This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/323830343a343065383a3a2f33322d3332203d3e20323635393930.roa
File:                     323830343a343065383a3a2f33322d3332203d3e20323635393930.roa (raw, json)
Hash identifier:          tzrHFLGI3rva8OGWreEXQxFi+5AXEFcQo+UFi8qu2gc=
Subject key identifier:   E8:96:FB:A4:1C:C5:25:E4:88:2A:9F:BF:C7:EC:7C:F5:78:57:06:78
Certificate issuer:       /CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
Certificate serial:       41031A698EB085E74D6BCAC39B8C4B2FCF56232A
Authority key identifier: B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/323830343a343065383a3a2f33322d3332203d3e20323635393930.roa
Signing time:             Tue 10 Jun 2025 19:51:53 +0000
ROA not before:           Tue 10 Jun 2025 19:46:53 +0000
ROA not after:            Tue 09 Jun 2026 19:51:53 +0000
asID:                     265990
IP address blocks:        2804:40e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:03:1a:69:8e:b0:85:e7:4d:6b:ca:c3:9b:8c:4b:2f:cf:56:23:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
        Validity
            Not Before: Jun 10 19:46:53 2025 GMT
            Not After : Jun  9 19:51:53 2026 GMT
        Subject: CN=E896FBA41CC525E4882A9FBFC7EC7CF578570678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:a2:a7:0c:79:d9:a1:2f:ba:11:6a:e0:94:
                    f5:83:25:a1:a8:7e:32:80:ce:20:65:75:f4:23:97:
                    fb:d0:dd:12:82:b0:1b:ac:e5:78:4d:15:99:1b:45:
                    b0:1b:9a:ec:b8:b5:bd:a3:82:dc:c6:fd:cb:0f:27:
                    f9:8c:7d:b1:29:33:5d:1c:6f:c4:e8:16:a9:4d:43:
                    01:e0:ac:71:e2:d1:e8:a3:3c:ef:c9:2a:2d:16:b4:
                    1b:0d:ba:fb:1e:f3:27:5f:78:2b:15:ef:2b:c7:99:
                    b6:bc:17:80:51:d4:15:aa:e0:75:c8:09:4c:11:1d:
                    55:fa:44:d9:29:d0:32:fa:e2:86:64:6e:ba:38:d7:
                    d5:01:f1:fa:68:43:ef:7e:46:7f:92:bb:74:5c:eb:
                    04:bf:87:45:a9:4c:06:a8:b4:a7:fe:a7:e0:ca:4d:
                    00:fc:ab:51:88:71:e8:34:1d:ca:fd:cc:f9:80:83:
                    22:59:78:d8:a0:7d:0d:28:b0:cb:80:c8:f9:33:bb:
                    d2:04:0d:e0:1e:e6:26:35:2c:e8:ad:b2:14:03:55:
                    66:63:42:69:41:81:47:67:b6:d1:72:1a:c9:e3:66:
                    c6:85:43:1d:86:8a:c2:41:59:2e:27:6c:33:14:e5:
                    00:37:fb:51:c5:b1:9c:f8:cb:14:bc:c3:c4:d0:2a:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:96:FB:A4:1C:C5:25:E4:88:2A:9F:BF:C7:EC:7C:F5:78:57:06:78
            X509v3 Authority Key Identifier:
                keyid:B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/323830343a343065383a3a2f33322d3332203d3e20323635393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:55:33:65:7a:37:35:bb:31:87:1b:d2:2f:6f:80:76:e2:
         a7:4a:c4:76:5e:51:f6:c1:d5:73:40:f5:81:fe:8e:a9:7c:e9:
         eb:95:72:ff:4c:25:d1:c6:56:06:d8:72:55:50:4f:f2:4f:eb:
         65:f5:89:ad:1a:59:9f:ea:b5:b4:0b:a5:4a:c4:52:e4:ce:fe:
         07:eb:31:a1:9d:67:bc:3c:4d:4b:91:d1:6d:97:a8:34:7d:c5:
         60:65:d4:29:73:2b:c0:c3:53:ca:69:39:b0:f4:6b:9f:b5:71:
         2d:1e:5a:c4:d3:09:f4:16:2f:a4:48:eb:0b:a1:85:ed:d6:d5:
         d3:7c:88:d5:f2:2f:2a:1e:3b:8c:02:4e:7c:dd:05:39:ed:86:
         7d:8c:32:c7:04:c0:12:cb:d4:d2:af:95:a4:9e:3a:7c:f4:28:
         9e:93:05:a8:e7:83:e2:22:51:d8:95:ba:f6:cb:54:4b:59:54:
         3a:46:c3:72:27:ec:6a:ae:83:ed:4b:85:59:6b:83:64:37:ce:
         d2:62:7a:36:92:bf:49:47:ed:4f:64:45:eb:ef:21:da:e0:6b:
         3e:d0:46:82:5b:72:6f:50:3d:9d:a8:c5:97:f7:f8:79:d1:cd:
         9c:f6:68:54:c5:60:ae:14:88:e0:d1:4b:f2:bc:64:24:c5:e0:
         40:66:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----