This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa
File:                     323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa (raw, json)
Hash identifier:          hEDHHNiLhUYktgt0OD5s7x8FkyDL9tglcGN8QajrBvw=
Subject key identifier:   BB:65:6B:F0:51:84:0D:E3:1D:AF:2C:28:DC:EF:00:D9:07:6D:0A:0F
Certificate issuer:       /CN=87575BC22E7BED0E57475986037CBA8D6DE4F4A8
Certificate serial:       1A02B7CC3B7FC12E8C6C0E4D5B9778A9F6CFBEFE
Authority key identifier: 87:57:5B:C2:2E:7B:ED:0E:57:47:59:86:03:7C:BA:8D:6D:E4:F4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa
Signing time:             Fri 20 Jun 2025 15:43:52 +0000
ROA not before:           Fri 20 Jun 2025 15:38:52 +0000
ROA not after:            Fri 19 Jun 2026 15:43:52 +0000
asID:                     268850
IP address blocks:        2801:80:3540::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:02:b7:cc:3b:7f:c1:2e:8c:6c:0e:4d:5b:97:78:a9:f6:cf:be:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87575BC22E7BED0E57475986037CBA8D6DE4F4A8
        Validity
            Not Before: Jun 20 15:38:52 2025 GMT
            Not After : Jun 19 15:43:52 2026 GMT
        Subject: CN=BB656BF051840DE31DAF2C28DCEF00D9076D0A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:9e:dd:b1:5e:a1:26:32:c9:4c:ac:71:72:
                    07:04:42:e7:72:b1:25:72:99:07:19:02:22:3e:96:
                    75:f0:8c:6f:b7:80:a9:55:46:44:62:e8:26:b5:06:
                    f4:76:79:fe:f3:90:eb:ef:03:4b:48:60:06:c6:be:
                    4e:e1:b9:ac:e6:97:59:09:0e:e2:8c:47:02:b3:c5:
                    18:bc:ca:8c:3b:74:b2:99:ba:9b:a3:e9:2f:cf:ff:
                    15:40:d7:0c:65:bc:3a:85:c8:fc:48:8f:38:38:df:
                    03:1e:28:59:3a:f9:c4:86:6d:66:d8:f7:b1:81:40:
                    d7:5c:6c:70:7b:96:f1:28:f6:57:9f:15:d5:25:94:
                    b5:33:a5:1f:3b:68:ca:1e:a1:53:4b:ef:3e:a7:c2:
                    d3:20:d1:2e:fa:d4:da:40:16:ef:0b:70:9d:f2:96:
                    f7:67:43:bc:6b:b0:19:6c:3e:c8:0f:f9:ba:b1:28:
                    b1:6a:2b:e1:0d:5f:b5:f1:47:4b:2d:92:a7:57:51:
                    22:3e:e6:4b:9b:6e:a1:59:6d:14:c6:c8:6c:22:72:
                    5a:ce:43:44:85:e4:98:87:57:4c:d8:b9:8f:f2:8f:
                    8e:ed:5e:10:ed:60:1e:a8:f2:b9:32:b8:7c:9f:bb:
                    a9:65:c0:93:d4:54:2e:d6:04:92:81:94:3e:79:40:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:65:6B:F0:51:84:0D:E3:1D:AF:2C:28:DC:EF:00:D9:07:6D:0A:0F
            X509v3 Authority Key Identifier:
                keyid:87:57:5B:C2:2E:7B:ED:0E:57:47:59:86:03:7C:BA:8D:6D:E4:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3540::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:db:e1:93:66:f8:ce:55:37:76:13:d4:f8:d8:20:12:6a:c3:
         78:67:11:82:01:a7:a1:b1:e5:06:65:16:f8:10:4d:18:1a:85:
         ca:ef:29:aa:7e:ae:6d:05:84:c7:fe:8e:5b:fd:f5:06:42:8f:
         c0:be:24:56:f2:c9:e3:c6:91:69:5c:c0:a5:66:38:a5:23:79:
         d9:99:6f:95:87:de:68:8f:7e:3c:ef:dd:3a:6a:f3:ad:fc:99:
         2c:a1:e7:c9:7b:9d:e9:5c:93:f3:0e:3e:84:76:42:78:f8:a9:
         44:90:d7:56:a0:8a:50:54:1f:76:ac:ea:ab:b1:94:7a:1f:03:
         38:42:85:38:77:a3:0a:c0:31:aa:03:1e:57:39:b9:d1:31:62:
         da:ea:e3:d8:8c:04:2a:dc:6f:c4:5d:5c:ed:44:95:ed:78:cf:
         9b:9f:a0:f1:d4:f8:15:e5:c9:9a:09:2e:0b:c9:3d:96:49:fd:
         05:18:50:0e:c2:4b:be:ea:d1:78:6f:e4:ac:e4:8f:e5:4d:fa:
         d2:45:7e:b9:0f:db:9a:ea:d3:0f:7e:2b:5a:6c:b9:72:e3:f6:
         82:5e:7c:fd:ac:a7:3b:f1:a2:ff:bc:46:6f:25:3b:8f:79:1f:
         15:02:ca:14:51:7a:ab:61:54:5d:fa:0b:5b:1a:17:cf:b9:38:
         94:96:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----