This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/323830343a373330343a3a2f33322d313238203d3e20323730383930.roa
File:                     323830343a373330343a3a2f33322d313238203d3e20323730383930.roa (raw, json)
Hash identifier:          I9RRax6lPJuMn+bhorXSXRGWQUoVZQ8Xzq88B1ef/9o=
Subject key identifier:   64:6E:44:43:E0:53:40:29:EC:2C:80:FF:06:45:9F:CC:17:FF:CB:48
Certificate issuer:       /CN=CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71
Certificate serial:       3FB1A241683CB2A5C5962AB6EE69E6767313E530
Authority key identifier: CF:EA:62:C4:56:B2:BE:E0:B7:B3:3E:22:07:5D:F9:5B:0C:68:EE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/323830343a373330343a3a2f33322d313238203d3e20323730383930.roa
Signing time:             Fri 06 Jun 2025 00:05:58 +0000
ROA not before:           Fri 06 Jun 2025 00:00:58 +0000
ROA not after:            Fri 05 Jun 2026 00:05:58 +0000
asID:                     270890
IP address blocks:        2804:7304::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b1:a2:41:68:3c:b2:a5:c5:96:2a:b6:ee:69:e6:76:73:13:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71
        Validity
            Not Before: Jun  6 00:00:58 2025 GMT
            Not After : Jun  5 00:05:58 2026 GMT
        Subject: CN=646E4443E0534029EC2C80FF06459FCC17FFCB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:b3:43:26:3d:ea:c7:ef:a9:ba:5b:03:31:
                    ad:59:18:4d:66:d2:ef:3c:f4:fe:e3:03:06:f4:b9:
                    74:60:03:2a:7b:d9:c6:1b:e4:a8:64:1e:50:91:b2:
                    94:cc:a4:dd:01:2c:92:8f:f3:db:4e:90:25:40:b6:
                    7d:2f:3c:1a:b1:3c:15:f0:67:5c:e8:e6:3d:7e:49:
                    21:35:8b:3b:d0:e5:9a:7c:bb:9f:af:c6:3b:14:8d:
                    e8:32:f5:03:b6:19:dd:93:38:d8:7a:63:9a:11:67:
                    17:82:9b:9f:e7:72:3e:df:06:7c:91:8a:62:a1:13:
                    2b:93:a0:c2:d1:6c:12:82:32:5a:ec:06:1f:5a:a7:
                    15:05:4d:32:19:10:cf:16:cf:b3:4b:8c:93:10:fb:
                    74:25:4f:11:cb:d7:d7:24:f9:28:0c:7c:89:a6:fa:
                    98:78:b1:c2:26:85:d2:0f:92:39:1b:95:d5:16:e1:
                    d1:15:ac:fb:68:33:5a:ab:5c:8d:0c:e0:7b:5a:a5:
                    c1:ff:19:ef:44:fe:eb:f8:0e:6f:0f:cc:00:31:ac:
                    f7:24:64:55:10:7b:fa:71:8c:f5:03:10:63:12:24:
                    f8:f9:a9:f6:be:ef:83:f5:a9:e6:70:1d:44:84:88:
                    76:77:57:8a:3c:9f:2f:61:52:2d:64:86:2c:88:77:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6E:44:43:E0:53:40:29:EC:2C:80:FF:06:45:9F:CC:17:FF:CB:48
            X509v3 Authority Key Identifier:
                keyid:CF:EA:62:C4:56:B2:BE:E0:B7:B3:3E:22:07:5D:F9:5B:0C:68:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/323830343a373330343a3a2f33322d313238203d3e20323730383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7304::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:f6:96:54:02:f7:4b:a0:60:84:e0:1f:5a:7a:46:23:b5:
         0b:b4:16:a5:c7:ce:95:ce:3c:3a:fa:6a:46:aa:f3:dc:c5:23:
         54:59:f4:ca:c0:25:71:30:9d:84:c2:75:9f:b5:e1:76:ff:0f:
         46:7b:13:bc:57:9a:ab:d5:3a:2e:91:92:66:50:09:ed:31:77:
         7a:5e:07:e7:fd:c1:79:08:7f:0f:88:6b:81:e3:24:0b:fe:02:
         4e:16:ee:d7:d9:a3:da:d3:b7:ff:00:46:7e:bc:66:03:63:60:
         0b:ee:0f:66:03:44:16:43:e3:74:43:d5:03:13:d5:ae:36:bd:
         34:61:fb:8c:03:c3:01:98:b2:bf:e2:ae:fb:02:e7:a4:3e:c4:
         7c:2d:56:b2:6b:55:43:16:9d:c8:85:7e:93:05:61:39:a5:75:
         7b:d1:c5:59:74:5e:3e:1b:ae:a4:6c:0a:a3:d0:25:c9:99:20:
         f6:b3:3e:f7:93:12:d9:48:56:5c:a3:33:33:07:2a:f4:07:f4:
         b0:36:c8:00:61:a5:c0:c4:13:fb:44:18:29:05:ff:55:c4:3f:
         86:17:18:30:d5:24:87:e0:b1:a0:b6:e2:70:25:6c:ec:de:86:
         5a:2c:7e:fe:c8:1f:14:50:ea:e3:3b:79:be:2b:36:44:4a:35:
         18:01:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----