This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/323830343a326430303a3a2f33322d3332203d3e20323635323536.roa
File:                     323830343a326430303a3a2f33322d3332203d3e20323635323536.roa (raw, json)
Hash identifier:          afJCdeGKAsL5ohSqL4Jz9wLYSpK+tdkyessQVM3rsuw=
Subject key identifier:   E5:C1:0A:20:F1:FB:22:27:CC:48:67:14:5E:CB:36:61:9F:4A:80:DD
Certificate issuer:       /CN=1D98467C905A92172F884A0A1419F30237985451
Certificate serial:       7032A9C7AD11A1325F1333FB813568A54E3A3238
Authority key identifier: 1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/323830343a326430303a3a2f33322d3332203d3e20323635323536.roa
Signing time:             Sat 30 Aug 2025 00:11:58 +0000
ROA not before:           Sat 30 Aug 2025 00:06:58 +0000
ROA not after:            Sat 29 Aug 2026 00:11:58 +0000
asID:                     265256
IP address blocks:        2804:2d00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:32:a9:c7:ad:11:a1:32:5f:13:33:fb:81:35:68:a5:4e:3a:32:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D98467C905A92172F884A0A1419F30237985451
        Validity
            Not Before: Aug 30 00:06:58 2025 GMT
            Not After : Aug 29 00:11:58 2026 GMT
        Subject: CN=E5C10A20F1FB2227CC4867145ECB36619F4A80DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:fe:af:dc:20:a0:f6:b4:82:80:52:f5:3e:
                    5b:08:61:f8:d7:18:26:7a:93:8f:e1:34:04:78:d5:
                    23:db:69:83:f7:32:ae:60:9f:83:45:6c:e7:24:a9:
                    ae:d9:79:6e:2e:8d:c8:ec:6f:63:f9:6c:25:d8:4e:
                    9a:8b:01:10:40:22:67:40:78:e7:85:1a:20:53:19:
                    eb:e9:c9:20:85:fd:74:05:3e:d9:fc:8e:2d:9c:62:
                    e9:66:ff:45:98:26:60:a5:0b:29:7a:60:c4:6c:ae:
                    3e:86:53:fc:aa:98:7c:f6:53:cc:e2:3b:00:3c:82:
                    9b:31:58:18:c3:f2:49:02:0d:e5:9b:25:70:1d:98:
                    d1:96:e9:f2:33:29:db:a2:96:32:37:31:f4:03:bf:
                    21:9d:dc:c0:6b:81:5c:70:1f:16:3e:5a:96:35:41:
                    69:c4:d1:81:2c:da:a0:3a:56:e1:54:b8:7c:3d:50:
                    82:cb:87:32:e2:97:44:fd:28:c1:06:fd:0e:be:35:
                    08:a4:7a:da:eb:ef:c0:54:db:13:7e:56:51:86:55:
                    97:a8:bc:19:14:e4:67:7d:fb:6e:16:cc:55:f9:32:
                    92:aa:56:a4:2f:19:83:19:be:7c:8d:f3:40:de:4f:
                    e3:14:4f:46:79:bd:21:45:c7:8c:8e:43:c1:2e:77:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:0A:20:F1:FB:22:27:CC:48:67:14:5E:CB:36:61:9F:4A:80:DD
            X509v3 Authority Key Identifier:
                keyid:1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/323830343a326430303a3a2f33322d3332203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:ea:87:42:bb:bf:41:89:ce:cf:29:a2:c7:74:53:8e:c8:25:
         10:de:86:0b:2a:38:4b:fb:e0:55:14:af:30:bb:90:30:80:c7:
         4e:3d:4c:6a:55:ff:2d:6e:15:5b:d3:22:cf:5d:0f:33:11:e7:
         77:72:82:ed:cf:49:22:81:84:d5:67:29:43:7c:b2:6d:c8:06:
         a5:f3:3a:26:46:91:a1:87:10:3a:f4:f3:2e:f8:bc:1f:55:2d:
         a1:33:95:a6:81:26:53:03:58:af:0b:2a:30:c7:ca:a4:cf:9f:
         dc:0e:ab:d8:e5:27:b3:8f:23:b2:c8:a8:d1:8c:cb:d5:46:12:
         9f:8c:c6:0c:9b:f6:33:60:29:0a:eb:14:4b:be:75:47:69:ba:
         4f:97:68:b9:97:3c:08:da:fe:6f:f3:c2:9a:69:67:08:ba:20:
         87:03:61:b8:1d:69:73:22:c5:4f:a8:f8:6a:5a:f0:41:5a:d7:
         d6:c7:52:71:05:6f:b6:d9:c5:11:0b:b0:08:dd:64:1f:a8:32:
         3a:81:40:bd:f5:6a:eb:a4:93:aa:b4:aa:45:a5:2a:46:45:69:
         86:63:a0:41:ad:5e:9a:51:9f:1b:23:80:3f:34:18:92:df:58:
         19:af:1c:8a:c4:f2:cf:26:83:fd:18:30:b8:8b:58:48:a5:29:
         a4:e7:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----