This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (raw, json)
Hash identifier:          B9yyPilbit54yuLGAwHx6lBcYI9SLNV/Vu7wzavs0L0=
Subject key identifier:   D7:50:1D:CF:68:54:F0:A5:4A:58:1D:82:48:22:F9:E2:BE:0F:47:0E
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       6CEF6AECD3C6C00B41EEB2F2C09D4A445E58E40F
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa
Signing time:             Tue 21 Jan 2025 13:50:31 +0000
ROA not before:           Tue 21 Jan 2025 13:45:31 +0000
ROA not after:            Tue 20 Jan 2026 13:50:31 +0000
asID:                     267596
IP address blocks:        2804:43e0::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ef:6a:ec:d3:c6:c0:0b:41:ee:b2:f2:c0:9d:4a:44:5e:58:e4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Jan 21 13:45:31 2025 GMT
            Not After : Jan 20 13:50:31 2026 GMT
        Subject: CN=D7501DCF6854F0A54A581D824822F9E2BE0F470E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:e5:3d:30:bc:f9:b6:c4:15:ea:b7:8b:7d:
                    fd:bb:50:b1:7d:3a:4c:00:a7:32:23:01:12:b1:d0:
                    90:e5:46:df:45:79:90:54:2e:71:78:3a:16:c5:9f:
                    af:ef:b9:dc:7d:40:cb:1a:8f:85:ad:fd:f1:ec:ef:
                    6c:8d:85:48:c7:bc:b1:45:2e:ae:f3:14:d8:cd:d6:
                    24:c6:6e:39:fc:2d:18:0f:60:83:ff:31:9e:f5:40:
                    c1:ec:21:78:a0:78:a7:80:e0:99:68:d1:17:b1:8c:
                    cd:4f:23:60:9f:32:c3:d8:d3:6e:a7:99:4b:76:b5:
                    e1:93:e2:98:ef:01:80:21:4a:d3:22:69:b0:c7:fb:
                    3e:87:c7:67:f3:86:48:2e:4d:90:43:23:71:65:9d:
                    69:4e:9f:d8:06:59:9c:bf:18:73:55:cc:40:94:b9:
                    65:af:0a:e7:3e:42:c2:6c:00:47:32:d2:f7:14:1c:
                    9c:ce:fe:0a:f2:59:1e:24:15:e2:28:e8:4b:7e:72:
                    9e:17:a5:c6:0f:94:a6:82:2f:fd:59:5a:4c:43:74:
                    77:54:74:28:fd:b8:23:69:92:ed:64:3b:89:25:75:
                    3b:96:cd:70:44:53:ed:63:72:c8:9e:49:82:d5:b8:
                    88:c5:1b:66:73:5e:ec:2e:9b:f8:4d:72:e0:e3:3c:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:50:1D:CF:68:54:F0:A5:4A:58:1D:82:48:22:F9:E2:BE:0F:47:0E
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         bb:58:6f:74:01:d5:b6:9b:e0:1e:06:d2:83:14:75:70:89:5a:
         6c:cd:50:14:77:a0:e2:28:fa:a1:71:a8:84:50:ce:16:6f:fc:
         6b:92:34:8a:f6:fd:05:62:a5:13:93:f8:3e:15:4d:77:3a:dc:
         8c:59:4b:cd:d8:39:81:c3:df:ee:a8:7d:ef:22:1a:2a:52:28:
         46:c6:27:2d:ef:a1:5e:9c:0e:ca:5d:8e:52:09:6f:c6:81:f1:
         fc:0d:18:81:ae:fa:a4:d0:df:8e:51:3e:11:1a:8e:da:06:db:
         bd:6a:39:33:96:1d:a8:b9:b0:8c:a5:02:31:4c:6c:1b:e0:a4:
         f5:e3:99:ba:f4:d2:be:6b:ba:d5:1f:50:0e:81:4f:c8:3f:b5:
         9b:27:70:aa:7e:ca:7d:f6:91:3f:e4:f7:44:8d:1b:2f:4b:eb:
         0c:c0:23:0f:45:58:18:40:69:68:29:02:5a:bf:51:21:2a:05:
         31:f6:22:f3:79:4d:7d:da:29:9f:e7:5b:17:44:62:1c:3e:d0:
         0a:49:7c:a3:ae:91:a5:f5:c4:a0:98:f6:9d:d6:9e:10:a8:05:
         61:df:5e:af:44:30:77:9e:be:f9:69:fb:e3:ba:94:5a:aa:34:
         dd:bc:d0:3f:49:40:04:ec:8e:26:e6:4b:0e:71:7e:aa:29:d5:
         2b:da:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----