This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa
File:                     323830343a326536303a3a2f33322d3332203d3e20323635333432.roa (raw, json)
Hash identifier:          e0aIvwRwRGH7iMCEivEgxCv/LyPo1JLqklYbRYUS6tU=
Subject key identifier:   B1:BD:FB:7D:A3:20:DD:31:3D:24:09:55:1E:2D:50:29:8C:37:51:9D
Certificate issuer:       /CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
Certificate serial:       4D1109329BB32929926D0F54BBE1EB32EFF2B6DD
Authority key identifier: 5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa
Signing time:             Mon 21 Jul 2025 16:56:24 +0000
ROA not before:           Mon 21 Jul 2025 16:51:24 +0000
ROA not after:            Mon 20 Jul 2026 16:56:24 +0000
asID:                     265342
IP address blocks:        2804:2e60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:11:09:32:9b:b3:29:29:92:6d:0f:54:bb:e1:eb:32:ef:f2:b6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
        Validity
            Not Before: Jul 21 16:51:24 2025 GMT
            Not After : Jul 20 16:56:24 2026 GMT
        Subject: CN=B1BDFB7DA320DD313D2409551E2D50298C37519D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:96:bd:cd:79:10:dc:37:4b:23:49:15:c9:
                    80:aa:13:2f:b1:17:db:f6:ef:b1:24:6e:4a:dd:06:
                    c8:fe:da:28:85:3b:d2:bc:00:73:0a:9b:ee:a4:f4:
                    b4:fa:55:e9:96:5d:64:c0:17:19:ea:8a:7a:d7:c8:
                    ee:8f:3f:cc:2a:de:5b:b2:91:e2:1e:5a:65:2c:3b:
                    51:13:2c:0f:4d:8f:9a:cc:56:f6:80:68:a4:94:2e:
                    b6:c7:06:b5:76:a2:c8:a7:fa:6e:ea:c6:e1:16:ac:
                    a6:11:40:77:f3:bf:b6:b2:8a:5c:f4:e7:dd:bd:75:
                    df:18:a0:46:aa:a3:b6:a6:6c:ce:c3:a6:2c:b1:5c:
                    04:08:1c:de:ce:26:3a:62:b3:89:4d:bb:3c:ce:d7:
                    b0:e1:ff:dc:1d:f8:9e:6a:2e:36:c0:ff:ac:5e:1f:
                    05:aa:80:14:d6:37:4f:81:ce:e7:08:67:74:c5:ae:
                    3d:9f:72:68:61:8b:e6:3b:aa:31:9f:a5:14:ef:ef:
                    1f:09:e3:12:78:6a:0e:80:e7:2e:51:97:35:50:91:
                    8c:32:67:1c:04:f5:bc:d9:0a:1b:2f:24:46:59:7d:
                    1a:54:9f:fa:7c:b7:77:b2:11:78:01:41:f8:1d:24:
                    b3:fc:e1:2d:bf:22:6b:51:e8:a3:5a:ab:55:91:a1:
                    07:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BD:FB:7D:A3:20:DD:31:3D:24:09:55:1E:2D:50:29:8C:37:51:9D
            X509v3 Authority Key Identifier:
                keyid:5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:68:26:dd:ea:15:33:13:b2:28:7c:7a:d9:ea:83:5c:b0:14:
