:4e:bd:25:dd:16:0d:0b:7e:df:b7:59:38:f7:
         c3:a3:8d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----