This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          s/pKmolBKBjhWKF/AwsZFt43lCY4NE53lULl6BpPQj0=
Subject key identifier:   7D:F3:BB:88:7C:CF:EF:D5:51:CC:0C:BA:CD:42:B9:59:E1:C1:9B:DF
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       3BAE98D4417900FAABA120A6B993CB22598EFB35
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        2804:2674:4d00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ae:98:d4:41:79:00:fa:ab:a1:20:a6:b9:93:cb:22:59:8e:fb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=7DF3BB887CCFEFD551CC0CBACD42B959E1C19BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:cc:67:0f:ef:ac:c0:0b:7a:82:34:f1:7f:
                    3f:e1:0a:c5:95:b7:6d:32:c1:02:bc:fe:28:92:ab:
                    5e:96:6c:84:2a:4e:a4:00:ab:84:96:28:1c:a2:70:
                    a2:13:b7:d8:d1:35:d8:6c:eb:88:0e:4b:32:42:b3:
                    3e:25:78:60:63:be:b4:4f:1c:29:60:92:50:23:92:
                    2d:dc:e9:ab:83:83:32:7b:13:e5:02:a2:a0:b8:c5:
                    e6:69:81:e1:13:ca:ac:55:95:df:9e:cc:24:c8:f1:
                    75:e3:60:da:aa:0d:1e:9b:82:06:37:c9:2c:e9:e6:
                    75:8b:8c:4a:49:5f:6c:0e:20:90:c2:82:79:b4:c1:
                    0e:c1:60:5b:1d:72:11:25:ac:9e:69:54:73:e2:e1:
                    5f:5b:95:5e:dd:34:cb:31:23:54:b6:d0:f3:ae:9b:
                    cc:ab:c4:3e:c8:51:6e:82:58:ce:46:0d:93:87:47:
                    11:6c:c8:57:fb:77:07:71:22:13:16:af:7f:3f:9e:
                    34:1b:c0:d2:bd:73:18:0f:84:8d:c6:86:40:bb:c8:
                    0c:e8:12:42:a3:2e:3f:db:09:d2:1d:3c:68:86:3d:
                    31:5b:b8:89:e4:2d:4f:05:c9:f5:0f:3d:99:19:5f:
                    4f:b8:94:42:e1:aa:05:2a:4f:5f:18:c2:c5:81:c4:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F3:BB:88:7C:CF:EF:D5:51:CC:0C:BA:CD:42:B9:59:E1:C1:9B:DF
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a346430303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:af:3c:ab:8e:a6:01:fe:30:46:c4:b0:74:c0:4b:3b:6f:d9:
         72:ce:a6:28:55:b0:7b:7e:3a:ab:f4:a5:2c:52:25:32:25:9d:
         22:bc:f9:be:7f:f0:0c:53:7b:b9:13:15:8a:82:d5:f2:bc:e2:
         71:3f:30:a4:12:46:4e:27:6b:ae:4a:d5:a6:06:ea:25:24:ae:
         1b:a7:02:28:de:7f:1d:bf:99:f9:77:39:d2:cc:bc:d1:02:1c:
         8c:6e:77:ec:3c:1b:a4:73:d1:0c:2c:31:03:5c:ca:79:c5:b9:
         b0:14:75:ec:3e:eb:7c:cd:85:37:60:bd:5b:07:ee:25:76:54:
         19:23:4a:1b:ea:f0:a5:ed:04:b7:51:4c:f8:8d:6b:12:bd:39:
         e0:10:aa:30:ae:5b:e6:ab:78:ad:c8:3d:a9:c8:cf:f4:75:3b:
         e5:6e:0b:cc:8e:f3:be:47:b3:d1:7e:74:25:b7:33:e7:0b:81:
         d8:0e:c5:29:a8:00:4a:9c:85:9f:53:02:25:fa:d5:77:24:07:
         13:d2:a6:e1:f2:0f:7c:91:a8:5f:ba:a5:9c:69:6a:87:86:e8:
         9c:58:74:35:05:fc:a6:19:08:3d:b8:5e:86:2c:5f:d2:d8:54:
         57:8a:af:89:39:30:80:96:27:29:27:ed:81:52:cf:c4:f4:c0:
         60:5d:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----