This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          1y7sZ2xajQzELKMIgMUccxdw9Df1C2gVzZTNnwr49ZI=
Subject key identifier:   07:72:41:29:E9:90:66:9B:B3:74:B8:16:F5:24:71:64:56:EE:ED:0B
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       331440455E4E176C35ED924BF164871A8DBD7997
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:46 +0000
ROA not before:           Thu 06 Mar 2025 02:26:46 +0000
ROA not after:            Thu 05 Mar 2026 02:31:46 +0000
asID:                     52706
IP address blocks:        2804:c70:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:14:40:45:5e:4e:17:6c:35:ed:92:4b:f1:64:87:1a:8d:bd:79:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:46 2025 GMT
            Not After : Mar  5 02:31:46 2026 GMT
        Subject: CN=07724129E990669BB374B816F524716456EEED0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:1f:15:20:38:6f:98:27:7c:fd:2d:7f:72:
                    4b:72:f2:4e:dc:ab:d7:fe:72:b1:59:93:96:92:64:
                    8a:d7:e3:7b:8c:c1:8d:13:e0:33:07:5d:f5:a3:f9:
                    ee:e7:b0:8e:37:87:02:e3:25:94:ac:31:6c:b4:b2:
                    a9:85:36:1c:af:ca:a7:57:82:c6:e7:12:e4:cc:9f:
                    6a:a6:a2:0e:4d:56:cb:a5:80:d5:3f:63:e1:ac:cd:
                    79:f5:2a:74:1c:0b:68:88:d7:21:c9:e7:37:9e:32:
                    c4:5d:51:8d:ec:a6:3d:c2:9d:b7:ad:bc:b7:a2:e8:
                    e3:0e:7f:f4:5a:24:f2:cd:f4:39:66:65:a9:a2:53:
                    ff:c9:33:ed:ac:82:bc:7d:8a:12:7a:f7:cb:26:f2:
                    27:b4:85:71:1c:65:50:db:43:d7:59:b3:e5:cb:cf:
                    ba:fe:32:c3:f7:47:d7:87:4b:07:db:b5:4e:11:03:
                    22:dd:b9:f0:6c:4b:1f:f8:dd:a2:c9:53:e0:34:c5:
                    65:5c:9f:b4:39:00:6a:ad:69:b8:0e:7a:e7:90:de:
                    8a:6e:f4:42:b0:9b:06:f4:63:c9:e1:21:6f:80:9a:
                    2c:54:b0:52:ff:60:f8:f4:a3:2a:e1:76:a4:58:d4:
                    32:73:df:82:f0:98:c1:8a:52:03:0d:70:d1:46:11:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:72:41:29:E9:90:66:9B:B3:74:B8:16:F5:24:71:64:56:EE:ED:0B
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:58:68:ce:2f:be:d2:2b:84:69:97:b4:1e:80:2a:68:96:48:
         4d:7d:5e:8c:98:7d:96:89:d3:ed:7a:fb:7e:dd:e9:5c:71:7e:
         7e:15:40:a2:3f:58:4d:8f:69:35:47:b0:c6:8b:8e:b9:fb:b9:
         87:60:e2:8c:7e:9e:15:22:78:d5:85:a6:b3:29:ba:fc:d5:3c:
         d7:bc:dd:4b:cd:5e:c8:5b:ef:26:b9:e5:f7:3e:41:4d:05:3f:
         20:2b:ca:0a:35:0e:45:c1:1f:cd:ea:20:b1:fd:f0:04:7f:2d:
         9d:d5:d4:3e:df:ff:ac:ea:5c:a6:18:75:8d:05:aa:e5:c0:11:
         d5:3f:65:18:71:4a:d8:88:99:ca:9e:cf:2e:e3:e1:5b:a2:9b:
         a9:a8:8e:d7:88:4c:96:43:40:69:7b:7c:89:6c:15:8d:f1:19:
         ef:e4:8c:9b:fd:2d:c6:56:d1:3b:5e:59:6f:2f:6d:6e:a5:23:
         33:30:88:96:6e:95:1b:f5:ff:2a:8d:f5:f9:49:cc:33:35:ea:
         bc:3c:8c:9f:94:a4:4d:66:1f:c9:eb:35:3c:bf:61:20:70:07:
         d8:8e:8e:b5:73:02:d6:24:e1:b7:04:c4:84:72:08:d6:39:0e:
         6c:4d:f9:5c:e9:a3:f7:3c:f9:52:0c:13:99:3d:53:13:2a:fd:
         3e:a1:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----