This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/323830343a356237383a3a2f33322d3438203d3e20323638383437.roa
File:                     323830343a356237383a3a2f33322d3438203d3e20323638383437.roa (raw, json)
Hash identifier:          6YPceYGEkFaRv23DqJqbqrpi5hK6mIfJbSG8/bqIL9I=
Subject key identifier:   7A:62:E1:E6:9F:22:37:05:FC:53:94:CA:4A:2F:66:CD:FB:D4:20:DC
Certificate issuer:       /CN=7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16
Certificate serial:       10CEFA531DC7141B4DEF9612E7633471852061A9
Authority key identifier: 7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/323830343a356237383a3a2f33322d3438203d3e20323638383437.roa
Signing time:             Wed 05 Mar 2025 22:52:07 +0000
ROA not before:           Wed 05 Mar 2025 22:47:07 +0000
ROA not after:            Wed 04 Mar 2026 22:52:07 +0000
asID:                     268847
IP address blocks:        2804:5b78::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ce:fa:53:1d:c7:14:1b:4d:ef:96:12:e7:63:34:71:85:20:61:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16
        Validity
            Not Before: Mar  5 22:47:07 2025 GMT
            Not After : Mar  4 22:52:07 2026 GMT
        Subject: CN=7A62E1E69F223705FC5394CA4A2F66CDFBD420DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:14:a8:75:cd:a2:58:8b:12:a0:1a:6c:34:
                    45:17:d9:16:d9:85:3e:15:c8:a7:d7:e5:cf:e0:ff:
                    55:1f:e4:19:20:1c:22:67:ad:ef:b9:3b:4c:d9:84:
                    3f:d3:07:09:51:24:4c:5a:24:d0:7f:ff:07:b4:56:
                    2d:2f:88:21:15:86:3c:1e:ef:4b:45:17:4b:f6:9c:
                    ec:d8:c6:93:24:c5:1b:01:9e:75:55:ff:e0:20:2f:
                    27:3d:cd:c9:3f:c4:ff:7e:e3:84:01:a8:31:f3:a1:
                    4c:6a:00:21:72:65:87:d1:fb:71:53:2c:db:1d:5d:
                    3b:e5:54:f5:68:ec:9b:fd:4b:5c:67:6e:d1:09:64:
                    75:6a:cb:04:c4:d5:2a:69:6c:4e:6e:84:06:45:db:
                    57:59:ba:dd:0c:99:f9:85:e9:a3:21:50:ed:9f:88:
                    b7:67:70:5f:fe:41:12:a1:08:ab:12:16:b8:03:3c:
                    ab:b0:e7:86:87:94:f6:ff:86:f2:9d:18:e2:b4:3f:
                    f9:f1:94:c7:e6:96:48:a4:6a:a3:37:5b:46:d2:88:
                    d2:a3:49:1b:0d:e1:f2:72:f5:51:06:22:35:29:96:
                    06:f4:1b:e3:0a:45:3b:6a:73:2e:74:0b:12:7f:d4:
                    7f:15:55:52:cc:42:ef:c2:ae:0a:34:cf:65:c1:82:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:E1:E6:9F:22:37:05:FC:53:94:CA:4A:2F:66:CD:FB:D4:20:DC
            X509v3 Authority Key Identifier:
                keyid:7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/323830343a356237383a3a2f33322d3438203d3e20323638383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b78::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:84:6b:28:93:3a:74:76:f6:fe:da:3b:7a:85:aa:c1:a8:a1:
         25:3d:60:05:6b:78:cc:6b:65:3f:ef:86:ac:90:7d:f7:e9:81:
         ec:eb:9c:43:6f:85:bd:04:21:63:83:0c:9b:fa:55:11:9c:fe:
         2f:ce:cc:38:ac:ef:07:19:f7:53:19:de:04:e3:c0:91:4c:93:
         d0:82:de:fb:a3:ff:ab:73:c8:ed:15:9d:eb:b9:7a:a6:80:c3:
         a8:77:eb:ef:aa:7e:ea:ae:e9:db:95:0e:c2:64:11:7a:1b:88:
         66:03:e6:a9:c5:57:7b:eb:4a:9c:98:53:22:8d:37:ee:dc:bc:
         45:12:49:03:19:31:bc:97:c0:60:56:dc:15:0c:39:73:39:2f:
         12:f4:24:db:fd:17:c5:a5:eb:8d:a7:80:b5:e5:d9:f2:ab:0f:
         df:de:37:bf:bc:8e:de:73:da:4e:5a:de:4c:6d:7b:43:d4:57:
         d3:83:f5:72:f4:1a:56:9d:bd:2e:54:9d:4b:61:0f:d9:ef:e6:
         fb:e8:fa:c1:b5:2b:5f:8c:87:0d:f4:c4:79:ec:ce:d9:2b:f5:
         ab:a0:7f:39:d4:d0:3b:32:65:1d:18:41:b4:eb:9c:56:1a:ae:
         f5:31:e3:62:15:4f:f8:57:c9:f5:28:b2:c0:4e:92:d6:5d:ed:
         23:37:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----