This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
File:                     323830343a366433633a3a2f33322d313238203d3e20323730353139.roa (raw, json)
Hash identifier:          30AJW4IFqGMkZw2Z179Zc2Li1Ssb+W0+RxCBilQtQLo=
Subject key identifier:   35:D8:3C:FD:5C:03:07:D6:C3:3C:96:16:CB:91:D4:D4:A0:26:52:F0
Certificate issuer:       /CN=C34C8C77BF526822ECE13942E53CDB12B6E559C2
Certificate serial:       71860B25C60FD3151AAF6B4DFF178E07435CE62E
Authority key identifier: C3:4C:8C:77:BF:52:68:22:EC:E1:39:42:E5:3C:DB:12:B6:E5:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34C8C77BF526822ECE13942E53CDB12B6E559C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
Signing time:             Wed 30 Apr 2025 21:08:31 +0000
ROA not before:           Wed 30 Apr 2025 21:03:31 +0000
ROA not after:            Wed 29 Apr 2026 21:08:31 +0000
asID:                     270519
IP address blocks:        2804:6d3c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:0b:25:c6:0f:d3:15:1a:af:6b:4d:ff:17:8e:07:43:5c:e6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34C8C77BF526822ECE13942E53CDB12B6E559C2
        Validity
            Not Before: Apr 30 21:03:31 2025 GMT
            Not After : Apr 29 21:08:31 2026 GMT
        Subject: CN=35D83CFD5C0307D6C33C9616CB91D4D4A02652F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:a4:40:a9:1f:fc:17:55:ce:6c:7a:b2:40:
                    87:78:af:16:b1:d2:ad:1f:2e:de:a8:6b:ef:78:0b:
                    4b:cd:1f:b8:1c:2e:19:f3:f7:f8:57:bc:38:01:c9:
                    2f:3d:be:68:03:85:e3:1c:9b:35:76:ac:46:83:e8:
                    ee:a3:92:7c:fb:96:53:1f:8c:1c:62:b6:8d:07:96:
                    dd:a8:1d:74:75:36:77:06:fc:9d:71:0e:b4:54:59:
                    0d:ed:a9:e5:05:24:ae:ce:b0:72:c6:b2:ea:9d:c6:
                    17:0e:26:5c:69:e1:e0:cc:48:60:95:99:1a:4a:8a:
                    4e:c2:b2:4d:e1:80:19:45:19:6d:fc:a0:ab:82:0a:
                    33:e9:8b:8e:c4:e4:22:dc:c7:fd:27:b5:72:a4:01:
                    ca:8f:8c:34:ad:d9:98:88:79:6f:4a:63:1e:2d:61:
                    a6:60:48:2e:8c:09:da:8c:8f:f3:a4:b3:65:5d:33:
                    d8:c8:41:c1:ef:93:b2:02:f2:7b:8c:2c:c2:10:a0:
                    9d:5d:42:24:e6:aa:7f:c8:88:f0:03:07:1b:b0:51:
                    48:ca:fc:77:51:17:63:5e:b1:b5:a4:aa:17:5f:e4:
                    cf:aa:65:e8:c9:7d:b8:ec:4c:8a:b3:c0:eb:00:24:
                    c2:e7:2d:28:d3:35:aa:64:85:7c:13:12:ed:8a:b3:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:3C:FD:5C:03:07:D6:C3:3C:96:16:CB:91:D4:D4:A0:26:52:F0
            X509v3 Authority Key Identifier:
