This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa
File:                     323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa (raw, json)
Hash identifier:          UOmVCOIVlQ8ARBW3K+9RIuuHtflsbTthXOQTqo/Z5vc=
Subject key identifier:   23:B6:1A:1B:96:43:40:1A:C3:F0:33:A9:B3:6F:8A:D0:C8:B7:04:87
Certificate issuer:       /CN=08576EBE085579A61538173A7DB502AD54876CD9
Certificate serial:       D6FB4E2746836ADD8D85187DF2CB7CCC1483A0
Authority key identifier: 08:57:6E:BE:08:55:79:A6:15:38:17:3A:7D:B5:02:AD:54:87:6C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08576EBE085579A61538173A7DB502AD54876CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa
Signing time:             Tue 24 Jun 2025 14:08:40 +0000
ROA not before:           Tue 24 Jun 2025 14:03:40 +0000
ROA not after:            Tue 23 Jun 2026 14:08:40 +0000
asID:                     270350
IP address blocks:        2804:6aa4:8100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d6:fb:4e:27:46:83:6a:dd:8d:85:18:7d:f2:cb:7c:cc:14:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08576EBE085579A61538173A7DB502AD54876CD9
        Validity
            Not Before: Jun 24 14:03:40 2025 GMT
            Not After : Jun 23 14:08:40 2026 GMT
        Subject: CN=23B61A1B9643401AC3F033A9B36F8AD0C8B70487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:b0:1e:8c:f4:fc:e3:97:93:11:20:39:7e:
                    0b:69:d2:18:a2:d2:65:45:09:e2:85:06:14:b3:b9:
                    2d:08:4c:8a:9f:9f:3d:c9:bd:ad:bc:03:8c:f3:be:
                    93:f0:ec:f3:ba:fc:62:45:c7:3a:df:dd:2b:e4:79:
                    c0:4c:23:c5:4b:8f:cc:fa:79:fa:a8:28:57:ba:9e:
                    81:f5:ad:b4:26:a1:36:b5:39:3c:1f:0b:68:8c:84:
                    39:ad:3a:f7:29:d5:d2:c8:d0:5d:9c:d5:6d:b0:ad:
                    5c:53:3c:81:34:5a:d8:a6:ad:c5:63:a8:a7:69:48:
                    55:88:b0:92:bb:11:6b:27:de:65:64:2d:95:06:f8:
                    e4:b4:1c:75:e1:de:12:5f:31:7f:f3:44:35:91:bd:
                    0e:cb:31:42:91:84:3b:2e:d1:51:37:96:92:d3:b4:
                    0e:56:48:c1:ad:b8:cd:84:ac:0d:70:bb:d5:b2:9b:
                    03:bb:1c:8a:31:b9:cf:42:e9:d4:d3:6d:6f:4e:8c:
                    4b:f8:c6:d1:7a:c4:bf:bf:dd:b3:47:f5:7b:08:d7:
                    f0:fd:00:a7:75:e1:39:0d:1e:7b:c4:74:d7:93:c1:
                    67:b9:e6:4c:80:f6:12:91:77:4a:ec:ab:86:aa:b0:
                    a7:9f:6f:5d:4f:3d:68:25:a3:1b:43:ac:2c:17:19:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B6:1A:1B:96:43:40:1A:C3:F0:33:A9:B3:6F:8A:D0:C8:B7:04:87
            X509v3 Authority Key Identifier:
                keyid:08:57:6E:BE:08:55:79:A6:15:38:17:3A:7D:B5:02:AD:54:87:6C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/08576EBE085579A61538173A7DB502AD54876CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08576EBE085579A61538173A7DB502AD54876CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6aa4:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:7f:5f:bb:11:d3:43:78:89:1f:8c:03:ca:eb:73:c5:0e:09:
         89:e3:5d:ce:1a:fd:f2:c1:2e:a7:79:13:e7:62:4e:c7:b5:b8:
         02:cb:53:8f:cc:78:88:85:05:ca:a1:d0:6c:da:58:42:d3:2b:
         f9:5c:a8:1f:97:cf:a0:9b:ce:81:12:60:91:74:55:0a:1a:01:
         bd:d4:7d:5f:40:9d:cc:f7:c5:08:f1:85:23:de:07:61:4d:20:
         8f:54:98:ce:ea:9e:b6:61:bf:4f:a4:44:d5:ba:fd:58:5c:af:
         13:3e:84:6b:47:63:bf:d5:33:b7:f9:8e:15:d2:55:89:10:46:
         f8:91:82:a8:60:29:95:e8:b4:aa:14:1b:4d:55:de:cd:a4:03:
         23:01:6e:cb:5e:c5:7c:30:8a:a6:54:b8:1b:fb:f9:54:8c:c0:
         15:b0:83:c6:ff:a3:45:18:b8:da:18:19:55:8f:56:d9:b6:94:
         be:63:16:b7:06:18:54:5a:69:0a:8b:af:f3:ea:98:18:0d:18:
         b7:53:c6:25:5f:5e:00:b1:74:ea:4c:3b:2b:24:1d:2a:52:9e:
         bf:0b:a7:cd:41:89:ad:fd:1a:88:60:26:2d:f7:2c:fe:fb:bc:
         8a:56:22:ac:eb:f2:c6:ae:68:a3:80:19:50:06:a7:39:1b:4e:
         ba:7b:f7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----