This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/323830343a383932633a3a2f33332d3333203d3e20323733353836.roa
File:                     323830343a383932633a3a2f33332d3333203d3e20323733353836.roa (raw, json)
Hash identifier:          bIFdW46P08WRBpJzByVYe/+dfDLYd4xZaNOvwdLfWx8=
Subject key identifier:   2A:34:A4:72:7A:3E:89:CB:A5:E1:F3:6D:70:85:A4:97:2D:E2:44:5D
Certificate issuer:       /CN=40B91035D3D0AD8E0DA3A7EDA90F706758E1D703
Certificate serial:       6384281C33C0B60FF1349CFF3F7DC69E977910C9
Authority key identifier: 40:B9:10:35:D3:D0:AD:8E:0D:A3:A7:ED:A9:0F:70:67:58:E1:D7:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B91035D3D0AD8E0DA3A7EDA90F706758E1D703.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/323830343a383932633a3a2f33332d3333203d3e20323733353836.roa
Signing time:             Thu 31 Jul 2025 17:57:38 +0000
ROA not before:           Thu 31 Jul 2025 17:52:38 +0000
ROA not after:            Thu 30 Jul 2026 17:57:38 +0000
asID:                     273586
IP address blocks:        2804:892c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:84:28:1c:33:c0:b6:0f:f1:34:9c:ff:3f:7d:c6:9e:97:79:10:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B91035D3D0AD8E0DA3A7EDA90F706758E1D703
        Validity
            Not Before: Jul 31 17:52:38 2025 GMT
            Not After : Jul 30 17:57:38 2026 GMT
        Subject: CN=2A34A4727A3E89CBA5E1F36D7085A4972DE2445D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:b4:7b:17:38:56:99:16:ec:65:5c:2c:e6:
                    f4:4d:bc:83:37:25:ee:62:fb:30:8d:36:46:cb:ed:
                    ef:d4:e7:83:ea:99:9e:7e:17:c3:75:c4:94:8e:2b:
                    30:2f:3c:c4:0a:26:84:49:45:63:a7:1f:45:e5:2a:
                    95:a1:4f:f7:1b:a0:e2:9d:0e:f4:49:95:94:f7:c1:
                    30:f4:c3:08:41:c4:c5:87:df:42:f0:91:08:eb:e7:
                    b4:a2:0a:db:ba:85:5c:6b:f1:ff:02:6d:78:41:e0:
                    d3:16:99:50:ae:6c:59:20:d1:79:9b:fe:e7:0e:14:
                    61:97:6e:0e:89:50:06:ef:d9:52:34:06:db:f8:d6:
                    bb:d7:e9:01:1a:68:59:87:6d:1c:e7:1d:3b:44:5c:
                    3f:87:7f:17:d7:06:7e:75:67:b9:5f:4b:9c:79:df:
                    d3:fd:6e:9b:c8:c0:36:f7:4a:68:05:5e:6d:bb:34:
                    86:9d:03:4b:a7:d2:fa:f7:a6:e8:49:bb:6b:10:9a:
                    f1:84:e3:cc:90:c4:26:00:dd:47:5e:75:b7:98:9b:
                    f7:b9:fe:90:6e:3b:0d:75:8f:d4:de:f7:75:14:65:
                    14:1a:58:05:a9:e7:bb:f2:a6:82:04:7b:e7:03:c0:
                    05:74:75:8c:21:11:db:1d:75:54:16:d2:ad:ef:dd:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:34:A4:72:7A:3E:89:CB:A5:E1:F3:6D:70:85:A4:97:2D:E2:44:5D
            X509v3 Authority Key Identifier:
                keyid:40:B9:10:35:D3:D0:AD:8E:0D:A3:A7:ED:A9:0F:70:67:58:E1:D7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/40B91035D3D0AD8E0DA3A7EDA90F706758E1D703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B91035D3D0AD8E0DA3A7EDA90F706758E1D703.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/323830343a383932633a3a2f33332d3333203d3e20323733353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:892c::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:e3:a3:f5:78:93:82:99:e7:8d:84:8a:9b:b7:f7:74:0d:df:
         4b:2e:4c:32:ab:ef:50:ff:d8:06:bd:18:eb:44:a2:0f:8e:94:
         e5:25:46:10:54:f3:be:c6:06:df:c5:55:2a:62:dd:e9:e3:d7:
         69:e7:69:6c:e1:aa:ca:0e:8a:1a:26:91:89:d8:33:f1:29:31:
         ef:5e:12:12:1e:fc:10:0d:14:e9:3b:46:d8:36:a3:3f:2e:93:
         77:ff:20:45:cd:ac:fb:43:f5:5d:15:42:c3:30:d9:3e:3f:0e:
         ca:fd:c6:ec:fd:bd:da:51:2b:ad:22:8d:eb:40:4b:d4:d8:07:
         83:53:5a:8f:f2:ec:87:49:68:13:f5:cf:5b:54:e9:93:4e:07:
         29:26:67:f3:52:bb:fc:06:e5:be:99:45:a3:02:8a:07:9f:59:
         db:87:93:9a:7e:9b:9a:d1:6c:87:38:42:d6:81:78:51:59:37:
         fe:34:26:7e:38:c7:0c:0d:06:39:f0:b2:64:12:f2:b7:f7:11:
         b6:16:06:f3:00:b7:0a:95:ab:5f:87:8f:40:96:26:48:e8:e6:
         cc:f5:f9:21:88:87:db:3d:d4:1e:d2:29:a7:ee:e5:0e:68:2a:
         71:b8:5d:66:47:ed:ef:53:78:79:22:45:c7:b1:77:50:d8:80:
         77:cc:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----