This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          IIjOfwScjYzuIW455scPteo+jXiGwymOxdWyMdesCxU=
Subject key identifier:   36:24:1F:99:03:08:53:65:79:CA:0C:4C:C0:54:4B:D4:A1:56:4C:53
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       4131BF19B2D985A9F10F5FB2B949D48C9B42C76E
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Thu 06 Mar 2025 08:42:16 +0000
ROA not before:           Thu 06 Mar 2025 08:37:16 +0000
ROA not after:            Thu 05 Mar 2026 08:42:16 +0000
asID:                     262354
IP address blocks:        2804:828:f230::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:31:bf:19:b2:d9:85:a9:f1:0f:5f:b2:b9:49:d4:8c:9b:42:c7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Mar  6 08:37:16 2025 GMT
            Not After : Mar  5 08:42:16 2026 GMT
        Subject: CN=36241F990308536579CA0C4CC0544BD4A1564C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:f8:47:83:85:a6:ef:16:19:a2:5d:da:60:
                    d7:13:01:ef:83:d9:61:23:1e:ee:27:90:ba:15:e1:
                    d0:fb:33:e6:a2:3d:83:46:85:55:77:71:ec:35:56:
                    53:be:e5:9c:9b:90:a1:b2:a9:98:ce:6f:35:00:e2:
                    01:0a:7c:82:ad:ab:f5:f2:00:f2:4c:60:04:88:4c:
                    93:59:c4:4c:9f:11:60:e6:80:00:92:42:83:4d:3e:
                    4b:cd:b8:75:5e:de:02:4a:d3:c4:d1:8e:b9:9a:67:
                    82:5f:42:20:9a:15:18:fa:78:0c:1b:dd:36:f2:5e:
                    68:7c:6a:c5:fc:53:b8:f5:f5:f4:07:e7:d4:5c:39:
                    f1:8b:56:52:7e:e7:49:2f:53:98:68:b9:e5:d7:2d:
                    83:d0:d1:cc:2f:04:85:4d:c0:7e:2c:bb:48:6f:61:
                    74:ee:83:e5:59:1f:75:fa:57:c4:fe:7a:ef:30:a7:
                    2c:77:33:a3:bc:db:9a:35:6c:26:d9:1d:6c:b5:fa:
                    db:93:02:be:f1:4d:a9:76:f7:af:d3:d7:74:6a:4a:
                    5b:68:11:c8:cf:3a:75:11:60:57:26:f1:26:64:c7:
                    1b:d7:bb:6f:e9:f8:21:6e:2d:24:c9:e0:0d:20:8e:
                    ae:df:73:39:6c:b6:4e:9c:a1:21:ec:94:08:33:8e:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:24:1F:99:03:08:53:65:79:CA:0C:4C:C0:54:4B:D4:A1:56:4C:53
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a663233303a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:f230::/47

    Signature Algorithm: sha256WithRSAEncryption
         b1:16:c5:fb:95:f9:c8:63:28:aa:cb:f2:49:1e:3a:54:bf:23:
         b2:7a:a3:0a:07:40:f3:de:2b:0f:03:d5:81:3e:c8:96:77:81:
         96:c7:23:b9:95:3b:63:c1:f1:31:f7:b7:08:39:f1:2b:81:93:
         82:fc:dc:fa:39:48:3b:3a:a7:51:00:bb:aa:c1:33:0e:81:99:
         f3:23:86:52:d9:3f:01:0a:74:2f:e1:90:a1:12:e2:5a:4c:85:
         bb:8c:f0:69:e4:5c:a3:ce:11:2a:83:af:e3:d9:2f:a5:d1:a9:
         a2:35:53:9d:a3:80:ef:63:44:f7:1d:ba:14:78:5e:e1:e8:a6:
         86:26:72:5f:af:aa:d6:5e:e1:f5:f9:40:fd:45:b3:97:62:01:
         9b:da:2b:fe:02:de:42:30:98:5c:e5:4a:00:ae:50:91:f6:81:
         98:2c:c2:4b:4a:71:cb:a6:2b:d9:e4:e3:ce:20:e2:f3:b3:b7:
         87:a1:b5:e6:e0:2f:7e:e5:a9:c0:76:84:91:77:d0:38:7a:33:
         27:52:b4:e3:c6:60:4e:00:1f:09:a1:7e:1a:bc:ef:59:3c:69:
         24:34:d8:e0:a0:71:34:e1:68:23:7e:13:c9:f7:76:70:54:a2:
         67:3c:7b:d0:08:a5:a0:97:da:9a:c5:90:4b:f4:f3:0b:ed:e3:
         a7:06:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----