This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33322d313238203d3e20323633383738.roa
File:                     323830343a323732303a3a2f33322d313238203d3e20323633383738.roa (raw, json)
Hash identifier:          Qn/4YM2oacFJYzNiNXULrs4VWtW1Mr5ADuTjv3n/1po=
Subject key identifier:   2A:AF:EE:06:27:36:CA:15:2D:BB:08:93:8D:69:A7:40:27:C0:54:32
Certificate issuer:       /CN=C96F475755CA37BC1D53AFDCE8B451F444F7129F
Certificate serial:       378E32A4B72DF1572BD760984538F3869A1D45A3
Authority key identifier: C9:6F:47:57:55:CA:37:BC:1D:53:AF:DC:E8:B4:51:F4:44:F7:12:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F475755CA37BC1D53AFDCE8B451F444F7129F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33322d313238203d3e20323633383738.roa
Signing time:             Fri 20 Jun 2025 17:04:52 +0000
ROA not before:           Fri 20 Jun 2025 16:59:52 +0000
ROA not after:            Fri 19 Jun 2026 17:04:52 +0000
asID:                     263878
IP address blocks:        2804:2720::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:32:a4:b7:2d:f1:57:2b:d7:60:98:45:38:f3:86:9a:1d:45:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C96F475755CA37BC1D53AFDCE8B451F444F7129F
        Validity
            Not Before: Jun 20 16:59:52 2025 GMT
            Not After : Jun 19 17:04:52 2026 GMT
        Subject: CN=2AAFEE062736CA152DBB08938D69A74027C05432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:ed:ec:8b:b9:8e:31:e3:c0:49:f6:67:4c:
                    cf:3a:74:14:60:cf:97:55:96:7c:f7:ff:78:9c:f1:
                    da:39:36:2c:70:ea:ef:96:2f:a4:7e:7b:45:91:6e:
                    ea:ab:9d:e5:33:f6:44:27:93:10:93:fa:96:ec:62:
                    42:38:60:18:d8:35:40:cf:d0:8e:22:37:1a:21:a5:
                    7c:23:78:88:ca:57:18:6d:31:78:20:98:3a:d8:94:
                    27:4a:dd:cc:9e:88:72:63:55:0f:c5:ab:41:78:bf:
                    3f:9d:9e:ed:d2:ac:a8:52:ad:e1:36:1b:7d:f7:eb:
                    b7:5e:ef:a0:00:12:0b:f9:19:f5:41:36:35:d8:e8:
                    55:1b:8a:41:79:0e:0a:8b:41:2f:24:c0:de:03:30:
                    e0:81:6f:25:a7:6c:ec:6d:4c:42:59:bd:e7:14:d6:
                    04:39:00:27:7d:d8:e3:ba:da:59:90:e5:32:69:ff:
                    6e:06:4d:61:92:78:05:1e:f1:5b:b4:75:78:d2:d0:
                    04:e6:cd:a8:ba:bb:e1:6c:f6:3c:be:00:a7:69:b7:
                    df:92:b1:6e:ea:29:73:25:99:df:e2:66:f2:c4:38:
                    5e:d7:19:ef:ee:e8:0e:5d:b7:83:22:b8:0b:15:8a:
                    ef:0e:87:24:4c:3d:3a:7d:ed:e4:99:8f:7f:af:df:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AF:EE:06:27:36:CA:15:2D:BB:08:93:8D:69:A7:40:27:C0:54:32
            X509v3 Authority Key Identifier:
                keyid:C9:6F:47:57:55:CA:37:BC:1D:53:AF:DC:E8:B4:51:F4:44:F7:12:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F475755CA37BC1D53AFDCE8B451F444F7129F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33322d313238203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2720::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:42:16:93:a1:36:09:8b:5d:92:8b:0b:a2:7a:7d:80:3c:94:
         97:0b:c2:ef:a8:61:00:d9:0f:71:de:ee:88:79:dc:58:f5:e1:
         31:5e:78:92:b1:41:a8:1c:41:4f:9d:b9:bc:14:9c:b4:cc:0d:
         52:b8:e8:9f:c5:98:ab:bd:5a:17:dc:5e:e8:86:69:c4:7a:a3:
         b5:7f:57:0e:28:5a:57:97:d0:39:af:ab:01:b3:0c:36:9d:ae:
         5c:a5:51:75:cb:07:04:8a:fd:6c:c0:e5:e4:f8:b8:06:f3:98:
         31:c4:75:0e:1e:3a:20:e1:ad:ca:1a:04:17:66:4a:ff:35:33:
         3c:a8:0f:ad:e5:ee:68:a6:d5:3f:78:eb:81:f8:5d:56:59:ac:
         f9:50:69:29:4d:e1:8c:16:88:43:a2:2a:6c:eb:46:53:ae:2f:
         04:66:d9:24:59:29:be:bc:0c:39:20:84:42:f5:d5:8f:16:fc:
         68:0f:3d:b8:2a:e5:fc:41:94:f5:28:c0:59:28:55:37:a1:0f:
         7b:57:95:6f:ca:2b:65:a7:e8:be:6e:eb:97:7b:9a:c2:48:18:
         48:18:9d:5f:55:4b:53:68:e4:f8:23:96:e4:5d:1b:8e:fd:05:
         1b:90:1e:17:43:ca:bb:ac:22:b5:25:cc:c9:6e:a6:eb:5b:c9:
         33:f7:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----