This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          3ATdnwKTcnjJc1thmle9rbBzJ54qo4F2Z6Zt7tF0mOQ=
Subject key identifier:   36:A3:E3:EF:5A:FC:BF:E7:50:55:DF:7E:D9:09:52:01:15:3C:65:0A
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       7A50FD7BBBEFD99D944EA3945972129722CD1829
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Thu 06 Mar 2025 08:42:17 +0000
ROA not before:           Thu 06 Mar 2025 08:37:17 +0000
ROA not after:            Thu 05 Mar 2026 08:42:17 +0000
asID:                     262354
IP address blocks:        2804:828:c230::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:50:fd:7b:bb:ef:d9:9d:94:4e:a3:94:59:72:12:97:22:cd:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Mar  6 08:37:17 2025 GMT
            Not After : Mar  5 08:42:17 2026 GMT
        Subject: CN=36A3E3EF5AFCBFE75055DF7ED9095201153C650A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:5f:38:f0:fc:c6:f7:1a:2f:03:6b:c1:d0:
                    bb:dd:d6:cd:88:77:84:b2:76:d1:6b:8e:91:2a:fc:
                    b4:20:72:bd:e5:e0:b8:a6:1b:2a:36:61:e3:8f:51:
                    de:ab:e9:d3:66:14:79:55:7e:c6:96:9d:25:ee:25:
                    3b:4a:ca:dd:ad:f5:2f:65:7b:47:e4:ba:90:a5:61:
                    cb:0f:32:fd:1e:ba:7f:79:6c:85:16:76:08:6a:65:
                    15:94:3d:e3:71:34:7b:15:e7:88:65:7a:9f:ba:b0:
                    01:2a:ad:37:72:17:95:1e:6f:90:99:89:b0:6a:62:
                    b2:48:64:3e:18:78:13:16:e5:51:9f:5d:f7:34:8e:
                    a9:d5:69:1a:1a:d4:7c:05:20:67:9b:92:4b:e7:25:
                    59:38:7f:b5:7a:bf:99:93:9a:fc:ed:15:39:92:19:
                    a0:cf:2e:86:2c:8c:d3:04:dc:21:7e:2c:85:83:df:
                    85:e8:f2:4e:07:68:c1:99:5f:a8:e7:a9:3c:82:1c:
                    9c:13:84:29:22:70:ef:99:b7:21:a3:b9:84:23:b6:
                    f1:80:23:15:08:17:2a:42:5f:60:07:f1:ac:40:19:
                    6d:8d:ae:82:bb:cd:34:12:79:72:6d:7a:6c:9a:50:
                    9f:0a:ef:b8:83:66:e0:23:d9:36:b2:cd:9f:c7:b5:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A3:E3:EF:5A:FC:BF:E7:50:55:DF:7E:D9:09:52:01:15:3C:65:0A
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633233303a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:c230::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:c1:fc:96:d2:73:2f:dd:58:55:65:37:76:c5:17:f5:89:
         15:4d:3a:be:6d:de:7a:f4:88:1d:77:d1:6d:6d:77:4f:07:e6:
         00:40:32:c1:c2:bf:cc:df:fd:68:a2:aa:41:af:23:a0:34:79:
         2a:38:e5:a1:32:40:15:e2:6f:c4:9e:5f:74:8a:95:91:c1:11:
         ee:0e:5e:27:a1:49:6f:32:6e:cd:72:4d:2d:52:6d:75:0f:c1:
         03:ee:bc:a2:12:83:85:b5:b5:1f:1f:07:2b:2b:37:f0:03:05:
         e7:0c:f0:10:6f:2b:58:9d:60:ef:ec:bc:49:fb:3e:30:8b:b4:
         92:af:2f:cf:a4:36:45:58:d5:f3:ae:ff:25:9a:05:c5:35:03:
         2b:10:58:b7:ac:8e:19:51:43:d5:37:a9:f5:1b:9d:75:ff:a5:
         28:1d:c7:8c:18:f5:b8:06:43:b6:29:ff:f4:63:13:0b:db:59:
         40:fe:0e:bf:97:04:87:47:a7:8b:fb:e9:da:f6:ba:ed:d4:5c:
         05:76:1a:b6:f6:bf:44:57:8c:d5:47:4a:22:cc:2a:9b:2e:68:
         0e:cf:6e:f3:1f:f5:03:28:95:39:31:6e:c4:f9:e8:5c:a0:50:
         02:4f:1b:c4:4b:d6:1d:7d:d3:70:86:5e:db:e5:0a:5b:ec:be:
         00:48:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----