This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/323830343a356235633a623030303a3a2f34342d3434203d3e20323638383337.roa
File:                     323830343a356235633a623030303a3a2f34342d3434203d3e20323638383337.roa (raw, json)
Hash identifier:          Z+vxfvLg1TwI/6lsAGmMq3/ls+xXbEyzNuVactOjHAA=
Subject key identifier:   9E:D5:76:EB:76:BC:69:2B:43:A2:BA:A0:E4:3F:8F:7F:78:D0:27:0B
Certificate issuer:       /CN=1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6
Certificate serial:       22BCAEFE016D4F9BDC9D6EC4A147C371C4EADBCF
Authority key identifier: 1E:2A:6F:FD:6B:B1:63:D9:B8:C4:84:35:DD:B8:EE:59:92:3D:58:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/323830343a356235633a623030303a3a2f34342d3434203d3e20323638383337.roa
Signing time:             Thu 21 Aug 2025 01:57:44 +0000
ROA not before:           Thu 21 Aug 2025 01:52:44 +0000
ROA not after:            Thu 20 Aug 2026 01:57:44 +0000
asID:                     268837
IP address blocks:        2804:5b5c:b000::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bc:ae:fe:01:6d:4f:9b:dc:9d:6e:c4:a1:47:c3:71:c4:ea:db:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6
        Validity
            Not Before: Aug 21 01:52:44 2025 GMT
            Not After : Aug 20 01:57:44 2026 GMT
        Subject: CN=9ED576EB76BC692B43A2BAA0E43F8F7F78D0270B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:f6:cd:fb:da:ce:cc:28:dc:6a:b3:40:2c:
                    e7:f4:80:e2:fb:08:43:2c:6b:71:ca:ac:a0:30:aa:
                    8e:21:f6:f2:ab:d4:2b:7e:d0:e9:0a:8a:18:36:4c:
                    6d:63:5a:ac:0c:de:69:26:62:db:1f:a0:98:fe:f8:
                    17:1f:0f:49:7d:13:3e:af:90:d5:e3:9f:20:6e:8d:
                    6f:2d:2b:e5:bb:f7:4a:69:49:64:18:e9:2f:8d:fe:
                    82:5b:8d:cc:b4:3a:97:8e:ba:09:45:e2:76:10:72:
                    21:e7:76:9d:0c:af:1a:f1:f4:08:26:4a:c5:58:aa:
                    0b:5d:97:68:23:d9:2d:5e:71:79:35:51:36:c3:2c:
                    48:ff:1c:9e:7e:1d:94:82:37:c7:77:30:77:b3:9d:
                    d4:ed:23:40:18:cf:21:14:4e:c1:f3:82:c4:23:d6:
                    31:f0:cc:3f:51:33:98:b5:58:47:14:9d:d4:19:eb:
                    48:35:0f:23:af:f6:a6:0e:a5:98:de:21:4f:15:52:
                    95:9e:fc:2f:4b:46:25:f4:cc:21:3a:fe:0f:ba:97:
                    55:ac:05:7b:30:83:b9:81:69:38:f5:61:38:39:0a:
                    d2:4d:f2:08:d8:59:b1:6d:db:91:87:05:24:5c:5d:
                    39:f4:93:21:38:8e:df:be:53:10:de:c5:54:76:3a:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D5:76:EB:76:BC:69:2B:43:A2:BA:A0:E4:3F:8F:7F:78:D0:27:0B
            X509v3 Authority Key Identifier:
                keyid:1E:2A:6F:FD:6B:B1:63:D9:B8:C4:84:35:DD:B8:EE:59:92:3D:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/323830343a356235633a623030303a3a2f34342d3434203d3e20323638383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b5c:b000::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:48:0f:c5:89:02:02:f4:52:a7:88:6a:e1:cd:c1:45:1a:
         1b:fb:fa:13:36:85:d7:25:e9:98:ba:7e:e8:db:62:20:3c:81:
         ad:95:6b:b1:1d:9e:2a:fe:86:ed:a4:f8:1d:2b:db:63:5d:32:
         7c:5b:7f:4e:27:80:e8:0b:d5:e4:b9:72:c8:ca:69:88:85:99:
         0e:46:1b:24:04:82:b0:39:28:d6:bf:a9:fb:f5:1b:a5:56:30:
         f6:3f:d3:5c:05:90:2d:bc:f6:02:50:03:b5:cb:f7:c5:07:bc:
         cb:0e:18:eb:27:60:5d:86:37:ed:5c:43:27:8a:ef:40:6f:b4:
         7d:c3:5b:c8:ea:a8:a6:60:81:fe:8a:67:92:c7:3d:dd:94:fc:
         64:44:39:8a:63:6f:27:54:ce:99:a7:5e:c7:81:4a:d5:00:28:
         6b:fe:a1:49:ac:57:3f:02:c7:40:b9:be:f9:b8:a0:07:9f:e3:
         ac:2e:5d:9e:41:93:eb:1e:06:6a:79:de:f4:1e:3d:20:e1:6b:
         c2:05:60:04:af:10:25:6a:76:21:9a:36:6f:5f:9a:bb:ff:b8:
         65:97:65:d2:98:49:96:6d:d5:8f:f7:73:cd:3e:a9:89:68:83:
         b2:21:f1:da:98:d3:12:07:a5:e2:10:6b:d7:3c:6e:65:3c:d9:
         55:04:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----