This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa
File:                     323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa (raw, json)
Hash identifier:          4FNNRC0Mr9pjywieMGcS2m7OnLqv/xVCP97zSre4zkw=
Subject key identifier:   B3:6B:35:24:E8:EF:AA:DD:0B:B3:32:DC:F8:B3:95:2A:73:80:F7:03
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       034D64ABC53C7CFF9C1751FA1220F4F647FF8890
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa
Signing time:             Thu 06 Mar 2025 01:41:50 +0000
ROA not before:           Thu 06 Mar 2025 01:36:50 +0000
ROA not after:            Thu 05 Mar 2026 01:41:50 +0000
asID:                     268424
IP address blocks:        2804:5100:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4d:64:ab:c5:3c:7c:ff:9c:17:51:fa:12:20:f4:f6:47:ff:88:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Mar  6 01:36:50 2025 GMT
            Not After : Mar  5 01:41:50 2026 GMT
        Subject: CN=B36B3524E8EFAADD0BB332DCF8B3952A7380F703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:9e:4f:32:2b:21:b5:93:1d:9d:e4:af:61:
                    c6:5f:9d:30:6d:6c:59:5a:b2:f1:64:85:55:93:5a:
                    c3:c0:ec:74:48:26:e8:8e:d5:09:53:ba:51:a8:ea:
                    a1:0b:87:1f:ba:ab:97:7a:03:d1:5d:5f:c2:71:a8:
                    c6:b1:ca:93:52:a3:36:fb:6e:4f:2a:90:04:c6:3a:
                    ba:c8:6a:a5:61:a7:2f:d9:7d:05:37:62:a4:35:60:
                    64:58:9d:74:44:ee:02:67:a7:a4:a4:6a:7a:01:8a:
                    7e:78:df:af:97:42:40:f5:45:57:1d:b6:66:22:22:
                    0a:0f:b2:4b:27:54:0b:cb:33:09:e2:f8:5f:a0:96:
                    01:49:24:08:3a:86:90:90:87:7b:0b:11:92:61:d0:
                    43:03:b0:35:56:ba:3a:7f:15:a7:18:09:ae:be:fe:
                    cc:7c:de:4c:86:18:39:33:19:28:67:87:f6:3a:1c:
                    ab:68:48:a4:18:1a:e3:62:9e:61:f3:04:41:8e:bb:
                    5e:24:f8:81:25:a9:69:7f:5b:2e:a8:cb:dd:f1:b1:
                    94:0c:d2:96:81:ba:68:40:70:1d:3a:2c:aa:b3:8a:
                    e2:1f:91:47:a8:d2:2e:36:87:0c:4f:17:66:b9:89:
                    77:a7:27:fa:51:f7:89:0a:65:c7:e1:c9:f2:e2:70:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6B:35:24:E8:EF:AA:DD:0B:B3:32:DC:F8:B3:95:2A:73:80:F7:03
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:85:9f:41:83:52:18:25:fd:14:ea:12:b6:bf:93:e6:d8:16:
         4f:cb:ab:a3:49:d7:5b:1f:15:a6:a5:25:06:36:ae:0f:ad:e5:
         f1:16:b5:3c:34:55:eb:87:44:29:eb:e5:8f:b4:fe:e3:4a:b7:
         85:02:2b:e6:dd:40:b4:f8:ed:b8:cd:d8:8b:15:74:27:36:be:
         f4:16:50:41:6a:9f:e9:fe:cc:d4:f7:53:4c:99:e5:e5:73:2e:
         16:ca:3a:1b:6f:bb:1b:10:27:76:24:5e:4e:a2:7b:f6:67:f8:
         f7:d8:32:23:e0:95:be:11:fd:88:be:77:a4:da:e3:f3:6d:95:
         38:1c:59:15:2d:68:36:1b:02:d1:43:57:93:0f:ff:66:5e:1a:
         a2:c9:e7:bc:21:76:74:b7:83:8f:97:cf:44:0a:55:07:e1:2c:
         8a:b8:14:2f:71:f4:f4:a5:60:06:d2:d2:4e:a1:70:63:df:69:
         df:64:54:63:eb:de:8b:9b:96:a2:61:9a:f8:fa:4c:ad:27:f9:
         82:94:2f:8a:a5:b5:36:a9:72:b2:ab:37:a7:94:e1:ca:ca:40:
         2c:c3:7a:a5:3f:42:fb:80:95:66:ec:a4:77:01:23:10:3d:22:
         6d:d4:05:1a:0a:b9:02:fb:6d:1b:5d:0f:12:63:3c:1e:4d:42:
         ed:9c:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----