This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          MUq4pubd/JGGR3eULLIVgSU7EtZPB98KeKgWcWcsePU=
Subject key identifier:   AA:0A:49:A7:0C:0A:9B:D8:5E:25:58:E6:F6:D7:6C:6C:44:41:B6:BD
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       676CA4A2F66C910415354FE161A59F0ACB1842CD
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        2804:2674:4200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6c:a4:a2:f6:6c:91:04:15:35:4f:e1:61:a5:9f:0a:cb:18:42:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=AA0A49A70C0A9BD85E2558E6F6D76C6C4441B6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:59:a5:f5:99:d2:94:44:2e:be:34:b3:1f:
                    9e:1b:08:dd:e8:ce:97:fd:80:c4:f5:86:8f:f4:8b:
                    24:03:2d:81:fc:09:5f:68:10:51:9c:aa:49:67:c4:
                    3e:e5:73:80:0d:15:ac:a9:6c:e8:ac:95:34:1f:8a:
                    b0:d7:18:f7:bb:16:b6:35:e6:36:98:8e:06:ec:44:
                    15:9b:35:da:01:22:fc:ee:52:50:db:8a:72:91:71:
                    31:71:80:1d:92:2c:03:9a:75:de:bd:ee:bd:79:de:
                    4a:66:67:a4:72:dd:08:fc:07:4c:dc:e9:16:b1:06:
                    02:96:ee:66:14:bd:85:7d:80:c9:ec:5c:e8:0d:ae:
                    60:e3:90:20:6b:9e:11:e1:7a:d0:31:9d:1c:fb:22:
                    45:67:77:13:21:e8:33:a2:03:57:6a:b4:2a:04:28:
                    bd:56:15:74:3f:54:55:63:8d:9b:91:f6:62:e9:88:
                    77:54:66:5e:41:b6:fb:18:ba:d9:f4:b0:9e:88:7a:
                    8d:aa:f0:64:26:3d:6a:bd:ec:ff:66:ff:2f:d5:bb:
                    d0:35:66:28:17:9e:07:68:80:55:86:3c:6f:12:ce:
                    ba:91:63:78:c7:a8:2a:e0:ce:a1:c8:ad:5e:ae:d0:
                    24:bc:e8:3a:3e:27:f5:aa:e4:d4:95:d0:6e:f3:c8:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:49:A7:0C:0A:9B:D8:5E:25:58:E6:F6:D7:6C:6C:44:41:B6:BD
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4200::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:56:6e:07:87:fe:c4:47:1e:dd:47:9f:de:77:47:2d:57:95:
         1c:64:a2:89:7e:dd:e3:e9:9f:31:a7:28:3b:b3:ca:48:86:46:
         3c:b8:81:d1:d8:94:e7:f2:83:cb:b2:da:c8:12:30:15:5e:75:
         49:1f:b9:99:3c:b6:d3:fc:c9:d8:6b:79:02:19:41:b5:f6:0e:
         ec:e3:41:a4:53:32:3e:97:d0:50:96:8a:d1:33:e6:07:fb:fb:
         ce:0b:94:9e:d5:da:14:de:10:ff:20:99:13:05:a2:b6:80:7b:
         bc:7c:25:f8:50:f5:d3:33:15:4d:2f:2b:94:ce:22:b3:f0:3d:
         a3:37:b8:20:f2:cf:cf:28:3c:86:ed:b3:d9:84:a5:8c:94:b7:
         07:05:60:99:93:40:aa:b2:e2:e0:fc:7d:27:03:c8:e3:aa:92:
         ca:e7:ef:97:60:72:e9:5b:65:2a:94:d6:8d:de:78:72:32:3c:
         5a:92:35:cf:ae:bc:62:e0:99:50:f5:ba:31:10:ae:5d:82:93:
         33:13:2f:1f:17:3d:c4:76:df:45:fe:bc:53:5b:ee:ca:93:cd:
         a8:4a:a0:a9:85:59:47:17:b0:cc:95:5c:35:15:62:ed:68:c9:
         2f:1d:fb:b4:e3:99:e7:d0:03:67:00:74:fd:56:9b:34:de:f9:
         c9:5b:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----