This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa
File:                     323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa (raw, json)
Hash identifier:          VWq3avCqfTgBsrBPkA1B28GpXgCsTRu36GzPPx8jFCE=
Subject key identifier:   1D:3E:68:0C:3F:69:3D:8E:0E:4A:8A:62:A4:FD:AD:28:BA:73:D5:B1
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       CBF4029ED6EDA64148A1120CA856A51A6D0355
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa
Signing time:             Thu 06 Mar 2025 04:33:10 +0000
ROA not before:           Thu 06 Mar 2025 04:28:10 +0000
ROA not after:            Thu 05 Mar 2026 04:33:10 +0000
asID:                     267329
IP address blocks:        2804:4bc8:1400::/40 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cb:f4:02:9e:d6:ed:a6:41:48:a1:12:0c:a8:56:a5:1a:6d:03:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Mar  6 04:28:10 2025 GMT
            Not After : Mar  5 04:33:10 2026 GMT
        Subject: CN=1D3E680C3F693D8E0E4A8A62A4FDAD28BA73D5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:ce:c2:7d:28:2f:6d:c9:9a:66:a0:54:c2:
                    ca:fb:49:d3:29:05:3f:3e:69:bd:4b:59:41:71:b4:
                    36:8b:a3:67:fb:1a:b6:19:74:78:58:a7:cc:bc:12:
                    05:74:60:3b:50:b1:ba:85:14:de:fe:9a:b2:c7:30:
                    d1:0f:98:04:62:28:fa:99:cf:5f:03:99:1e:1f:9a:
                    bb:9d:c5:96:e6:e5:c2:5e:0f:4a:9d:08:4d:19:fd:
                    a4:4a:27:54:b1:cc:c6:07:bb:43:d4:d1:85:e0:7b:
                    41:5a:8b:0c:03:9b:12:8d:dc:d2:35:dd:6f:fb:c0:
                    ae:03:57:97:65:f4:88:05:ef:07:58:45:83:fe:8a:
                    79:d2:66:62:f9:42:df:69:cd:72:a4:90:96:19:1e:
                    e8:6a:72:d3:61:41:68:e4:2e:32:31:5b:a2:d2:67:
                    46:7b:95:ce:5a:0a:4b:51:1e:71:03:06:5f:0d:70:
                    a6:3c:04:e9:dc:46:02:fb:f4:b7:15:76:63:94:02:
                    e1:83:b6:ce:39:04:45:b0:22:f3:42:9c:4c:86:7b:
                    15:97:55:7e:ec:4c:37:26:05:e9:9b:5b:c2:f7:dc:
                    b3:ab:af:42:96:c8:b3:08:85:d6:0f:8e:79:04:8d:
                    18:ec:ce:a5:af:5b:d7:3e:12:1c:22:85:69:26:c4:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:68:0C:3F:69:3D:8E:0E:4A:8A:62:A4:FD:AD:28:BA:73:D5:B1
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:f3:73:ac:ea:09:e9:2f:32:6e:f9:d9:f0:28:54:d6:a2:
         64:65:37:09:46:b9:5d:5b:20:a8:1d:20:38:dd:af:a1:12:b6:
         5f:4b:5d:f6:91:20:c4:5e:8b:fd:5f:20:58:d3:76:98:15:8f:
         59:c4:42:8c:fe:7f:64:c8:44:35:d9:f4:70:6c:86:64:a9:ba:
         92:9c:80:46:a8:e0:6a:dd:56:8e:bb:4a:16:c5:8e:68:29:b0:
         79:20:e7:f4:8d:31:fc:51:5e:22:5f:5c:8e:f6:91:3c:b7:af:
         17:9b:8b:46:e2:c9:9d:91:bf:e2:f1:36:1e:62:a6:74:9f:3f:
         9a:16:17:33:59:c8:dc:c2:f5:d6:92:9e:09:e6:b5:db:86:d7:
         31:7d:f5:92:a1:9c:69:89:89:e9:bf:70:fb:91:07:3d:8d:e0:
         28:87:ad:6c:61:b0:6a:34:c5:b4:90:aa:3e:c3:2c:a0:87:b9:
         cc:f2:27:fc:45:eb:88:61:41:0a:7a:a9:46:90:c1:eb:ea:e4:
         e0:ed:ad:47:24:26:c5:48:e7:1d:d0:46:39:4e:a7:7e:c8:e5:
         c2:d0:df:0b:d8:d9:29:c1:09:97:c3:17:1d:a7:23:c4:52:da:
         ba:df:07:ef:42:e8:70:87:a4:6d:ca:72:38:89:b3:ac:d1:6a:
         b9:21:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----