         10:45:0e:54:b0:ad:a4:98:01:23:5a:7f:6d:5e:c6:7c:f9:6f:
         07:4f:84:fa:4d:aa:61:8a:1e:26:d9:62:2a:ee:9f:50:c7:33:
         b9:0e:5c:0b:c3:ff:84:38:01:99:ae:c6:6d:ba:4a:cd:3f:8c:
         8b:b2:7e:3a:d3:9c:27:94:a4:57:b3:12:f1:5f:2d:9b:60:4c:
         85:fd:a8:87:01:e4:f1:28:d7:a3:09:6a:7e:60:11:00:39:90:
         61:fa:86:c3:18:4a:2e:b6:1d:48:c9:cc:fb:50:24:af:e6:25:
         e3:f8:0a:2a:ff:36:54:ca:ad:a0:e7:23:14:cc:e3:36:e2:1b:
         aa:19:df:d2:bc:7d:73:fe:86:a9:c0:46:15:8f:2e:d2:32:76:
         46:b2:a9:8b:5a:88:52:14:1a:93:1f:51:d0:8b:d0:8e:ec:3e:
         0c:f6:56:db:9f:47:9b:89:1c:5d:9c:f7:95:c4:3c:b8:5e:3d:
         2b:7c:eb:72:81:71:eb:bd:48:e7:11:c6:2d:56:73:df:92:d1:
         6e:75:a0:5c:47:4d:9c:8e:70:94:63:6a:d3:48:93:04:f1:73:
         29:65:44:a7:77:90:7b:76:37:73:00:7c:17:b8:ac:a7:8c:6e:
         89:68:82:71
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTREJMpuzKSmSbQ9Uu+HrMu/ytt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMyOEM4QkRFRTRGREYxMjc0MTU3MjFCMzFCMUQ5MDk4
REQ2RTg1MTAeFw0yNTA3MjExNjUxMjRaFw0yNjA3MjAxNjU2MjRaMDMxMTAvBgNV
BAMTKEIxQkRGQjdEQTMyMEREMzEzRDI0MDk1NTFFMkQ1MDI5OEMzNzUxOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tJa9zXkQ3DdLI0kVyYCqEy+x
F9v277EkbkrdBsj+2iiFO9K8AHMKm+6k9LT6VemWXWTAFxnqinrXyO6PP8wq3luy
keIeWmUsO1ETLA9Nj5rMVvaAaKSULrbHBrV2osin+m7qxuEWrKYRQHfzv7ayilz0
5929dd8YoEaqo7ambM7DpiyxXAQIHN7OJjpis4lNuzzO17Dh/9wd+J5qLjbA/6xe
HwWqgBTWN0+BzucIZ3TFrj2fcmhhi+Y7qjGfpRTv7x8J4xJ4ag6A5y5RlzVQkYwy
ZxwE9bzZChsvJEZZfRpUn/p8t3eyEXgBQfgdJLP84S2/ImtR6KNaq1WRoQeFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsb37faMg3TE9JAlVHi1QKYw3UZ0wHwYDVR0j
BBgwFoAUXCjIve5P3xJ0FXIbMbHZCY3W6FEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFg3ZW9UV29rd2d2a0tKZ0R6SmpLUDY5aGhrUlJWTkNYUXR6VExqMVZ3
b0wvMC81QzI4QzhCREVFNEZERjEyNzQxNTcyMUIzMUIxRDkwOThERDZFODUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDMjhDOEJERUU0RkRGMTI3
NDE1NzIxQjMxQjFEOTA5OERENkU4NTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYN2VvVFdva3dndmtLSmdEekpqS1A2OWhoa1JSVk5DWFF0elRMajFWd29MLzAv
MzIzODMwMzQzYTMyNjUzNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQuYDANBgkqhkiG9w0BAQsFAAOCAQEAWGgm3eoV
MxOyKHx62eqDXLAUEEUOVLCtpJgBI1p/bV7GfPlvB0+E+k2qYYoeJtliKu6fUMcz
uQ5cC8P/hDgBma7GbbpKzT+Mi7J+OtOcJ5SkV7MS8V8tm2BMhf2ohwHk8SjXowlq
fmARADmQYfqGwxhKLrYdSMnM+1Akr+Yl4/gKKv82VMqtoOcjFMzjNuIbqhnf0rx9
c/6GqcBGFY8u0jJ2RrKpi1qIUhQakx9R0IvQjuw+DPZW259Hm4kcXZz3lcQ8uF49
K3zrcoFx671I5xHGLVZz35LRbnWgXEdNnI5wlGNq00iTBPFzKWVEp3eQe3Y3cwB8
F7isp4xuiWiCcQ==
-----END CERTIFICATE-----