This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          0RUtz4V6Gq7+3gErvkT0cDP4JZs3Xvbd36pGR+zrzKQ=
Subject key identifier:   72:05:2F:38:57:D5:3A:7E:35:EC:A9:DD:5B:21:81:DA:63:93:BD:73
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       577882F40BB29175B29885FC794DA4775F5C0272
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 15 Aug 2025 12:45:50 +0000
ROA not before:           Fri 15 Aug 2025 12:40:50 +0000
ROA not after:            Fri 14 Aug 2026 12:45:50 +0000
asID:                     52706
IP address blocks:        2804:c70:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:78:82:f4:0b:b2:91:75:b2:98:85:fc:79:4d:a4:77:5f:5c:02:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Aug 15 12:40:50 2025 GMT
            Not After : Aug 14 12:45:50 2026 GMT
        Subject: CN=72052F3857D53A7E35ECA9DD5B2181DA6393BD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:26:89:4a:63:4a:5f:45:a5:ff:17:23:12:
                    7c:ec:49:69:ec:16:c1:2e:4b:dc:9b:7d:0c:f2:24:
                    4a:60:19:5e:64:7a:3c:e8:6b:c1:a0:0f:ee:1f:c3:
                    bd:78:70:34:83:f9:59:a0:9f:ee:4b:1e:7c:46:96:
                    78:0a:04:bc:77:42:7c:11:0d:89:32:b1:2b:83:2f:
                    b0:86:e0:b2:6d:d3:25:aa:e2:8c:5c:93:4f:03:79:
                    0b:9e:05:bd:67:f8:a5:81:af:13:e2:e9:b4:ea:62:
                    00:6f:b9:7e:cc:86:ed:bf:a9:00:7f:44:e9:56:ff:
                    b0:ae:c4:38:86:97:fe:84:93:f0:35:d6:81:f1:90:
                    a6:55:fd:fc:62:75:af:f4:61:19:2e:9a:85:d3:8f:
                    db:d5:ef:3d:e0:b8:80:84:c6:0a:ef:11:fe:99:3f:
                    74:88:c8:f4:50:aa:4c:eb:f1:20:70:c9:f9:67:75:
                    25:c1:04:fd:89:d9:d3:9b:5f:d3:d3:09:03:bb:b4:
                    47:e1:e4:12:63:37:44:f7:d5:11:95:0f:3f:c2:9c:
                    20:a0:dc:72:81:49:f2:db:5b:78:22:47:fd:6a:46:
                    a3:8a:d7:77:b7:ec:88:fa:df:a9:a9:dc:90:8e:ec:
                    0b:77:da:52:cf:2e:b1:15:4d:9b:25:ac:2c:5c:7a:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:05:2F:38:57:D5:3A:7E:35:EC:A9:DD:5B:21:81:DA:63:93:BD:73
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:d3:bc:80:e2:22:d0:9e:c3:dd:ed:e8:a5:0c:1b:e2:0f:9b:
         e2:7b:a6:da:df:74:1c:e5:a5:10:2b:d3:4f:bb:d6:71:76:30:
         8d:f9:71:06:3c:98:40:cc:c9:fb:c9:c7:d9:06:0c:24:3c:3f:
         69:0f:4e:9e:d7:92:c7:9e:47:2a:fb:12:9f:c3:97:da:d4:8a:
         96:df:50:52:8a:f5:1b:2d:9f:ca:24:5d:d0:a2:13:66:c3:f6:
         7a:57:96:a0:75:7b:e0:3b:6d:f7:56:d0:08:96:06:72:11:5a:
         61:f1:dc:0a:4f:11:f4:61:32:2f:46:82:4e:ec:5c:86:0b:2d:
         9a:66:81:7c:f7:ef:a4:fe:e5:c0:76:8f:91:b9:b7:f9:4c:8e:
         9f:75:df:2e:8a:dc:eb:a2:5f:20:c4:06:9c:56:8c:5f:87:b3:
         3f:60:c8:db:e5:66:cd:98:51:70:40:02:24:1b:4a:f2:05:62:
         6e:32:5c:0a:55:27:33:e2:c6:e6:fe:75:8d:95:a8:d0:e8:1d:
         e1:fc:bd:47:fb:19:03:32:55:f2:26:54:c6:a5:80:ef:66:a9:
         df:8d:97:99:b8:9f:18:fc:4c:f0:70:cb:9c:d8:0d:9e:93:a9:
         04:b2:10:f5:6d:59:4f:ca:39:cf:ac:8a:23:c2:50:0a:49:ed:
         b4:f0:67:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----