This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          1BAInm6M5AfkQfkeeUpumO6YVxN8qG8+klc/OQ8xMwQ=
Subject key identifier:   13:10:4E:2B:86:F6:BA:28:6C:0D:C1:41:80:87:DF:74:AF:2A:78:0F
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       754DD4F037D1F20940F203C87AF28F17610FC49F
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:46 +0000
ROA not before:           Thu 06 Mar 2025 02:26:46 +0000
ROA not after:            Thu 05 Mar 2026 02:31:46 +0000
asID:                     52706
IP address blocks:        2804:c70:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4d:d4:f0:37:d1:f2:09:40:f2:03:c8:7a:f2:8f:17:61:0f:c4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:46 2025 GMT
            Not After : Mar  5 02:31:46 2026 GMT
        Subject: CN=13104E2B86F6BA286C0DC1418087DF74AF2A780F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:24:a2:71:18:81:92:c1:6c:b7:1d:bf:3b:
                    c1:32:36:5a:30:32:3f:fc:33:f0:18:86:f4:e6:61:
                    f0:8b:d9:94:d1:62:ae:24:12:3a:d9:05:14:43:6f:
                    49:96:86:9e:5e:e9:6e:6d:d1:a5:ed:07:a4:93:67:
                    ce:79:3f:79:52:4b:5a:6b:2d:7f:87:16:b1:f9:23:
                    5b:2c:d6:bb:86:ab:6b:38:81:c1:ae:8f:a4:5d:82:
                    1a:01:92:56:bc:c7:92:fc:dd:d6:1a:f2:21:f2:2a:
                    93:a1:a1:71:46:d6:49:89:dd:19:0a:e9:a5:d9:62:
                    47:e7:fe:9e:b0:92:11:9c:95:c3:d6:09:15:e2:9a:
                    6c:7a:eb:15:9c:10:f6:25:d1:da:c9:10:36:07:28:
                    f3:de:da:52:aa:34:a3:39:58:7f:cb:3c:51:47:5b:
                    9d:29:10:be:48:bf:89:da:e0:c8:2c:3e:0b:4a:8d:
                    bc:18:bb:9f:ce:5f:df:59:f7:cf:75:97:8c:00:7a:
                    eb:5f:fa:5b:7b:89:42:18:23:03:93:a5:0e:48:8c:
                    d1:a8:44:31:b7:41:f0:72:97:09:0c:3b:a8:e4:56:
                    87:27:48:c7:cb:23:e1:a2:2e:16:f5:fb:30:29:49:
                    bc:6b:13:11:72:49:0d:f3:b8:3a:0c:68:73:5b:8e:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:10:4E:2B:86:F6:BA:28:6C:0D:C1:41:80:87:DF:74:AF:2A:78:0F
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:5e:d0:d8:48:9f:22:64:12:bd:b2:09:a0:ec:90:75:c7:af:
         f9:2c:b4:d2:13:3c:cf:4e:d3:c8:55:97:59:b3:d7:1f:e9:31:
         3c:93:5e:4c:b9:97:29:0b:87:8a:95:60:4d:c9:20:1a:54:4c:
         7f:64:bf:7f:9b:fd:8b:2a:d4:af:19:11:dd:19:a2:40:56:7b:
         3d:02:c5:53:bb:03:6b:87:a6:bb:04:34:fd:c1:be:19:cc:4d:
         b5:04:c1:ad:30:73:60:97:a4:00:08:63:4f:6b:27:3a:7e:78:
         c7:19:89:90:84:94:ec:be:e3:cb:52:8d:7a:18:40:d3:66:7d:
         1c:89:45:f4:37:9a:6e:f3:55:ea:8b:3d:40:51:65:11:7d:a8:
         d7:88:74:28:91:51:45:52:45:f7:5d:e2:d9:1e:b6:62:ee:f2:
         cf:2f:05:ca:02:01:f0:be:11:81:fd:70:1b:70:63:c8:ba:21:
         91:19:0a:b0:a5:8a:3c:68:3e:73:2e:bf:2b:9e:b7:76:3a:a5:
         d0:c0:06:9c:95:f7:a8:ec:5d:37:59:0f:cf:31:e5:31:aa:95:
         e0:b5:81:5e:0b:a4:9e:24:97:ff:dc:fc:d3:86:f0:4f:cf:f3:
         58:b7:51:19:74:98:14:9b:cc:7e:dc:02:37:1f:bd:2f:e4:4f:
         3c:22:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----