This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a383134303a3a2f34342d3434203d3e203532363133.roa
File:                     323830343a6433633a383134303a3a2f34342d3434203d3e203532363133.roa (raw, json)
Hash identifier:          PcX/TLbzqtUwY7h4xG1gBqmyx+PscOp5xWKen8zjcwU=
Subject key identifier:   EB:A5:75:84:69:DA:F5:9F:34:80:01:44:05:81:3E:FE:E0:77:2E:66
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       35E12B0BCA7FE7412F21D345EFC9766956BB2260
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a383134303a3a2f34342d3434203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:19 +0000
ROA not before:           Thu 06 Mar 2025 09:37:19 +0000
ROA not after:            Thu 05 Mar 2026 09:42:19 +0000
asID:                     52613
IP address blocks:        2804:d3c:8140::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e1:2b:0b:ca:7f:e7:41:2f:21:d3:45:ef:c9:76:69:56:bb:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:19 2025 GMT
            Not After : Mar  5 09:42:19 2026 GMT
        Subject: CN=EBA5758469DAF59F3480014405813EFEE0772E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:8f:68:a6:3b:23:c8:74:23:e5:39:c2:b8:
                    cd:f2:07:78:68:74:b4:71:63:13:44:76:d3:37:da:
                    67:43:64:5d:15:f0:17:90:9b:13:9b:79:fe:90:a7:
                    94:57:0e:58:da:f6:4f:97:7c:37:91:29:32:ea:f9:
                    c4:cd:50:7e:f1:e0:93:bb:13:27:c3:e8:77:f7:95:
                    61:a4:70:aa:be:a9:48:01:85:ba:05:8a:55:fc:8c:
                    58:12:7b:13:d5:39:86:72:f8:59:c1:2b:37:14:aa:
                    d4:2a:78:58:1b:eb:c1:6a:97:e6:bc:74:c5:d8:de:
                    3f:c6:ed:10:04:b4:cb:12:6d:c5:b5:ea:6a:90:b4:
                    6e:40:a7:de:ae:14:ac:a7:e4:be:d2:df:4f:76:a9:
                    c5:e6:38:1d:6b:72:ca:21:2b:be:f3:ec:8f:d4:cf:
                    99:fc:ec:17:7f:8c:43:ad:8d:3e:8c:22:55:2d:a8:
                    60:c0:bd:91:65:55:02:59:90:37:77:d7:47:ad:4e:
                    09:a0:6c:92:2b:2e:f1:09:7a:7d:4a:2b:06:e8:c2:
                    3f:1b:2f:12:b5:60:9d:20:6c:a7:41:f0:07:12:d8:
                    ca:db:f4:19:4e:07:fb:28:55:d9:28:84:8e:1f:44:
                    d6:62:88:89:c6:e9:a6:bb:40:75:d1:9a:31:ce:59:
                    47:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A5:75:84:69:DA:F5:9F:34:80:01:44:05:81:3E:FE:E0:77:2E:66
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a383134303a3a2f34342d3434203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:8140::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:08:22:5f:9f:b0:60:d5:47:80:4b:a8:e3:a0:4d:35:0f:35:
         27:06:d3:94:b1:9a:e0:3c:21:7f:55:45:a4:34:43:81:21:e2:
         d4:f0:04:fa:de:7b:42:ee:2d:b2:37:b5:15:97:4d:c3:32:fe:
         97:88:3c:3c:c4:8b:c9:f5:a0:91:03:43:3f:6d:42:16:e7:05:
         21:33:dc:dc:01:1a:32:24:1d:f0:de:df:29:ae:42:f4:b9:bb:
         51:b5:3a:38:ee:ea:e6:34:3d:32:8f:42:2d:2f:55:89:78:8b:
         76:f8:98:51:9e:46:3f:01:a0:90:b7:5f:f9:f9:32:f6:8d:fa:
         74:5a:e8:77:14:aa:9f:e6:95:f3:15:6d:10:7a:cb:ad:44:05:
         2a:0e:29:64:78:c8:0b:91:cf:58:f0:2c:d1:bd:e1:a8:a6:fd:
         dc:67:80:e7:bc:3b:54:f7:2a:1c:ee:93:72:34:d8:b1:e3:2d:
         41:70:ab:14:2e:d6:73:c8:4a:bc:8a:c4:53:b4:49:08:a8:44:
         4d:57:a8:8d:0a:04:c3:1a:0d:d9:f1:d7:7b:8a:87:b6:b3:d1:
         1c:07:13:3b:05:f8:4d:67:20:b2:43:ca:20:51:70:7c:c3:a2:
         5f:f6:62:80:1e:90:88:87:11:38:7b:13:52:57:75:d6:7e:ee:
         93:40:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----