This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a323a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a323a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          2wVPBrR3UkmUq2thoKDnGuhqJRvvYXVkkBCo78w0siM=
Subject key identifier:   7F:04:AE:E4:71:32:FE:7B:96:CB:14:8A:78:3D:CD:1D:66:BD:ED:13
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       4CEFDDA331D899BB69521DFDD44634580E92CDA9
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a323a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:49 +0000
ROA not before:           Thu 05 Jun 2025 01:00:49 +0000
ROA not after:            Thu 04 Jun 2026 01:05:49 +0000
asID:                     265330
IP address blocks:        2804:2e30:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ef:dd:a3:31:d8:99:bb:69:52:1d:fd:d4:46:34:58:0e:92:cd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:49 2025 GMT
            Not After : Jun  4 01:05:49 2026 GMT
        Subject: CN=7F04AEE47132FE7B96CB148A783DCD1D66BDED13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:f6:ec:b7:83:4f:e6:62:79:ef:f9:d4:50:
                    e0:49:c7:43:d1:86:ed:1b:9d:37:76:16:9d:cf:22:
                    47:c7:99:27:aa:97:54:e7:85:f7:ac:a1:e6:d3:fc:
                    b2:48:e7:9b:88:dc:e0:fa:21:54:e4:24:1d:ab:36:
                    be:24:bd:74:51:06:85:2c:87:2f:a8:5d:ef:66:b7:
                    2b:9a:48:dc:75:18:0d:d2:08:51:a4:4f:d8:a3:90:
                    e4:a1:d4:a8:a3:bd:2f:52:c3:6d:ea:e3:2a:e1:e3:
                    4c:4f:4c:44:2b:88:55:dd:6a:f6:91:e3:16:18:85:
                    37:96:1f:4d:37:b9:6e:2f:ba:df:a5:55:51:12:d0:
                    dd:32:e8:76:c9:a3:1c:49:29:94:d4:f5:90:93:c3:
                    01:cb:77:44:43:c8:1a:74:9d:94:c4:cd:02:18:09:
                    9c:9b:97:f2:ae:b1:f7:27:ae:b2:9d:d7:15:d9:c4:
                    a1:58:85:4f:6d:17:4b:42:62:28:75:01:00:e5:03:
                    f6:67:48:cf:14:10:6c:d5:f9:79:c5:ea:b6:7f:5d:
                    30:77:b2:fc:04:42:4a:2f:e9:54:99:5e:57:88:96:
                    6d:d4:4b:4b:2a:2f:3a:c0:2c:6c:41:36:54:55:cb:
                    48:c4:9c:c4:34:f0:01:df:37:bb:95:73:07:16:82:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:04:AE:E4:71:32:FE:7B:96:CB:14:8A:78:3D:CD:1D:66:BD:ED:13
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a323a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:b4:f2:3d:ad:49:90:73:53:d2:98:1b:7a:6a:77:b8:2f:9b:
         1a:84:df:56:ab:7a:fa:d2:49:7b:fa:aa:9b:3e:6d:85:de:54:
         e0:e8:e9:52:ed:81:a5:cd:6b:ac:71:47:94:31:bb:2c:81:1c:
         fb:33:3a:cc:2a:29:ab:3c:4f:f6:44:1c:7f:90:00:24:49:56:
         49:ce:78:5b:8e:30:73:f2:e0:cf:98:fd:f0:5b:4f:b4:17:87:
         23:22:67:44:76:a6:87:73:6f:6e:02:d5:b6:dc:cf:04:cd:7e:
         1b:8a:e6:69:1c:a4:5b:0f:49:07:8e:43:47:ad:be:bb:1c:08:
         18:f4:e5:78:56:58:42:11:ea:64:cc:7f:cf:d5:db:17:70:9c:
         37:9d:0f:ef:b7:67:e3:cd:02:e0:51:6a:3f:b8:5e:8a:a1:90:
         ab:b2:8f:f3:0f:5d:a1:79:65:1e:dc:23:2b:fb:32:78:fb:79:
         da:26:ed:e9:d3:62:c3:6e:35:9e:32:b2:46:a7:8b:e5:1b:06:
         4b:bb:60:99:b6:ff:fb:b8:1a:08:93:dd:ab:8f:22:f1:cc:4c:
         b1:99:8e:93:2f:1e:c2:22:ce:7f:40:a4:c3:a0:5a:ce:0a:90:
         ea:94:da:19:62:9e:a3:54:63:b0:bc:d1:01:0a:17:c6:60:81:
         eb:80:9e:83
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUTO/dozHYmbtpUh391EY0WA6SzakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRBNDMyRTYzREY3RDQxRDUwRkFEQzVBNjQ2OTk3NEQ0
MkM0NDczODAeFw0yNTA2MDUwMTAwNDlaFw0yNjA2MDQwMTA1NDlaMDMxMTAvBgNV
BAMTKDdGMDRBRUU0NzEzMkZFN0I5NkNCMTQ4QTc4M0RDRDFENjZCREVEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUY/bst4NP5mJ57/nUUOBJx0PR
hu0bnTd2Fp3PIkfHmSeql1TnhfesoebT/LJI55uI3OD6IVTkJB2rNr4kvXRRBoUs
hy+oXe9mtyuaSNx1GA3SCFGkT9ijkOSh1KijvS9Sw23q4yrh40xPTEQriFXdavaR
4xYYhTeWH003uW4vut+lVVES0N0y6HbJoxxJKZTU9ZCTwwHLd0RDyBp0nZTEzQIY
CZybl/KusfcnrrKd1xXZxKFYhU9tF0tCYih1AQDlA/ZnSM8UEGzV+XnF6rZ/XTB3
svwEQkov6VSZXleIlm3US0sqLzrALGxBNlRVy0jEnMQ08AHfN7uVcwcWgs6/AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUfwSu5HEy/nuWyxSKeD3NHWa97RMwHwYDVR0j
BBgwFoAUpKQy5j331B1Q+txaZGmXTULERzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05zSjJxYlppVHplTDVHZExDQmZBWHlIcHNSQmFqYnlOOW9MUWFpRW5I
Q1ovMC9BNEE0MzJFNjNERjdENDFENTBGQURDNUE2NDY5OTc0RDQyQzQ0NzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QTQzMkU2M0RGN0Q0MUQ1
MEZBREM1QTY0Njk5NzRENDJDNDQ3MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOc0oycWJaaVR6ZUw1R2RMQ0JmQVh5SHBzUkJhamJ5TjlvTFFhaUVuSENaLzAv
MzIzODMwMzQzYTMyNjUzMzMwM2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNTMzMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgELjAAAjANBgkqhkiG9w0BAQsFAAOCAQEA
jrTyPa1JkHNT0pgbemp3uC+bGoTfVqt6+tJJe/qqmz5thd5U4OjpUu2Bpc1rrHFH
lDG7LIEc+zM6zCopqzxP9kQcf5AAJElWSc54W44wc/Lgz5j98FtPtBeHIyJnRHam
h3NvbgLVttzPBM1+G4rmaRykWw9JB45DR62+uxwIGPTleFZYQhHqZMx/z9XbF3Cc
N50P77dn480C4FFqP7heiqGQq7KP8w9doXllHtwjK/syePt52ibt6dNiw241njKy
RqeL5RsGS7tgmbb/+7gaCJPdq48i8cxMsZmOky8ewiLOf0Ckw6BazgqQ6pTaGWKe
o1RjsLzRAQoXxmCB64Cegw==
-----END CERTIFICATE-----