This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33322d3332203d3e203631363134.roa
File:                     323830343a346166633a3a2f33322d3332203d3e203631363134.roa (raw, json)
Hash identifier:          NKe8mDOV6l5zw8ATvL3j866f035t0nanWduimJIaA88=
Subject key identifier:   06:F6:97:7C:FD:0B:AD:90:33:80:53:CC:10:03:C8:4D:44:BE:9C:2B
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       5D7A24B682993C151B92307C68510DD7674702CA
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33322d3332203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        2804:4afc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7a:24:b6:82:99:3c:15:1b:92:30:7c:68:51:0d:d7:67:47:02:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:d6:69:91:6c:e1:1a:65:25:9f:26:49:9b:
                    7c:17:3e:a9:f8:d4:65:f3:5d:96:f5:91:63:33:50:
                    69:28:e4:f2:15:32:d1:f4:c5:5f:5f:a2:fa:f6:f0:
                    7e:ba:e4:d2:b1:98:da:0d:37:5b:a0:5f:0a:a7:19:
                    6a:e7:7a:cf:12:03:71:65:cc:8b:00:ae:67:7d:97:
                    64:41:e9:3b:0a:67:e2:d1:82:9a:79:3f:86:cf:86:
                    d9:8e:08:4f:9b:ab:67:63:12:fa:ff:d8:1f:04:4e:
                    5b:6a:7c:d5:ed:07:70:69:d2:e5:61:5e:f8:f2:6b:
                    70:3a:82:e7:fd:39:bf:8f:23:91:a6:75:95:56:c8:
                    31:d9:a2:b3:81:b1:4d:29:26:1a:3d:ae:4a:d8:ef:
                    c1:b5:12:14:9d:d9:47:43:32:df:3e:1e:a8:db:ff:
                    b6:aa:a4:3d:c8:1f:5f:69:8d:e5:8d:60:10:81:e8:
                    b8:33:52:1e:a1:cb:ed:37:10:21:5b:33:4f:fc:bf:
                    7e:06:77:d4:3e:1b:a9:7a:71:72:cf:ee:48:7d:c3:
                    b7:f0:2c:87:32:df:62:6a:6d:0c:ee:c9:e8:74:03:
                    0d:59:30:a6:71:ec:83:ab:b2:73:f5:92:b2:d9:0b:
                    23:1f:7e:8e:6c:1b:ee:d9:98:50:74:c0:f1:79:87:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:97:7C:FD:0B:AD:90:33:80:53:CC:10:03:C8:4D:44:BE:9C:2B
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33322d3332203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:f7:bd:11:58:c3:70:4d:5b:3e:7a:72:06:8e:bb:0f:d2:
         96:e7:48:7d:a6:2b:b4:6b:17:8e:a3:bc:a1:c1:06:62:d4:12:
         a8:aa:39:99:8a:b3:32:81:0b:d5:81:8b:85:f1:24:c6:01:16:
         9e:49:f6:18:5f:e8:c1:54:02:e8:53:b9:ad:a0:20:9a:f6:b1:
         ce:3f:ee:e1:66:0e:6d:8f:d1:23:fa:b6:e3:97:17:f5:f4:23:
         7b:c6:fa:19:6b:44:29:b6:34:9a:55:d9:f9:eb:39:f5:5e:9d:
         04:44:7f:e8:8e:46:27:bf:3c:59:63:3b:4b:25:42:fa:a6:2c:
         85:ba:ab:7e:71:17:e9:35:8c:80:17:4c:f4:17:29:a6:30:29:
         f5:56:1c:68:c3:26:8d:12:b0:c2:cb:3f:5a:7f:63:7d:20:de:
         44:17:10:0f:be:39:29:bb:1a:e0:9f:da:30:90:ed:eb:30:1b:
         5d:d1:fd:f8:4a:2f:32:de:b8:96:f5:08:d8:48:6d:bc:7a:a7:
         71:7d:d2:7c:09:a2:ad:09:3d:b4:32:25:7a:8c:b3:1e:6c:b2:
         7e:b7:73:e1:d5:11:f7:8b:c1:fb:07:47:d8:04:23:96:0a:d1:
         45:6f:06:9f:24:ea:cc:a4:73:f2:26:5f:28:83:bb:b9:5f:e3:
         11:45:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----