This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a323a3a2f34372d3437203d3e20323634353434.roa
File:                     323830343a373635343a323a3a2f34372d3437203d3e20323634353434.roa (raw, json)
Hash identifier:          OatszeZNNsWY4m/krzCcN3NpDNPRP4e9iKVRYpaJnaA=
Subject key identifier:   1E:44:C2:96:BA:AC:89:37:21:B2:DE:B1:4A:7F:2C:1C:E6:71:AE:E3
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       53A83EFC2B29B56D722D290BFDD4608BACD1FA8F
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a323a3a2f34372d3437203d3e20323634353434.roa
Signing time:             Wed 16 Jul 2025 14:39:58 +0000
ROA not before:           Wed 16 Jul 2025 14:34:58 +0000
ROA not after:            Wed 15 Jul 2026 14:39:58 +0000
asID:                     264544
IP address blocks:        2804:7654:2::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a8:3e:fc:2b:29:b5:6d:72:2d:29:0b:fd:d4:60:8b:ac:d1:fa:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Jul 16 14:34:58 2025 GMT
            Not After : Jul 15 14:39:58 2026 GMT
        Subject: CN=1E44C296BAAC893721B2DEB14A7F2C1CE671AEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:65:97:f3:6a:19:9a:03:c7:89:ea:66:46:
                    fe:92:e5:44:f7:e5:20:30:89:41:0f:39:b3:64:45:
                    65:f8:5b:74:ef:e2:fe:f9:4b:af:a4:31:ba:a0:26:
                    9c:54:c3:11:be:73:a0:43:67:45:2e:03:b7:b1:b2:
                    74:9d:33:20:0a:0f:2f:36:df:5f:df:08:df:8d:e9:
                    8c:84:a0:e9:33:3b:59:5f:84:09:96:42:99:56:11:
                    31:56:5a:1a:2f:c2:7b:0b:80:3d:f2:35:b9:0b:1c:
                    ef:3f:84:ef:5b:40:71:fb:e2:4d:8e:f4:3f:d9:5a:
                    f8:07:a3:0a:7e:c1:68:e1:f6:33:a6:67:3a:4a:88:
                    b1:1d:9e:1c:d5:41:d2:a7:e9:8d:9f:c7:5a:2e:40:
                    08:92:4e:41:38:b9:cb:c2:04:6d:3d:6d:29:80:e0:
                    fc:48:d5:17:3f:79:cc:9e:5d:82:d0:c3:c0:db:93:
                    04:0d:0c:dd:43:5a:93:6c:83:14:0d:3f:f6:33:21:
                    72:1e:19:2a:98:9b:67:f4:8f:49:e3:09:c1:9d:10:
                    20:89:a8:25:06:65:f9:96:31:a9:a6:c8:d8:d8:ab:
                    76:07:5e:4e:b5:85:ea:78:44:1a:33:8d:aa:a8:72:
                    6a:13:50:de:ea:cf:1b:dc:69:cc:71:8e:b4:d7:d3:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:44:C2:96:BA:AC:89:37:21:B2:DE:B1:4A:7F:2C:1C:E6:71:AE:E3
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/323830343a373635343a323a3a2f34372d3437203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7654:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         b6:b9:5d:a5:e0:5c:07:62:eb:44:a4:f4:97:ef:ea:34:60:2e:
         f5:3c:da:a3:38:63:01:71:d3:a7:d0:3e:4e:8c:7c:b3:71:2f:
         86:a7:f1:37:8b:1d:0e:3b:01:42:c2:c1:e3:df:a3:4f:95:a3:
         a7:47:07:0c:c6:4a:2c:fe:4d:d7:5e:c0:44:02:0f:68:dc:9a:
         73:37:0d:70:b9:25:76:37:06:2c:a9:a1:d8:3e:e8:26:7c:2b:
         44:5e:41:3a:0f:e1:ad:0e:16:bc:c9:90:a4:84:8e:c3:0f:11:
         e1:7b:d2:d4:0d:9e:27:b6:03:8c:ac:1c:d3:ae:89:e6:f9:b2:
         4d:2b:f2:e8:1b:1a:e0:a6:fa:c5:40:0e:92:5a:d1:33:4a:10:
         cb:3c:a4:da:f4:44:0c:fd:da:04:d4:2f:4c:5f:fa:c3:1a:b2:
         28:be:3d:d5:af:07:1f:49:23:d9:e1:09:0c:00:b5:e6:b2:67:
         b6:a6:66:e8:fc:49:6a:0c:39:5e:39:89:6e:ab:7f:41:c0:96:
         6b:c5:b2:98:c1:79:82:49:94:25:51:5e:48:99:c4:16:15:85:
         ed:fc:16:01:ed:ae:88:5e:03:fd:22:c2:2d:e2:05:ee:73:1d:
         a7:cf:a9:45:52:5b:d2:22:54:0d:48:fc:e5:b7:77:19:b4:4f:
         be:bc:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----