This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          3PXkEY+bAm3uAi3xJzDsUr1vyddzc/+PD3AL0d0GHxc=
Subject key identifier:   61:18:01:5F:51:76:A7:7D:3D:2E:42:AF:EC:2F:1C:29:79:17:65:4B
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       1B8FFAE70B87F2B43CC23CCD8E0948DFC52446AF
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:39 +0000
ROA not before:           Thu 06 Mar 2025 02:26:39 +0000
ROA not after:            Thu 05 Mar 2026 02:31:39 +0000
asID:                     52706
IP address blocks:        2804:c70:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8f:fa:e7:0b:87:f2:b4:3c:c2:3c:cd:8e:09:48:df:c5:24:46:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:39 2025 GMT
            Not After : Mar  5 02:31:39 2026 GMT
        Subject: CN=6118015F5176A77D3D2E42AFEC2F1C297917654B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:20:fc:df:e0:03:71:44:96:98:ac:61:b6:
                    0c:61:b0:04:69:ff:e2:89:01:62:35:40:7f:48:6b:
                    2b:7e:61:20:09:11:60:64:44:cd:80:17:45:cd:5c:
                    c8:c8:32:d1:6d:d9:20:3e:67:2f:95:c7:b5:77:8b:
                    fc:dc:80:f6:95:21:9f:6a:e0:63:15:57:94:92:dd:
                    c2:32:cd:b3:5a:60:8a:40:3b:c4:a2:68:93:40:1a:
                    c4:ca:52:28:55:ba:f0:ca:20:c7:4d:0c:e1:0b:cf:
                    d9:7f:0d:d7:25:a9:d2:0d:a0:0b:dc:62:d1:a9:a1:
                    e6:76:3b:ed:2e:1e:cb:90:62:fb:09:80:a1:af:22:
                    76:e5:df:9b:75:c9:67:ca:81:ac:c7:eb:82:6b:20:
                    4a:87:67:7f:7e:ee:99:df:32:9c:b5:82:07:73:11:
                    4b:1b:61:80:2e:77:e0:a8:7d:9e:35:51:9f:14:28:
                    61:8e:7c:b4:f5:ac:28:21:63:60:6c:10:e0:d3:2d:
                    d6:78:5a:37:b9:ee:1b:bd:b2:43:1d:1d:35:3f:29:
                    8b:71:dc:36:aa:b1:50:78:27:ed:c9:61:c9:e1:db:
                    d2:58:95:77:9f:48:52:bc:a3:c9:b1:bb:90:59:87:
                    83:07:85:14:24:2e:47:f2:51:20:68:c9:da:65:96:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:01:5F:51:76:A7:7D:3D:2E:42:AF:EC:2F:1C:29:79:17:65:4B
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a353a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:05:54:e9:30:0d:a1:a3:14:c3:50:a9:84:31:82:da:4a:
         22:9d:11:a6:3e:7c:52:cc:a5:8c:82:d3:d6:96:e3:da:a2:ba:
         11:8a:1b:d5:7f:e2:4a:8c:cc:81:f9:f4:ce:04:ca:7e:3a:42:
         a6:cf:fc:d2:b4:82:cf:f1:af:2f:88:b1:a5:5c:1d:a4:7a:64:
         bd:e8:22:f1:b1:4a:b9:54:fe:8d:37:99:aa:89:55:8b:de:de:
         ee:65:60:6d:00:d0:4d:aa:32:32:c6:17:65:b8:1e:f8:e9:99:
         40:22:3f:7a:c3:a7:11:85:4f:10:99:b4:cf:18:9e:ed:82:17:
         60:4a:0d:56:b4:a0:9a:a0:dd:73:0a:f7:24:94:89:24:ad:15:
         80:e7:12:f4:72:e1:ac:9b:88:cb:9a:3a:32:df:a4:a3:6a:b3:
         38:f9:08:52:ba:24:b4:6d:e1:8a:f9:90:86:e7:ea:49:36:ff:
         b4:cc:4c:bf:f2:c6:ef:7d:f5:7b:9a:43:1f:b5:f2:e0:e1:a9:
         6c:ba:11:4f:81:68:5b:b5:c4:37:33:88:4a:50:87:00:75:c3:
         fc:92:fa:90:19:1a:c0:c8:56:34:15:a8:dd:e4:aa:80:19:1c:
         4d:8c:10:2b:e9:d9:4d:1f:10:af:8b:76:5b:b9:47:89:e6:86:
         1b:81:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----