This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a38303a3a2f34312d3431203d3e20323634353434.roa
File:                     323830343a323133633a38303a3a2f34312d3431203d3e20323634353434.roa (raw, json)
Hash identifier:          yDqhYIKo6GgBREpcYjzzDsm6PnqD0FDQOqw4PYS7M68=
Subject key identifier:   A8:F4:5E:E5:81:7A:CB:FA:FF:4F:73:1B:78:D3:D0:BE:AB:CC:3C:85
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       02DEFA81C748A0132984D00E37E440D7991A0FCA
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a38303a3a2f34312d3431203d3e20323634353434.roa
Signing time:             Mon 08 Sep 2025 17:16:23 +0000
ROA not before:           Mon 08 Sep 2025 17:11:23 +0000
ROA not after:            Mon 07 Sep 2026 17:16:23 +0000
asID:                     264544
IP address blocks:        2804:213c:80::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:de:fa:81:c7:48:a0:13:29:84:d0:0e:37:e4:40:d7:99:1a:0f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Sep  8 17:11:23 2025 GMT
            Not After : Sep  7 17:16:23 2026 GMT
        Subject: CN=A8F45EE5817ACBFAFF4F731B78D3D0BEABCC3C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0a:8b:46:3b:83:5d:a4:45:86:82:64:77:09:
                    08:db:26:a6:ab:19:3e:2b:9e:d5:77:50:81:ed:4b:
                    84:b1:59:f3:9f:da:c1:1b:66:87:34:1b:98:9a:a7:
                    1b:00:36:97:38:cd:c2:c2:0a:14:8b:87:bf:bd:23:
                    46:c4:8e:86:a8:ac:30:a7:6e:80:cb:10:ff:c9:e6:
                    6c:12:18:30:ea:f9:6f:46:85:96:12:69:bc:b3:07:
                    c3:55:ee:42:12:94:8a:ae:fc:21:94:b8:38:6c:6f:
                    25:fd:c6:4b:3f:bb:96:c5:8b:a4:db:3a:47:36:85:
                    42:94:a1:85:4e:78:de:73:3e:68:d9:90:ae:b7:3c:
                    d3:68:60:35:3b:64:99:c0:81:ac:c7:45:c3:f6:20:
                    23:7c:c0:68:76:bf:52:0b:22:36:33:00:79:47:1a:
                    0e:e3:f1:3f:68:71:40:6d:5e:3c:73:3c:3f:7d:dc:
                    a3:74:f0:a4:8c:4b:67:be:fc:85:c0:ba:74:12:dc:
                    11:14:ab:93:36:f7:4f:06:e3:87:d3:a6:39:ed:09:
                    ac:ed:90:10:63:d1:96:d9:4c:75:cd:60:dc:40:6c:
                    f5:61:37:eb:88:8c:79:c2:bf:f0:cf:3e:02:7d:f9:
                    53:6e:ef:22:de:81:2f:57:68:65:c2:4b:fa:29:e3:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:5E:E5:81:7A:CB:FA:FF:4F:73:1B:78:D3:D0:BE:AB:CC:3C:85
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a38303a3a2f34312d3431203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         44:04:c7:4e:34:83:54:67:8d:9c:53:23:2e:31:7e:72:14:b9:
         24:81:ca:34:ee:7c:b1:b3:7b:5a:5b:88:96:9e:91:47:a8:03:
         de:a6:14:89:5e:1c:16:98:68:5e:87:22:27:68:f6:1b:81:ae:
         15:97:e2:7b:8d:ea:c4:02:e0:3d:c2:61:16:4c:32:65:61:36:
         f8:22:a6:6d:82:82:57:00:9d:25:c4:79:11:cf:34:70:43:4f:
         9a:6d:b0:9c:4e:ed:40:39:55:8f:68:09:0a:ce:3c:31:60:57:
         1f:ed:bc:2a:ad:f3:bf:91:2c:5e:53:62:fd:9f:b4:bd:50:8d:
         a5:d6:66:34:9a:77:43:07:fa:88:14:a3:26:5c:c4:ce:ed:9f:
         e2:10:7d:28:c2:b7:a1:f8:84:9b:e7:16:ed:b0:d1:dc:9a:d5:
         ed:c8:3b:92:9a:53:35:35:a4:64:61:bf:ab:24:3f:45:cb:c6:
         c8:46:c0:47:2a:ae:b6:89:9f:05:05:9a:4b:e7:75:1e:e2:da:
         4f:70:b5:b8:61:3c:52:07:04:c8:b7:a2:1f:92:2a:4c:80:09:
         19:7a:ca:f3:12:ea:c5:9f:5d:b3:f3:bc:72:de:90:9f:b4:78:
         21:74:1e:b4:02:93:df:b6:91:4f:90:e3:f5:fc:67:05:5d:a5:
         38:04:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----