This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3430203d3e20323730383034.roa
File:                     323830343a373161633a3a2f33322d3430203d3e20323730383034.roa (raw, json)
Hash identifier:          VXHB/J4fC6gROcohSEULTPUjGbFPwtGYmZfUgMZKNpw=
Subject key identifier:   4A:64:35:13:8C:9C:F3:15:69:EC:B5:2E:50:F0:F7:CB:91:25:63:4B
Certificate issuer:       /CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
Certificate serial:       0E736111D94789DDD20900FA6124B4CBB5E83DD7
Authority key identifier: 4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3430203d3e20323730383034.roa
Signing time:             Tue 26 Aug 2025 14:06:05 +0000
ROA not before:           Tue 26 Aug 2025 14:01:05 +0000
ROA not after:            Tue 25 Aug 2026 14:06:05 +0000
asID:                     270804
IP address blocks:        2804:71ac::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:73:61:11:d9:47:89:dd:d2:09:00:fa:61:24:b4:cb:b5:e8:3d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
        Validity
            Not Before: Aug 26 14:01:05 2025 GMT
            Not After : Aug 25 14:06:05 2026 GMT
        Subject: CN=4A6435138C9CF31569ECB52E50F0F7CB9125634B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:61:02:03:67:5e:33:8a:ee:81:ad:6b:bb:
                    99:d7:e5:ea:2a:23:17:31:b5:87:cd:17:0f:f6:4f:
                    89:51:28:bd:1a:4b:7c:be:0b:bf:f5:85:13:7b:74:
                    91:76:a1:c2:92:bb:e4:e9:d3:eb:be:fc:9a:5c:f3:
                    10:e9:a1:fe:ab:f1:81:6a:34:82:34:47:3a:0d:b7:
                    c2:50:4a:8e:bd:8b:51:d0:bb:6d:81:16:40:32:33:
                    a4:33:99:5f:49:f6:17:40:ed:bd:2f:24:ae:54:96:
                    2b:f5:d0:7c:65:36:90:f8:bb:95:d9:3f:a9:da:7f:
                    ee:ee:99:67:9f:8f:82:84:96:ab:3e:49:fc:fe:a1:
                    7f:92:8f:4a:e6:7a:2a:3b:84:62:2d:fd:49:31:b9:
                    ce:64:a8:50:b6:1c:72:00:11:f4:8b:32:33:34:c0:
                    9b:84:af:fd:fa:d8:c2:8c:b4:a4:42:b4:6e:5f:db:
                    d3:14:ce:9e:e0:a3:92:26:20:b0:ca:ac:73:e8:65:
                    67:c4:63:52:b2:7b:7f:09:d8:a0:c5:79:82:84:b5:
                    57:1d:e6:d0:6b:50:8b:e1:dc:70:da:f9:bd:49:23:
                    64:7d:8c:48:bc:d4:0d:f3:dd:03:4f:18:61:54:16:
                    99:26:26:fd:e7:c8:a2:5c:8f:5f:9d:d5:d9:9b:b4:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:64:35:13:8C:9C:F3:15:69:EC:B5:2E:50:F0:F7:CB:91:25:63:4B
            X509v3 Authority Key Identifier:
                keyid:4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3430203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:99:0b:77:9e:6a:44:95:47:0d:9d:bd:43:65:01:ac:22:23:
         4b:a5:1c:f6:d0:a6:38:71:85:20:c2:9d:53:a2:a1:77:b2:7a:
         a1:24:b1:ae:8f:9b:c8:5f:4e:11:98:71:a5:7c:08:da:3a:ee:
         2c:2f:22:f0:56:aa:45:ca:3b:26:1f:2a:7d:0d:26:49:3c:41:
         19:ed:1a:2f:25:56:d1:ad:0b:65:82:5b:f5:b0:53:4e:1d:97:
         65:4a:6f:db:91:f2:f0:f3:09:6e:99:c1:eb:04:2d:5d:01:5e:
         71:e4:43:6c:e4:3d:da:e1:d3:a6:6f:6e:2d:78:ea:ee:b9:ab:
         f8:b7:a3:66:f2:6f:50:68:38:88:65:f0:cb:bd:3c:43:87:09:
         0a:59:e9:3c:bb:f7:9c:54:01:69:34:3c:ef:49:b2:64:7b:ca:
         38:c9:da:3c:6c:47:d6:41:0d:c2:c7:57:5d:ec:2a:92:5e:cc:
         fd:b3:9a:cc:03:67:17:af:ed:4a:ff:fd:89:0b:4f:8d:7f:5b:
         dd:9b:0e:a1:1e:90:38:45:08:91:4a:1a:46:47:8a:29:60:3a:
         ef:65:3a:67:d3:f6:c6:bb:fe:8c:70:d8:42:1a:d5:a0:2d:8b:
         2f:24:c1:8a:bf:d0:9d:bd:79:2f:5c:31:0c:e4:a4:35:bb:2a:
         da:d0:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----