This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33332d3333203d3e20323636313937.roa
File:                     323830343a336333383a3a2f33332d3333203d3e20323636313937.roa (raw, json)
Hash identifier:          ZH8HrjsAvNxRQFsQeNIOJp/Cx2xgPQC4RjLYiud6nSo=
Subject key identifier:   F2:40:F3:46:F7:2E:84:A5:77:93:9D:DA:1D:8F:46:2F:55:01:3C:1E
Certificate issuer:       /CN=C5FB761DB849519C4C0250CE86F23C92C33220F2
Certificate serial:       6F27B3907933347D924D7CCAA2983EE4C7B934BA
Authority key identifier: C5:FB:76:1D:B8:49:51:9C:4C:02:50:CE:86:F2:3C:92:C3:32:20:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5FB761DB849519C4C0250CE86F23C92C33220F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33332d3333203d3e20323636313937.roa
Signing time:             Tue 20 Sep 2022 20:35:57 +0000
ROA not before:           Tue 20 Sep 2022 20:30:57 +0000
ROA not after:            Tue 19 Sep 2023 20:35:57 +0000
asID:                     266197
IP address blocks:        2804:3c38::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:27:b3:90:79:33:34:7d:92:4d:7c:ca:a2:98:3e:e4:c7:b9:34:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FB761DB849519C4C0250CE86F23C92C33220F2
        Validity
            Not Before: Sep 20 20:30:57 2022 GMT
            Not After : Sep 19 20:35:57 2023 GMT
        Subject: CN=F240F346F72E84A577939DDA1D8F462F55013C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:5c:c4:aa:9e:0b:ba:af:29:2d:f5:8a:04:
                    d7:1f:7f:8d:d0:73:b5:7c:98:c2:5a:ae:2c:b8:50:
                    10:88:61:e1:1c:81:eb:e6:39:36:13:ca:91:07:fd:
                    ae:4a:a0:2c:16:66:00:dc:f8:76:2e:81:d6:ad:e0:
                    e4:02:dc:83:9b:d7:ff:b2:ca:08:da:04:86:3a:6f:
                    d2:5a:b1:8b:84:17:1a:df:9d:92:c3:94:dd:e4:3a:
                    30:8b:a2:84:94:b0:d8:af:06:22:91:44:92:5d:65:
                    b2:31:62:4d:11:73:a8:bc:85:0f:f4:e4:46:59:2b:
                    94:59:93:a3:e3:5f:9d:10:1c:e1:6e:00:65:99:36:
                    8b:9e:85:71:f3:6d:a2:aa:84:11:f9:e8:32:60:60:
                    b2:41:11:95:01:59:5d:bc:bf:cf:31:68:37:eb:ed:
                    d4:99:0c:2b:4a:48:40:35:fb:48:6c:9b:ce:28:30:
                    29:6e:db:4e:3d:89:b0:7f:71:40:81:0c:dd:2e:98:
                    86:c2:dd:8e:e3:c2:3d:3d:77:20:75:7a:40:16:c0:
                    60:0a:31:22:ee:7a:40:0f:34:1f:a1:b3:dc:c5:a6:
                    d5:a2:e3:92:02:b0:08:d9:51:78:84:ed:e8:ae:84:
                    f9:03:35:40:b3:44:99:27:36:8f:0d:d5:03:72:3c:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:40:F3:46:F7:2E:84:A5:77:93:9D:DA:1D:8F:46:2F:55:01:3C:1E
            X509v3 Authority Key Identifier:
                keyid:C5:FB:76:1D:B8:49:51:9C:4C:02:50:CE:86:F2:3C:92:C3:32:20:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C5FB761DB849519C4C0250CE86F23C92C33220F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5FB761DB849519C4C0250CE86F23C92C33220F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33332d3333203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c38::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:53:b1:0a:97:dd:52:37:b5:80:d5:fe:4c:ff:1b:54:32:48:
         fa:2f:6d:22:f3:a5:74:37:60:ba:88:8e:7d:8c:95:6a:92:35:
         e1:b1:d3:fa:eb:96:63:28:32:c3:96:41:63:53:1d:05:2f:dc:
         16:36:fe:ff:b5:ef:80:9b:d9:ed:b7:75:2e:37:7f:c7:e6:5b:
         c0:c9:53:12:5a:15:bf:33:aa:b0:93:cf:06:a0:ff:aa:71:c5:
         0c:66:fb:3a:83:36:b9:7a:70:9f:01:e9:84:1f:55:9d:51:6f:
         08:91:d6:b8:7d:46:ac:92:39:ee:a3:66:19:ae:95:f0:b7:3b:
         b9:a1:e8:c3:16:ae:71:ee:b8:4a:cb:55:1b:53:e8:ce:c0:70:
         e4:57:eb:bc:63:a1:fd:1d:f7:5a:a9:d8:09:2d:b8:f1:8f:08:
         c2:2e:f6:05:ec:ba:b7:85:04:fb:50:ae:f4:37:6f:b9:be:9b:
         b0:e3:0a:0b:73:b8:6d:69:b2:11:c9:d0:56:a6:16:47:ba:3c:
         a6:e5:e0:ce:f2:89:01:5e:a2:5a:43:de:34:1e:fc:e7:11:8e:
         d3:01:64:10:72:c6:12:4e:f0:11:0c:cf:04:3a:71:a7:04:0a:
         19:5e:8f:23:91:9f:32:df:2e:45:bd:ac:c8:81:81:95:d8:92:
         06:26:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----