This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa
File:                     323830343a356162383a3a2f33322d3334203d3e20323638373931.roa (raw, json)
Hash identifier:          IF17TOnucz3eEhEG7pqk96MKlsI9afVTvw2Ilw7esBE=
Subject key identifier:   69:0C:82:5A:53:27:18:5B:0A:DD:6E:34:A4:45:8D:A8:02:51:30:4B
Certificate issuer:       /CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2
Certificate serial:       239216159B9B5E1EB6A18685DD43845A48EF876C
Authority key identifier: BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa
Signing time:             Wed 23 Jul 2025 05:17:50 +0000
ROA not before:           Wed 23 Jul 2025 05:12:50 +0000
ROA not after:            Wed 22 Jul 2026 05:17:50 +0000
asID:                     268791
IP address blocks:        2804:5ab8::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:92:16:15:9b:9b:5e:1e:b6:a1:86:85:dd:43:84:5a:48:ef:87:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2
        Validity
            Not Before: Jul 23 05:12:50 2025 GMT
            Not After : Jul 22 05:17:50 2026 GMT
        Subject: CN=690C825A5327185B0ADD6E34A4458DA80251304B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:c9:5b:76:67:85:c6:46:f8:3d:42:c9:7a:
                    43:2a:7a:5e:1e:7e:64:df:98:6b:3c:d9:c7:b0:c2:
                    ef:4f:43:7e:2d:d1:b8:a3:10:63:fd:15:f3:b8:d2:
                    a9:45:25:32:c1:eb:51:db:b4:32:1f:17:62:76:37:
                    67:02:cf:70:1d:ac:e3:73:f5:73:66:3e:fb:49:94:
                    ba:3c:ac:b9:0a:b7:d9:06:e1:bb:b1:a8:40:0b:d8:
                    bb:b5:1a:7b:0e:39:c1:57:2e:18:7a:69:87:79:de:
                    02:a7:65:6f:96:8a:64:73:e0:0d:4a:1d:7a:40:9c:
                    13:d9:9e:c0:c9:64:82:bd:d0:8b:aa:c7:03:c7:d2:
                    ac:5c:db:8d:75:a3:db:49:9e:45:bb:90:4f:e0:f0:
                    0f:46:8b:09:78:aa:aa:47:e8:fe:8d:d0:17:b1:9e:
                    3c:33:59:e0:04:e2:d3:f9:51:36:2f:b3:b3:e2:55:
                    a2:7f:2d:c6:7e:78:1d:e1:6b:44:bc:4e:fe:be:42:
                    76:a7:79:44:d7:ba:92:ce:9f:39:3c:1d:86:4c:c3:
                    10:f0:a9:22:69:a8:57:54:f6:41:33:34:e5:3d:a5:
                    33:ac:cc:ea:63:cd:8d:33:97:79:9e:b2:d3:b5:8c:
                    13:6c:86:61:b7:15:8c:f4:97:69:b6:8b:86:7d:63:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:82:5A:53:27:18:5B:0A:DD:6E:34:A4:45:8D:A8:02:51:30:4B
            X509v3 Authority Key Identifier:
                keyid:BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:e7:0f:05:27:5d:29:a3:3c:b7:35:84:82:4a:9c:fd:81:
         d0:46:f2:b4:0e:ea:5a:0b:f2:af:01:43:c4:3b:e8:11:cc:10:
         a0:35:53:12:cc:36:19:ac:31:1f:d7:49:ba:52:78:f5:a0:d3:
         54:c3:1f:38:81:e8:c4:39:2e:21:62:3f:65:9f:19:ef:cf:c6:
         3a:7a:4c:49:76:46:ab:78:83:bd:19:59:4f:e0:aa:85:6e:2f:
         82:53:72:87:ec:69:35:0b:f9:26:8f:dd:69:9f:01:09:03:68:
         e2:7a:17:f1:93:95:22:f8:a6:f1:56:cc:2b:a8:4d:c3:59:33:
         3a:d1:11:4c:f0:39:a3:72:be:82:d1:11:45:bd:0d:35:27:e3:
         7c:98:50:7a:2e:d5:48:7b:7b:f1:85:70:65:ca:12:82:57:35:
         c0:08:d8:18:e8:b2:b2:fb:8e:a6:75:2a:40:cb:07:e9:6c:2d:
         8a:96:94:d4:a7:84:cd:ee:7c:0d:b3:fa:ad:5d:16:a8:07:22:
         65:9a:b7:57:54:8e:de:4a:8e:06:36:6a:1e:1b:46:ab:58:4e:
         74:fb:99:b5:4a:5e:8d:a4:a0:8c:c1:0e:8e:34:65:26:6b:cd:
         5c:8e:e8:5d:88:c3:64:8e:ec:f8:dc:c9:14:3c:b4:e9:94:e8:
         5e:b3:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----