This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3438203d3e20323733333333.roa
File:                     323830343a386431343a3a2f33322d3438203d3e20323733333333.roa (raw, json)
Hash identifier:          FMDifr7oBuJV/V+ZVYb0g85WLsTXgeYrDJ00b4HrHk4=
Subject key identifier:   37:A2:11:F8:86:BA:EA:52:76:57:96:BB:3D:5C:F3:F8:EB:9C:C8:A1
Certificate issuer:       /CN=02905762E6F1ED3520A96E8C0AB4013F7CC7FC18
Certificate serial:       285E16F59EF98775C63396D3BC86E631A6F34FCF
Authority key identifier: 02:90:57:62:E6:F1:ED:35:20:A9:6E:8C:0A:B4:01:3F:7C:C7:FC:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02905762E6F1ED3520A96E8C0AB4013F7CC7FC18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3438203d3e20323733333333.roa
Signing time:             Sun 16 Nov 2025 10:31:02 +0000
ROA not before:           Sun 16 Nov 2025 10:26:02 +0000
ROA not after:            Sun 15 Nov 2026 10:31:02 +0000
asID:                     273333
IP address blocks:        2804:8d14::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5e:16:f5:9e:f9:87:75:c6:33:96:d3:bc:86:e6:31:a6:f3:4f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02905762E6F1ED3520A96E8C0AB4013F7CC7FC18
        Validity
            Not Before: Nov 16 10:26:02 2025 GMT
            Not After : Nov 15 10:31:02 2026 GMT
        Subject: CN=37A211F886BAEA52765796BB3D5CF3F8EB9CC8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:eb:8b:3b:19:70:2d:78:86:de:c4:3b:05:
                    51:0d:a4:1f:d6:c6:5e:6f:83:13:21:8b:56:3a:06:
                    40:e5:57:a8:63:b2:bd:94:e8:44:87:b0:b0:3c:fb:
                    6e:58:c7:ac:60:26:c8:6f:8a:a3:01:8b:1e:c8:cd:
                    11:32:f6:8d:99:8d:c9:de:02:1b:cf:57:80:77:26:
                    ec:3e:ce:4c:94:1b:16:06:50:87:4d:6d:58:1f:23:
                    c2:a2:fe:c0:da:fc:ff:78:ec:4b:0b:31:e0:59:f5:
                    c6:cc:62:02:bf:41:d9:25:09:3d:91:47:b7:a9:e0:
                    db:b7:70:f5:e9:dd:fb:dd:bb:c4:01:56:98:dc:e7:
                    8d:b8:33:b9:e8:bb:ca:02:b5:11:26:92:8d:c8:9b:
                    b7:7e:e8:9d:be:90:c4:2e:f6:73:6a:ba:5f:a4:7c:
                    2c:ef:91:3e:86:d4:09:a1:e9:03:79:97:23:7b:43:
                    e9:cd:64:b6:70:f7:ec:76:18:b7:e5:8a:d6:47:85:
                    0e:d3:9f:75:f6:b3:d4:d0:3f:b0:29:b0:54:6a:5d:
                    ba:ed:0e:09:be:49:59:9a:f9:43:9c:41:89:73:46:
                    e7:96:b2:ae:94:12:63:2d:e7:43:b3:d1:0b:5e:2b:
                    5d:23:97:89:ba:4d:0c:42:6f:5f:0b:45:96:4d:23:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A2:11:F8:86:BA:EA:52:76:57:96:BB:3D:5C:F3:F8:EB:9C:C8:A1
            X509v3 Authority Key Identifier:
                keyid:02:90:57:62:E6:F1:ED:35:20:A9:6E:8C:0A:B4:01:3F:7C:C7:FC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/02905762E6F1ED3520A96E8C0AB4013F7CC7FC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02905762E6F1ED3520A96E8C0AB4013F7CC7FC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3438203d3e20323733333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:9a:f2:73:bb:f8:dd:9d:ed:9c:2b:23:3b:d4:13:2f:58:5b:
         f3:1f:2c:28:e7:61:a6:32:5b:f7:09:71:5d:e9:1c:a8:14:a1:
         8a:80:ae:09:2d:b9:82:90:93:68:71:00:3f:55:c6:88:61:d4:
         d6:95:5c:47:11:26:77:b0:21:b2:45:87:af:17:28:e6:fa:94:
         1a:a8:27:b7:e9:fe:1a:6f:eb:bb:76:83:1d:de:f1:1c:15:a2:
         87:18:ff:07:cc:da:a8:75:ac:8f:9d:70:12:6a:0f:b8:fa:c7:
         69:9a:8e:e8:0c:22:da:02:95:83:95:2f:7d:bd:51:c2:a7:7e:
         30:66:07:2f:7a:be:10:e5:0e:fc:64:3e:cd:e7:04:5c:c5:52:
         b2:7c:4a:ea:a0:3c:0d:6c:d2:64:da:bf:f3:81:e8:e7:2e:5e:
         fb:1e:dd:7e:a5:32:2f:ea:16:36:44:1b:a4:6b:e6:82:74:e3:
         20:ad:5d:0b:82:ba:c7:61:72:45:ba:da:fe:36:c1:a7:04:b4:
         16:fb:3a:c5:d0:a7:f7:89:4d:95:b4:1a:53:ee:ef:84:2c:ac:
         92:e0:c5:d2:bc:15:49:22:f3:20:25:5c:72:d9:2f:97:83:74:
         ca:1b:55:9f:98:d1:b6:77:e1:ea:53:bc:13:d6:a9:1e:50:ce:
         f1:96:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----