This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/323830343a323637303a3a2f33322d3332203d3e20323634333433.roa
File:                     323830343a323637303a3a2f33322d3332203d3e20323634333433.roa (raw, json)
Hash identifier:          KAaXftRx1UcwjGEA6+V2qjye1dvqNyFBQwiD9et6+U0=
Subject key identifier:   8E:8D:B9:42:0D:0C:31:46:C4:4B:5F:0F:22:4C:91:22:14:8D:1F:4B
Certificate issuer:       /CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
Certificate serial:       0CD8695BB522E4F31539E4A62705A675495EB20E
Authority key identifier: F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/323830343a323637303a3a2f33322d3332203d3e20323634333433.roa
Signing time:             Thu 17 Apr 2025 20:59:31 +0000
ROA not before:           Thu 17 Apr 2025 20:54:31 +0000
ROA not after:            Thu 16 Apr 2026 20:59:31 +0000
asID:                     264343
IP address blocks:        2804:2670::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d8:69:5b:b5:22:e4:f3:15:39:e4:a6:27:05:a6:75:49:5e:b2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
        Validity
            Not Before: Apr 17 20:54:31 2025 GMT
            Not After : Apr 16 20:59:31 2026 GMT
        Subject: CN=8E8DB9420D0C3146C44B5F0F224C9122148D1F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:84:44:6e:3b:5d:aa:9a:00:c2:62:7f:91:
                    92:17:10:e0:07:c8:b1:f7:01:a4:e7:d0:4d:b3:d3:
                    4e:2f:83:3a:15:62:0d:5c:1e:41:dd:e8:62:e5:ce:
                    e1:20:39:c8:88:97:21:f9:a8:96:dc:7d:c5:3e:4d:
                    15:f9:39:b3:8b:60:7f:49:8b:e3:61:79:2e:39:55:
                    e4:5b:ad:40:d9:9d:29:d0:1d:84:80:97:bd:82:ab:
                    da:f3:15:1d:e6:20:8f:82:a8:ae:5b:05:28:14:07:
                    23:72:16:61:b3:d9:32:14:d3:25:10:bc:24:11:85:
                    e2:61:9e:b9:00:cc:78:73:04:e1:6f:0f:4b:16:4a:
                    c3:9c:27:59:03:62:59:c4:3c:5c:ef:5f:ef:e1:4b:
                    e4:75:39:20:8a:76:4e:89:cd:d7:69:c1:b5:b4:2b:
                    e5:2d:22:13:35:85:a0:e3:ad:29:92:3d:fb:76:0a:
                    60:65:66:48:3e:1b:64:18:0a:6b:82:3a:2e:6b:da:
                    d4:00:6d:85:8a:e8:84:f1:3e:dc:64:48:65:6d:e7:
                    ce:10:f1:5f:6d:c6:f9:ed:58:55:43:94:77:d5:e0:
                    70:c1:08:05:65:17:b1:d3:68:e3:6f:8f:99:55:8f:
                    48:a8:5a:e1:44:d4:65:97:c8:08:90:d4:38:ea:1c:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:B9:42:0D:0C:31:46:C4:4B:5F:0F:22:4C:91:22:14:8D:1F:4B
            X509v3 Authority Key Identifier:
                keyid:F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/F344F76594361FCA1022F5214E37E6A29BAC2DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/323830343a323637303a3a2f33322d3332203d3e20323634333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2670::/32

    Signature Algorithm: sha256WithRSAEncryption
         e0:0a:03:bf:bb:df:75:6e:55:22:c8:8e:31:9b:3d:89:53:e8:
         56:e3:db:a9:79:1f:58:83:94:c8:5d:23:4f:6d:34:2b:ab:de:
         46:95:59:73:63:72:f8:52:76:31:e4:cf:20:f2:39:8b:39:46:
         f0:d3:86:b8:e3:d1:13:56:df:8d:6c:f4:2b:75:b7:c2:37:36:
         aa:33:46:2f:72:5a:64:17:ad:42:a6:5f:fe:e9:73:e4:43:12:
         9f:1a:8d:47:8f:ee:f9:cf:c7:a5:34:02:60:f3:cf:1b:a1:53:
         87:a5:b7:f5:d1:f4:5e:e0:04:10:fa:03:45:8c:1c:c8:2e:db:
         42:39:0d:84:87:2c:25:c2:f9:26:bf:c7:4a:48:f5:37:1c:af:
         ac:cb:93:df:ee:79:24:fa:fa:87:fb:49:e4:7e:bb:4d:50:bb:
         38:de:e9:53:3d:b8:f0:f8:f8:85:98:60:a8:c0:29:05:5f:e3:
         c1:21:92:01:23:ac:07:15:84:e0:8d:4f:8f:53:60:c8:98:7b:
         de:d9:4b:e2:13:36:97:eb:01:5b:85:8a:0a:df:1c:55:43:17:
         92:e7:e7:90:82:36:c1:4b:03:fb:37:23:1e:22:de:2e:97:49:
         67:95:cf:35:ce:22:80:b3:ea:6f:f3:38:88:7c:5b:32:c3:46:
         0b:b2:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----