This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d3332203d3e20323636313637.roa
File:                     323830343a336262383a3a2f33322d3332203d3e20323636313637.roa (raw, json)
Hash identifier:          +1O1+8f5YyLTBg4OwWXMThyL4MO12yiIu7SoabdG7Z8=
Subject key identifier:   AD:B7:D8:03:EC:7E:1A:08:2A:32:2C:AA:D1:DE:56:60:91:40:91:68
Certificate issuer:       /CN=4EF5C84266C27338ECEA6530E1F81A23B3609ED2
Certificate serial:       57957D362013E56D7C4EE9D499CE3F07D421688F
Authority key identifier: 4E:F5:C8:42:66:C2:73:38:EC:EA:65:30:E1:F8:1A:23:B3:60:9E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d3332203d3e20323636313637.roa
Signing time:             Mon 28 Apr 2025 13:57:32 +0000
ROA not before:           Mon 28 Apr 2025 13:52:32 +0000
ROA not after:            Mon 27 Apr 2026 13:57:32 +0000
asID:                     266167
IP address blocks:        2804:3bb8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:95:7d:36:20:13:e5:6d:7c:4e:e9:d4:99:ce:3f:07:d4:21:68:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF5C84266C27338ECEA6530E1F81A23B3609ED2
        Validity
            Not Before: Apr 28 13:52:32 2025 GMT
            Not After : Apr 27 13:57:32 2026 GMT
        Subject: CN=ADB7D803EC7E1A082A322CAAD1DE566091409168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:9e:cc:c0:dc:11:1d:a4:79:c9:f6:44:26:
                    4b:67:cb:89:03:ae:09:1a:da:0e:68:7d:0a:0f:15:
                    43:9f:ed:f8:45:a2:01:d8:d7:fb:57:92:6d:47:57:
                    1d:90:65:0b:23:0a:e4:6c:be:2f:bd:ff:79:dc:9b:
                    fe:94:e4:e4:fb:a2:69:36:25:44:ac:25:99:43:ff:
                    9a:63:cf:ab:d8:f7:44:26:24:e7:c9:9e:77:76:bd:
                    50:51:ff:b1:dc:fd:e4:07:5e:30:cf:09:8a:67:06:
                    1c:a6:17:55:3d:8f:ca:a9:13:dd:c1:8e:2a:09:44:
                    85:f3:f5:d3:ba:f9:fa:ef:89:ea:70:64:3a:24:ca:
                    fe:e1:ac:60:e2:2e:6b:71:76:db:e8:34:e5:41:e7:
                    07:4c:96:0e:3c:9d:40:a1:d4:be:b0:72:5a:5b:76:
                    2a:b9:1c:12:06:61:32:a9:28:b3:ad:0f:6b:5a:a0:
                    92:c2:96:92:fc:6a:70:fe:9f:af:e9:0b:6d:f3:da:
                    1d:23:1c:85:8d:63:0c:fa:0e:e3:12:e9:e4:12:35:
                    01:98:1d:49:14:40:a7:06:40:b3:ea:13:bd:c5:5a:
                    ef:b6:7f:46:e1:37:d9:b2:da:c5:7b:2e:0b:6e:9d:
                    6e:94:2e:3b:2f:fb:d5:22:06:25:95:38:19:f5:5c:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B7:D8:03:EC:7E:1A:08:2A:32:2C:AA:D1:DE:56:60:91:40:91:68
            X509v3 Authority Key Identifier:
                keyid:4E:F5:C8:42:66:C2:73:38:EC:EA:65:30:E1:F8:1A:23:B3:60:9E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d3332203d3e20323636313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:52:ca:0e:21:ca:de:9b:7a:b9:ab:38:82:44:03:c1:1e:35:
         f1:70:b0:58:5c:16:1b:70:3b:85:d6:47:3a:f4:73:c5:74:72:
         80:1a:cb:a8:b7:ca:eb:40:9c:80:0d:75:35:fa:0a:a6:f1:a6:
         88:f3:2e:c7:b3:8a:87:a1:c9:46:db:49:ee:9e:9c:fb:92:51:
         d1:e1:bb:26:e7:5f:83:1c:d6:b3:79:10:90:c7:83:1f:a8:19:
         98:1e:4f:c5:56:30:76:8c:73:9d:0e:c3:d9:65:3e:07:b1:b4:
         04:ea:24:52:40:e1:72:11:71:48:ce:dc:36:c4:25:17:ba:cd:
         62:69:59:f7:35:08:c0:7f:98:f7:5c:0f:05:97:f9:11:75:fb:
         f2:43:49:44:54:10:45:dc:a3:b7:53:9d:6b:8a:fd:41:72:0b:
         ca:05:13:96:6f:29:9e:a9:d1:d8:59:5e:ac:22:f9:72:34:41:
         3f:16:55:69:24:cb:da:42:bc:49:3d:02:08:00:c8:3e:9a:f0:
         38:da:35:9c:00:8f:48:98:e9:30:41:a3:7d:ac:00:e3:d9:e6:
         a2:4c:cd:d8:a0:6a:ab:1b:07:3c:48:1b:26:98:e6:70:aa:7f:
         f7:41:32:d9:4c:46:96:47:89:7f:f3:94:e8:61:a3:c9:b5:90:
         c4:a1:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----