This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353530303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353530303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          R8JY7qsUThIDx21PdkST9XR87wL4PHx22JO2LlOMj5w=
Subject key identifier:   C9:FC:74:DD:C8:7B:FD:DF:6E:A2:31:B4:0F:C2:E3:F2:2B:4A:F9:9F
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       5AD7351289FCE97B7900011B53D5068BBEA9B357
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353530303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 27 Aug 2025 11:47:13 +0000
ROA not before:           Wed 27 Aug 2025 11:42:13 +0000
ROA not after:            Wed 26 Aug 2026 11:47:13 +0000
asID:                     264344
IP address blocks:        2804:2674:5500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d7:35:12:89:fc:e9:7b:79:00:01:1b:53:d5:06:8b:be:a9:b3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Aug 27 11:42:13 2025 GMT
            Not After : Aug 26 11:47:13 2026 GMT
        Subject: CN=C9FC74DDC87BFDDF6EA231B40FC2E3F22B4AF99F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:c6:5d:99:8c:b3:74:7f:fa:89:b6:d4:54:
                    65:e9:ba:73:d4:a1:5c:f2:48:a9:07:bf:01:12:78:
                    e9:b6:f1:66:68:cc:8f:a0:66:57:fd:bb:16:f3:23:
                    f4:00:2d:f2:77:59:cf:85:d5:41:ab:1c:7a:66:e5:
                    ed:03:3e:9d:b2:59:53:03:da:2c:aa:fa:10:7e:03:
                    19:65:9b:3e:f9:79:8f:39:0e:05:52:b3:ec:ab:08:
                    ec:09:fe:d1:a0:a3:34:9f:d2:be:41:fc:28:4c:10:
                    55:68:fa:8e:6d:c9:e2:71:e9:1b:06:f9:60:b2:ff:
                    ec:46:95:8f:8d:11:e5:7c:09:a7:4c:db:31:9c:0b:
                    b0:48:1d:86:cc:c3:5b:23:1a:f0:3c:63:47:32:b8:
                    e4:b9:89:3c:09:91:0c:7b:dc:65:71:ff:54:fd:c2:
                    f8:26:59:d6:c5:46:5a:ff:0f:c9:dd:86:a3:fb:66:
                    0b:b4:ca:f1:fa:fc:37:9a:84:43:93:af:e7:61:77:
                    f4:de:1f:e1:bb:d8:57:a1:e3:fe:9c:1f:83:54:02:
                    44:b9:63:5c:c9:bb:b5:70:0d:9d:e2:54:5e:6f:33:
                    ff:85:4c:a9:74:fe:c7:51:f0:52:30:e7:20:61:31:
                    c0:19:99:69:05:b5:22:21:1d:dc:35:44:f4:29:17:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FC:74:DD:C8:7B:FD:DF:6E:A2:31:B4:0F:C2:E3:F2:2B:4A:F9:9F
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353530303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5500::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:e3:8a:3a:0b:ef:07:0e:2a:af:95:a5:f7:41:88:12:d2:
         4e:c8:66:0b:9a:3f:bf:ec:26:e0:a9:0b:35:42:4a:b2:a1:42:
         9f:73:f7:d6:eb:26:d8:fa:f8:72:cc:8b:b5:8e:b3:b9:a3:0d:
         36:c4:a4:57:51:84:31:a7:d3:52:94:2d:49:07:0b:36:dd:30:
         61:e3:bf:81:0e:99:94:9e:ea:33:2d:66:a7:7e:fa:ce:53:2e:
         d1:40:2f:73:2f:b2:b1:0d:e9:72:4c:ba:4f:81:49:ed:35:0f:
         12:16:fd:30:c3:14:b4:74:eb:18:52:d7:9a:c0:e9:b0:20:fc:
         c3:1b:e0:43:07:ef:17:83:fc:8b:7a:de:8c:df:2a:a3:97:3d:
         48:6e:1a:7c:d9:f0:b1:f2:5d:2e:b8:df:3f:fa:e2:3b:72:c6:
         76:7b:17:33:63:6a:c9:fa:ec:fa:60:a9:25:ab:ee:3c:f1:22:
         62:9e:95:f7:3b:46:f9:b4:05:6d:0c:76:8e:e7:b4:27:dc:8e:
         81:9b:55:3f:0f:ad:1b:0b:1a:c0:5b:35:2a:85:2f:52:80:7c:
         27:53:d8:bc:0c:aa:8b:bb:4e:8d:c7:10:8d:61:82:f9:de:74:
         a1:7d:76:5b:c6:32:30:81:58:8f:de:49:35:00:2a:d4:1e:b1:
         a4:d3:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----