This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          4wHJ4xLe2C1PT+eM6ZQmFNA6N0vFIoenul6TIQa0EC4=
Subject key identifier:   3F:01:F7:F5:E7:80:B1:C5:72:5F:9B:04:2A:DD:3E:43:D7:9D:92:58
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0E572D84396EDF39679873BC1EC491D27A2E5C96
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:36 +0000
ROA not before:           Thu 06 Mar 2025 02:26:36 +0000
ROA not after:            Thu 05 Mar 2026 02:31:36 +0000
asID:                     52706
IP address blocks:        2804:c70:2003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:57:2d:84:39:6e:df:39:67:98:73:bc:1e:c4:91:d2:7a:2e:5c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:36 2025 GMT
            Not After : Mar  5 02:31:36 2026 GMT
        Subject: CN=3F01F7F5E780B1C5725F9B042ADD3E43D79D9258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:15:c3:78:12:df:46:4d:ab:09:e1:6b:99:
                    b5:42:99:b1:1d:b9:d1:9e:01:37:65:f4:e7:96:12:
                    6e:5c:48:27:19:9f:e5:6b:61:e3:d4:f0:a4:a0:a3:
                    d8:a4:08:47:b2:30:f8:ad:28:b6:42:41:ca:15:4b:
                    b0:74:68:9b:48:37:21:9d:48:d0:30:e2:a9:d5:ff:
                    da:42:1a:69:ed:c5:d1:b9:0d:fb:9e:74:00:43:f4:
                    6c:c1:4e:57:57:2a:58:17:98:8b:60:cd:b9:48:cc:
                    17:d2:71:8c:d3:6f:61:8f:43:63:b2:e2:20:3b:95:
                    80:75:4a:ce:ed:04:7d:39:87:71:9b:cb:4f:8f:8b:
                    d9:19:db:02:de:a9:c1:52:a2:c7:1d:3b:04:01:2d:
                    af:59:f1:b4:88:eb:a6:3b:4c:30:fb:3b:c2:28:d4:
                    ab:9a:fe:c0:05:4f:27:5d:6e:0c:e4:99:3d:64:74:
                    3b:8d:25:d9:39:fe:e1:59:50:2a:b3:a5:c1:00:4e:
                    a1:c4:dd:50:88:93:28:71:33:8f:e0:aa:ef:db:20:
                    83:55:1e:44:d8:a1:0f:36:d9:13:69:3d:6c:2c:95:
                    63:fd:2e:5b:06:a0:dd:4e:af:f1:fb:21:cf:d7:a1:
                    ab:dd:37:1a:de:e7:d9:03:d8:40:fe:53:bb:fe:1e:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:01:F7:F5:E7:80:B1:C5:72:5F:9B:04:2A:DD:3E:43:D7:9D:92:58
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:b3:e9:52:4c:a3:c8:39:de:6c:d1:f3:55:54:31:07:69:
         09:92:f4:02:fa:26:9c:aa:85:22:94:07:30:74:0a:8a:87:95:
         39:ca:b9:c6:d3:42:b6:8f:d9:bd:7c:50:6a:f3:61:af:66:6f:
         e9:25:40:0f:7c:a6:43:f3:68:dd:73:c7:89:6e:84:09:3e:84:
         70:53:e6:8a:b4:73:f3:45:a5:de:e2:10:03:f9:20:c2:a4:fa:
         5f:fc:d6:61:7b:cc:bd:74:ad:52:54:f8:01:a2:1c:b4:7a:4d:
         52:1a:f1:2d:b2:a5:3a:44:c4:57:91:35:cb:6f:33:e5:f9:e7:
         00:64:35:cc:d4:91:5d:c0:e1:22:a4:eb:08:29:d9:0f:1e:a6:
         6a:b8:d9:9b:55:cf:99:71:9d:a1:a6:8e:a9:7a:d2:e9:4c:4b:
         8d:59:67:ce:6b:54:6c:e3:17:7a:cc:db:37:18:0f:9e:64:70:
         3f:ac:24:1c:de:18:03:f0:b1:85:57:6e:c3:9e:9e:dc:7e:5d:
         67:20:2e:42:04:40:e1:82:53:45:e0:db:c2:51:11:80:f8:fd:
         e5:b8:c7:fa:7e:92:9a:c0:c8:53:ef:1e:fc:4f:8b:9d:b0:ab:
         2e:3f:b0:a5:e2:98:cf:65:e9:36:c7:e7:78:c6:98:9b:af:5e:
         f8:ad:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----