This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          UyIHGaOmGX3ka4gEpO9UKuBEjUc3mrQ0zRycVshqQOU=
Subject key identifier:   BE:8F:0F:CD:E2:1B:71:55:00:0B:5A:68:05:B1:DD:BB:39:3B:FF:21
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       078774C7D311305C14FAFF3B1214D2B99D6168B3
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        2804:2674:d004::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:87:74:c7:d3:11:30:5c:14:fa:ff:3b:12:14:d2:b9:9d:61:68:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=BE8F0FCDE21B7155000B5A6805B1DDBB393BFF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:19:15:d1:6e:ee:6d:71:44:e4:b2:b1:b9:
                    61:af:37:7b:a6:e0:f6:21:a4:57:13:ca:7d:7c:73:
                    6b:0d:1e:69:f3:0e:8d:35:43:e3:54:3f:d9:16:6b:
                    8e:5d:e1:65:2c:33:66:a0:f4:b2:e9:e3:83:44:6a:
                    e6:57:fd:fa:4d:ca:6f:ce:35:81:13:d9:bf:48:52:
                    b9:72:3b:b2:7f:f4:d3:a7:ed:c2:97:4f:00:ec:c1:
                    f0:6e:cd:69:42:59:12:af:9a:dc:fd:d2:20:f2:4b:
                    5a:b2:48:27:32:09:17:fa:10:cf:e5:ed:b6:0f:65:
                    f7:09:88:a1:49:dc:01:7b:b7:fc:35:c2:0e:9e:4e:
                    0e:29:88:eb:77:1b:78:76:4f:76:65:a4:3c:20:5e:
                    e2:0f:90:8d:f9:1f:b1:6a:37:04:6b:12:ca:c0:75:
                    2b:d9:2b:52:8e:76:8a:cd:15:2f:25:ac:ed:c7:0c:
                    51:eb:06:9c:2e:c5:97:96:80:e0:8b:dd:d9:3a:8d:
                    ba:ce:ce:ad:2a:b3:a0:43:c5:03:43:a2:14:28:eb:
                    ac:29:9d:71:56:e1:1b:ff:60:d2:cb:06:61:c3:7c:
                    dd:46:8b:27:d9:50:c5:dc:9d:61:0b:2d:ee:52:d7:
                    63:9c:ff:3d:7f:e3:1d:45:5d:d7:b5:75:36:79:fb:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8F:0F:CD:E2:1B:71:55:00:0B:5A:68:05:B1:DD:BB:39:3B:FF:21
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:d004::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:47:85:a6:b7:fb:42:21:40:29:56:b9:e4:60:4b:6e:7e:68:
         cc:12:db:12:55:dc:14:a5:60:11:ee:d6:1f:4f:da:d4:f5:c6:
         cc:53:39:cb:75:13:20:1b:98:08:70:ae:3a:db:ae:34:ab:4f:
         f2:c0:12:a5:d2:b5:88:14:08:a7:af:5c:ea:b3:b5:a7:38:f3:
         53:99:02:44:8c:51:fc:4a:56:89:67:68:0d:a7:7a:de:94:f9:
         d3:6b:a7:8b:99:01:c9:45:0c:89:99:c5:5c:28:54:48:b2:17:
         04:4a:84:b0:22:b3:59:11:40:31:68:a8:54:ba:84:5e:65:81:
         38:90:e2:6d:9b:fe:77:e5:ad:39:de:a5:e6:63:98:b8:a3:00:
         1a:1f:24:f4:a3:93:2c:71:26:b5:56:00:a9:7c:c8:6e:6e:56:
         32:11:e5:1c:24:22:17:2b:75:b1:01:82:59:4d:94:dc:95:56:
         80:62:64:d0:a0:c5:87:f2:21:e8:81:fa:86:11:de:9f:37:7a:
         bc:9f:67:7b:74:f1:83:e4:b7:2b:2f:80:78:61:81:6c:35:1e:
         88:d2:c8:eb:da:33:b2:88:cc:9e:ee:88:0d:cb:f8:79:3a:3b:
         9d:a5:c5:cf:20:17:18:01:ee:e6:06:35:35:65:cc:08:24:86:
         08:c2:29:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----