This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
File:                     323830343a313164633a3a2f33322d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          jcPSwA8kAN9EaWnT1/Xg3GTxCdHaJSVlvEepMz43pDU=
Subject key identifier:   AA:80:50:9B:72:27:A0:B8:B7:76:5A:6F:3E:26:12:5F:55:2A:14:FD
Certificate issuer:       /CN=76FED59210027B0D0D34154CEACD5057896DFEAB
Certificate serial:       1086728ECC7E95D9C6D45E98F044CF3B053D5413
Authority key identifier: 76:FE:D5:92:10:02:7B:0D:0D:34:15:4C:EA:CD:50:57:89:6D:FE:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76FED59210027B0D0D34154CEACD5057896DFEAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
Signing time:             Wed 10 Dec 2025 14:15:15 +0000
ROA not before:           Wed 10 Dec 2025 14:10:15 +0000
ROA not after:            Wed 09 Dec 2026 14:15:15 +0000
asID:                     263444
IP address blocks:        2804:11dc::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:72:8e:cc:7e:95:d9:c6:d4:5e:98:f0:44:cf:3b:05:3d:54:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76FED59210027B0D0D34154CEACD5057896DFEAB
        Validity
            Not Before: Dec 10 14:10:15 2025 GMT
            Not After : Dec  9 14:15:15 2026 GMT
        Subject: CN=AA80509B7227A0B8B7765A6F3E26125F552A14FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:e2:7a:e7:f0:1d:b7:8e:79:88:66:ff:b2:
                    3f:ba:e2:94:47:c9:e4:c8:94:59:19:a4:ba:ab:f5:
                    35:bc:07:b0:b8:b6:64:cd:f7:0d:ab:84:6c:0b:68:
                    35:3d:f4:bf:88:e7:df:2a:c1:e5:e4:37:84:72:f2:
                    1e:df:ba:2d:72:2e:fa:a6:4a:f2:00:3a:17:3a:31:
                    a2:b3:06:69:b9:09:8d:3a:0f:96:95:94:12:d8:6c:
                    f2:f5:4b:a0:c7:e2:45:bf:bf:b2:28:cf:10:80:97:
                    da:86:d2:4d:d1:b7:7e:34:52:58:67:be:3e:43:a6:
                    9c:35:d6:cf:9a:45:02:f2:d2:e6:28:f6:36:e1:3d:
                    36:81:bb:49:ba:01:35:81:55:f1:ba:08:38:50:29:
                    af:54:4c:ef:e5:e1:4f:1a:3c:44:dd:8b:c2:da:86:
                    be:7f:6b:6e:27:0e:ec:63:03:6f:6b:5e:8d:09:ec:
                    fe:07:0b:63:95:4b:9a:20:0d:d4:88:6b:d9:06:0c:
                    0f:55:ef:8c:81:35:5c:8b:4e:d6:f6:a7:36:3e:ea:
                    97:93:e4:cf:5b:a9:ae:ee:09:ac:fd:ff:4d:32:5e:
                    10:83:cb:5d:0e:b9:83:50:45:24:30:1d:3b:3a:80:
                    1d:85:91:f5:80:ab:74:5b:8f:ce:a9:70:c3:dd:95:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:80:50:9B:72:27:A0:B8:B7:76:5A:6F:3E:26:12:5F:55:2A:14:FD
            X509v3 Authority Key Identifier:
                keyid:76:FE:D5:92:10:02:7B:0D:0D:34:15:4C:EA:CD:50:57:89:6D:FE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/76FED59210027B0D0D34154CEACD5057896DFEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76FED59210027B0D0D34154CEACD5057896DFEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:f8:04:f9:30:97:95:7d:ad:4a:09:30:4a:7d:06:fd:74:
         eb:1f:08:bb:a4:77:f6:04:8d:2b:c7:62:ee:ea:7b:33:a8:c2:
         42:52:50:87:f0:5e:17:f5:d8:b2:92:d7:3f:72:26:29:b0:72:
         83:1c:b2:cc:69:cc:5c:6c:a1:e9:19:dc:d2:5e:6d:51:b5:54:
         b0:0c:e8:8d:ce:93:f1:ae:6d:47:12:c9:36:67:fb:4e:97:60:
         32:79:7c:18:fb:97:e1:a9:71:98:60:5a:59:e7:10:96:8e:ba:
         59:72:64:3f:97:77:99:63:14:fe:3b:47:1f:ff:c9:76:5d:0d:
         6c:29:23:f1:ad:8c:4a:a2:1f:50:70:3a:ee:fb:6b:e0:a2:90:
         0d:1e:c7:5a:98:e6:ba:21:9a:bf:f8:53:99:21:fa:bd:a8:fb:
         c0:44:a8:19:42:3e:c3:56:1d:e4:89:58:b0:eb:4b:17:b0:cc:
         4d:38:7f:e4:78:3d:42:8f:b8:77:b4:a5:92:52:de:27:1c:1f:
         5f:ee:d7:04:10:4e:13:bd:86:a5:56:c5:86:42:60:8b:ea:1e:
         c4:66:c2:2c:29:83:0a:b7:cb:de:34:e7:89:37:1e:24:cf:48:
         51:da:5c:29:0a:a4:e0:84:c9:c5:eb:64:a6:bc:98:92:8d:29:
         d5:2d:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----