This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/323830343a376466633a3a2f33322d313238203d3e20323731353935.roa
File:                     323830343a376466633a3a2f33322d313238203d3e20323731353935.roa (raw, json)
Hash identifier:          sqc1LBa+xZY0bxaXG0HT1dK6DAJm0pM+bzzGrVV8sTk=
Subject key identifier:   E6:71:9B:CC:3D:81:15:2E:12:75:F9:29:39:A5:5D:B7:A6:2E:88:D0
Certificate issuer:       /CN=28C838E91EB94141F0E04FD8D8014B82B9089884
Certificate serial:       4F6AE8B2B5520ABE13B966B149C698487C1CF125
Authority key identifier: 28:C8:38:E9:1E:B9:41:41:F0:E0:4F:D8:D8:01:4B:82:B9:08:98:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C838E91EB94141F0E04FD8D8014B82B9089884.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/323830343a376466633a3a2f33322d313238203d3e20323731353935.roa
Signing time:             Fri 13 Jun 2025 16:38:27 +0000
ROA not before:           Fri 13 Jun 2025 16:33:27 +0000
ROA not after:            Fri 12 Jun 2026 16:38:27 +0000
asID:                     271595
IP address blocks:        2804:7dfc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6a:e8:b2:b5:52:0a:be:13:b9:66:b1:49:c6:98:48:7c:1c:f1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C838E91EB94141F0E04FD8D8014B82B9089884
        Validity
            Not Before: Jun 13 16:33:27 2025 GMT
            Not After : Jun 12 16:38:27 2026 GMT
        Subject: CN=E6719BCC3D81152E1275F92939A55DB7A62E88D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:2c:f0:02:5e:35:6b:e7:b1:26:37:21:f3:b7:
                    9b:c1:c3:36:95:03:1c:65:95:62:40:96:e2:51:5b:
                    81:82:7b:50:31:46:4f:5c:c9:9c:04:2d:2f:79:64:
                    f2:1c:95:82:59:20:72:9e:22:d4:83:21:35:4c:6b:
                    b6:e6:e9:e7:b8:d1:45:6a:fd:8b:76:2b:12:d8:6d:
                    57:26:6a:be:c5:e2:d7:c8:37:ca:40:3b:53:ca:5f:
                    ee:cf:b2:76:2d:d3:33:d1:99:ba:ee:59:c1:3c:61:
                    91:29:30:2e:f5:52:91:ac:61:93:f6:cd:92:12:d7:
                    de:6d:80:22:66:d7:e8:e9:3c:70:48:03:25:ae:6c:
                    e2:53:6e:49:70:66:31:fa:49:04:fe:cb:6d:75:34:
                    47:11:2e:a0:3a:a8:68:83:d7:2f:6c:b2:f9:a9:2d:
                    75:48:30:09:44:e4:aa:ac:8a:5c:7b:75:e2:3f:1a:
                    be:67:ad:30:a5:b6:43:64:06:c9:ab:49:e3:97:4d:
                    c5:fc:de:a3:74:2a:f0:30:29:79:ca:60:9d:30:cf:
                    09:2b:84:5a:8a:2f:81:cd:0b:c5:62:69:f5:27:a8:
                    7b:5f:37:f9:83:3e:c0:be:b0:f9:31:8e:71:82:d6:
                    8e:3f:0b:b2:23:1b:74:1d:df:b0:d2:d7:cd:1d:f9:
                    11:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:9B:CC:3D:81:15:2E:12:75:F9:29:39:A5:5D:B7:A6:2E:88:D0
            X509v3 Authority Key Identifier:
                keyid:28:C8:38:E9:1E:B9:41:41:F0:E0:4F:D8:D8:01:4B:82:B9:08:98:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/28C838E91EB94141F0E04FD8D8014B82B9089884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C838E91EB94141F0E04FD8D8014B82B9089884.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/323830343a376466633a3a2f33322d313238203d3e20323731353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:9e:6b:86:89:69:2a:27:51:4d:c0:38:79:53:df:2b:6b:0d:
         0c:38:99:a0:0a:02:37:14:1b:31:be:20:9b:06:43:41:ed:76:
         3c:bc:75:63:4c:00:69:b3:9e:86:20:1d:a9:73:fd:5e:c5:ab:
         9a:4b:1f:ed:84:2e:46:0d:07:41:ad:90:a8:4e:66:79:38:d3:
         6c:5a:48:0c:b4:d6:38:52:66:aa:7e:11:d5:f2:30:f3:72:cf:
         92:a3:0f:6f:6b:d0:11:4d:45:bc:de:f0:e8:a3:85:ee:8d:99:
         29:85:9a:a3:3c:90:43:6a:d5:53:55:ed:a0:63:74:2a:32:e3:
         1d:37:d0:4c:fe:9a:87:19:70:fc:61:5f:49:e5:fe:60:c9:03:
         ba:60:35:d9:99:b7:13:8f:ee:eb:b9:35:39:93:a1:1c:0a:53:
         9c:4e:c2:5d:40:cb:69:64:9a:d6:b1:23:b7:d0:53:1f:b1:bc:
         55:0a:c2:57:ad:91:8a:b4:54:b5:dc:a7:78:06:dd:ca:cb:49:
         8c:92:25:72:d2:70:be:a4:0c:0c:e9:4b:66:60:ff:03:b0:35:
         12:0a:4c:7f:16:be:26:e0:7e:70:f1:63:34:3b:d6:1b:91:cb:
         99:a2:b4:7f:bc:84:5a:ac:ca:62:d7:31:6b:70:d5:26:7c:12:
         21:02:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----