                keyid:C3:4C:8C:77:BF:52:68:22:EC:E1:39:42:E5:3C:DB:12:B6:E5:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C34C8C77BF526822ECE13942E53CDB12B6E559C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34C8C77BF526822ECE13942E53CDB12B6E559C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:01:d9:24:5d:17:39:93:74:42:00:f8:53:96:51:19:fc:
         a4:8f:1f:e4:a9:48:cb:8f:3c:cb:05:45:36:a7:2f:df:1a:a3:
         ea:a3:4a:55:38:8b:37:59:b8:66:f3:0c:d5:8a:ed:81:d4:ba:
         67:b9:d4:77:fd:3b:d0:04:e1:a0:fc:ea:12:3b:50:8c:52:ed:
         ac:51:d7:8b:97:e5:2f:2a:4d:20:39:79:e7:e3:4c:13:d2:64:
         89:f8:6b:89:5a:d0:95:13:54:72:56:18:90:3a:2b:2c:fa:27:
         17:01:d2:41:fe:c0:3f:3e:56:54:85:3b:02:9f:8b:0e:b6:38:
         40:e8:40:f7:c5:80:0d:7c:94:a9:dc:27:e9:e9:15:c3:cf:73:
         9f:e3:3c:52:27:3b:f0:59:7a:37:ec:a6:70:7f:42:69:42:fc:
         86:0e:c5:80:d7:68:b9:5a:09:49:29:50:77:b5:d9:12:71:e6:
         21:aa:64:c0:ad:9e:96:15:82:0b:30:8a:f9:f8:aa:4b:75:f1:
         2e:0b:79:62:1f:fe:28:ca:57:56:d9:40:42:46:76:fa:c4:b5:
         d0:b0:00:4e:2b:f0:e4:d0:24:92:51:ea:d2:f2:79:91:8c:9b:
         b4:16:63:9a:35:5e:fa:88:65:95:4b:a6:11:7e:a7:09:dd:da:
         55:62:1a:af
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUcYYLJcYP0xUar2tN/xeOB0Nc5i4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0QzhDNzdCRjUyNjgyMkVDRTEzOTQyRTUzQ0RCMTJC
NkU1NTlDMjAeFw0yNTA0MzAyMTAzMzFaFw0yNjA0MjkyMTA4MzFaMDMxMTAvBgNV
BAMTKDM1RDgzQ0ZENUMwMzA3RDZDMzNDOTYxNkNCOTFENEQ0QTAyNjUyRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8aRAqR/8F1XObHqyQId4rxax
0q0fLt6oa+94C0vNH7gcLhnz9/hXvDgByS89vmgDheMcmzV2rEaD6O6jknz7llMf
jBxito0Hlt2oHXR1NncG/J1xDrRUWQ3tqeUFJK7OsHLGsuqdxhcOJlxp4eDMSGCV
mRpKik7Csk3hgBlFGW38oKuCCjPpi47E5CLcx/0ntXKkAcqPjDSt2ZiIeW9KYx4t
YaZgSC6MCdqMj/Oks2VdM9jIQcHvk7IC8nuMLMIQoJ1dQiTmqn/IiPADBxuwUUjK
/HdRF2NesbWkqhdf5M+qZejJfbjsTIqzwOsAJMLnLSjTNapkhXwTEu2Ks+b7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUNdg8/VwDB9bDPJYWy5HU1KAmUvAwHwYDVR0j
BBgwFoAUw0yMd79SaCLs4TlC5TzbErblWcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZdVJMUHZOZnh6
aGovMC9DMzRDOEM3N0JGNTI2ODIyRUNFMTM5NDJFNTNDREIxMkI2RTU1OUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEM4Qzc3QkY1MjY4MjJF
Q0UxMzk0MkU1M0NEQjEyQjZFNTU5QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4QXZHNmFMTlNVWUhNQWMzYksxR1pONGVBbXpLQ3lQWXVSTFB2TmZ4emhqLzAv
MzIzODMwMzQzYTM2NjQzMzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBG08MA0GCSqGSIb3DQEBCwUAA4IBAQBYfQHZ
JF0XOZN0QgD4U5ZRGfykjx/kqUjLjzzLBUU2py/fGqPqo0pVOIs3Wbhm8wzViu2B
1LpnudR3/TvQBOGg/OoSO1CMUu2sUdeLl+UvKk0gOXnn40wT0mSJ+GuJWtCVE1Ry
VhiQOiss+icXAdJB/sA/PlZUhTsCn4sOtjhA6ED3xYANfJSp3Cfp6RXDz3Of4zxS
JzvwWXo37KZwf0JpQvyGDsWA12i5WglJKVB3tdkSceYhqmTArZ6WFYILMIr5+KpL
dfEuC3liH/4oyldW2UBCRnb6xLXQsABOK/Dk0CSSUerS8nmRjJu0FmOaNV76iGWV
S6YRfqcJ3dpVYhqv
-----END CERTIFICATE-----