This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          aYtXpe5VDz7rfM4MzuuA8A6Lak6yTHEn3mabXJhObTI=
Subject key identifier:   AE:99:BD:DE:EB:DA:6A:FB:CF:70:66:D2:0A:9C:4F:09:68:3A:64:F1
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       3CB3B03B799CF7C5785377941B863E449E591417
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:33 +0000
ROA not before:           Tue 03 Jun 2025 16:50:33 +0000
ROA not after:            Tue 02 Jun 2026 16:55:33 +0000
asID:                     264344
IP address blocks:        2804:2674:4800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b3:b0:3b:79:9c:f7:c5:78:53:77:94:1b:86:3e:44:9e:59:14:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:33 2025 GMT
            Not After : Jun  2 16:55:33 2026 GMT
        Subject: CN=AE99BDDEEBDA6AFBCF7066D20A9C4F09683A64F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:97:a7:2d:17:47:6b:67:c0:cf:3f:08:35:
                    2e:e7:d6:e5:de:2b:67:b5:19:d8:30:44:29:a4:ca:
                    f2:99:db:71:b3:6a:5e:27:68:3c:95:f8:a0:ab:06:
                    47:58:0b:b5:a8:c3:24:33:a3:1a:13:40:8e:66:a1:
                    9a:08:4b:02:8b:87:79:9c:c1:a0:d5:a8:54:ae:f4:
                    3a:b2:75:59:18:2a:1c:1a:35:dc:67:43:e3:ee:f3:
                    5c:65:93:7b:c7:17:02:45:25:d7:dd:2d:a3:a6:3d:
                    dd:6a:06:46:97:2f:32:12:5a:40:20:6c:82:a5:41:
                    1f:5a:51:fa:f7:9b:c7:d3:e6:06:27:ef:67:8e:c7:
                    37:4e:a3:79:0f:95:8c:e1:33:a2:7a:06:0d:b2:31:
                    a0:4c:cf:83:ad:2c:b5:18:44:d7:71:83:73:91:58:
                    70:65:18:be:c6:00:f6:c0:38:9f:37:b1:ed:6c:2c:
                    e4:f8:15:c4:97:65:70:1a:b5:33:b1:e3:94:b2:94:
                    8e:f8:d0:9b:af:20:da:64:84:47:9f:2d:3c:e6:06:
                    2a:ef:0c:7b:2c:11:f6:c9:d9:37:08:e2:3e:1e:f2:
                    bc:f9:9e:eb:71:6c:09:96:14:f5:bd:2d:76:c3:fe:
                    fd:b5:ce:59:d5:34:37:17:be:31:89:df:21:11:05:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:BD:DE:EB:DA:6A:FB:CF:70:66:D2:0A:9C:4F:09:68:3A:64:F1
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343830303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:39:00:23:50:ca:59:51:0f:04:18:88:64:6d:15:05:4d:c6:
         2a:07:bf:fa:74:30:9f:5c:46:27:1d:bf:f9:c9:f8:52:84:c0:
         d4:5c:68:67:2d:90:94:1d:69:dd:59:11:48:3a:e8:9d:14:10:
         5a:a2:e6:11:6f:88:21:40:63:91:48:77:66:5c:f6:35:1b:7d:
         49:02:6f:45:19:02:59:eb:6b:8e:a8:e2:21:5c:f4:c2:c2:09:
         5e:7c:d9:ab:0f:be:6b:96:b2:38:41:32:e5:da:58:91:af:66:
         3d:0e:b2:ea:21:1f:1b:07:98:63:ec:95:e2:11:f2:99:62:8d:
         5f:49:c7:58:63:44:a0:44:fa:f7:67:a8:99:a1:96:d5:7d:ac:
         b3:3f:89:3a:49:cd:56:7f:8d:86:44:3f:4b:f0:05:2c:a1:3d:
         c8:9d:88:a8:ea:9e:11:85:99:8a:b5:c2:51:d2:83:0a:47:88:
         2b:26:16:33:76:04:71:a1:64:63:b2:64:6e:a5:06:d5:56:1e:
         35:2a:31:c8:98:30:c7:9a:a2:09:40:0a:14:45:87:d1:07:bf:
         98:94:b5:47:75:68:73:90:44:0a:4b:0f:0c:e7:d5:80:b0:55:
         10:c4:2a:e2:95:61:5f:63:b0:be:67:39:59:70:07:8f:eb:37:
         b4:ca:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----