This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
File:                     323830343a346263383a3a2f33322d3332203d3e20323637333239.roa (raw, json)
Hash identifier:          nPVwqefAnVacqbFqKvhWKiq8elBCfmRuzNc3Ga6mYNU=
Subject key identifier:   23:CB:6E:43:08:E8:EE:7B:C2:DE:BA:52:07:89:D9:15:6B:7C:CF:A9
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       56047D493FDB7B251BD86C9654E1D0B9E85938FB
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
Signing time:             Thu 06 Mar 2025 04:33:10 +0000
ROA not before:           Thu 06 Mar 2025 04:28:10 +0000
ROA not after:            Thu 05 Mar 2026 04:33:10 +0000
asID:                     267329
IP address blocks:        2804:4bc8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:04:7d:49:3f:db:7b:25:1b:d8:6c:96:54:e1:d0:b9:e8:59:38:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Mar  6 04:28:10 2025 GMT
            Not After : Mar  5 04:33:10 2026 GMT
        Subject: CN=23CB6E4308E8EE7BC2DEBA520789D9156B7CCFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:c0:0c:84:91:c9:8b:41:5e:4e:78:30:dd:
                    11:48:10:40:6a:c1:2d:56:d3:26:14:4b:fa:92:d7:
                    fe:61:42:81:2c:0f:44:8c:29:83:f6:92:1e:89:ca:
                    57:99:72:ed:c5:33:e1:4c:e7:f2:d2:19:34:3b:94:
                    c8:6d:26:1d:df:b3:20:ff:e6:73:08:ff:1a:d3:9e:
                    04:45:e6:0e:39:0b:c6:df:aa:8f:a4:3a:28:0d:8f:
                    40:91:e8:fc:cb:16:84:ee:96:81:18:49:79:f3:02:
                    ee:56:83:ce:22:32:d3:83:e4:a1:5c:1e:71:0d:72:
                    08:1a:b4:f2:f2:a7:ef:c7:c0:f4:db:4b:e2:16:50:
                    1c:86:6d:26:50:6d:69:38:9f:33:73:d7:28:18:18:
                    9e:99:c1:77:b0:70:fd:f2:ce:13:58:9d:33:0f:73:
                    ea:7e:72:86:df:57:c9:6a:03:57:be:3b:0f:95:fb:
                    14:c1:f3:bb:2c:ef:7b:6b:dc:a2:f6:c6:1b:fd:1b:
                    4d:b4:6d:3b:b8:1a:be:5a:bf:f2:4b:24:a4:80:2a:
                    61:b1:23:13:60:9e:f5:20:29:ea:73:d4:90:35:31:
                    53:d6:f9:c9:d4:11:c5:cc:c6:b3:ef:fb:47:df:3f:
                    be:82:0c:12:ab:d1:6c:52:8b:2a:ef:c6:32:74:f7:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CB:6E:43:08:E8:EE:7B:C2:DE:BA:52:07:89:D9:15:6B:7C:CF:A9
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:43:21:e8:37:ad:06:46:26:0a:af:31:b9:08:19:96:9e:b7:
         a3:11:4f:26:e7:10:61:24:3d:22:c0:a2:d3:a0:1f:2f:b2:aa:
         96:f4:66:f8:77:d8:7d:48:d5:39:5e:69:ab:9f:87:b3:d1:e6:
         b4:38:56:e2:57:c4:c2:a8:01:71:2f:8d:f0:a4:58:44:35:bd:
         42:3f:95:a6:2a:e0:a3:49:16:d9:ec:6b:68:32:67:76:13:12:
         8c:43:65:54:57:95:49:59:49:68:2f:25:c8:b4:92:04:74:81:
         4e:94:6e:48:2e:68:af:e5:b0:8e:72:a4:bd:1f:81:84:f7:35:
         d4:ef:30:e6:79:21:07:a1:4a:16:ab:19:7c:a3:2c:f4:a1:68:
         42:6d:93:86:b7:0d:ec:f2:a8:cb:07:54:59:8b:ea:28:2c:cd:
         72:d6:08:3b:e6:7a:dc:9f:8e:44:42:54:31:c7:b2:5f:ca:e8:
         ef:af:72:07:97:06:d0:0e:38:74:cc:15:04:c0:36:b8:63:7e:
         41:9e:2f:49:6c:2b:3f:5f:dd:b6:b6:ae:33:d6:28:c8:3e:55:
         aa:2f:09:a5:ee:f7:0d:aa:b8:eb:c6:57:df:2f:cd:ef:eb:8f:
         54:a2:1c:1b:ab:08:54:41:6a:bc:c1:31:ac:d9:5c:b8:22:aa:
         56:9f:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----