This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/323830343a363731633a3a2f33322d3332203d3e20323639363034.roa
File:                     323830343a363731633a3a2f33322d3332203d3e20323639363034.roa (raw, json)
Hash identifier:          rK+5vnx2SK/pv0eI6PIPn+ebs9N7pRwGpYgPKSmk3pA=
Subject key identifier:   04:7F:02:4F:6A:27:64:FD:D4:B6:AA:6B:AC:D0:E0:62:65:ED:E6:69
Certificate issuer:       /CN=80203E22C8FA0050317D1387223B6C2E9CFE204B
Certificate serial:       0EABDD7DA03BD76948464BFFECC185EAFEE6BCA4
Authority key identifier: 80:20:3E:22:C8:FA:00:50:31:7D:13:87:22:3B:6C:2E:9C:FE:20:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80203E22C8FA0050317D1387223B6C2E9CFE204B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/323830343a363731633a3a2f33322d3332203d3e20323639363034.roa
Signing time:             Thu 01 May 2025 22:43:33 +0000
ROA not before:           Thu 01 May 2025 22:38:33 +0000
ROA not after:            Thu 30 Apr 2026 22:43:33 +0000
asID:                     269604
IP address blocks:        2804:671c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ab:dd:7d:a0:3b:d7:69:48:46:4b:ff:ec:c1:85:ea:fe:e6:bc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80203E22C8FA0050317D1387223B6C2E9CFE204B
        Validity
            Not Before: May  1 22:38:33 2025 GMT
            Not After : Apr 30 22:43:33 2026 GMT
        Subject: CN=047F024F6A2764FDD4B6AA6BACD0E06265EDE669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:8c:6a:f2:1f:10:21:56:d2:18:f1:2f:9b:
                    94:9b:50:b1:e2:16:9c:13:7f:53:93:95:0f:bf:95:
                    06:61:05:70:dd:32:b4:9a:85:9c:e3:27:b8:75:ad:
                    67:86:b5:08:d8:7b:6a:5f:36:f1:ec:09:ee:75:46:
                    eb:f4:c3:ae:7b:83:81:31:d5:f4:f3:6e:e2:b4:56:
                    02:7a:e0:e6:7f:d4:3a:31:2d:d3:a2:f8:d5:26:77:
                    d1:8d:36:74:e5:94:dc:96:8a:3d:22:69:ac:a7:98:
                    b2:d8:ec:f6:4c:bb:b4:6c:dd:6c:f1:39:57:92:68:
                    6a:04:42:c9:97:b7:32:ac:1f:13:dc:4b:8d:94:c4:
                    c7:69:ab:14:21:49:90:fd:c2:a5:17:46:9e:67:8f:
                    83:a2:21:f8:27:f2:17:5a:d2:ac:53:4e:15:1e:ea:
                    3b:cc:8e:2b:64:cc:1e:48:40:7a:db:0a:15:0b:b2:
                    6f:f6:9e:4e:72:41:1c:61:2b:56:8d:2b:5b:ec:5a:
                    a1:bc:c0:7d:a1:3a:6c:6f:ba:58:b7:10:39:47:54:
                    b8:54:64:e0:98:fc:1c:a0:65:0d:68:76:a5:9b:ff:
                    dd:e9:30:25:53:a7:d4:84:72:b6:1c:42:a2:d0:db:
                    d3:c8:c8:75:01:e6:5d:a5:6d:7c:f4:aa:90:ae:75:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7F:02:4F:6A:27:64:FD:D4:B6:AA:6B:AC:D0:E0:62:65:ED:E6:69
            X509v3 Authority Key Identifier:
                keyid:80:20:3E:22:C8:FA:00:50:31:7D:13:87:22:3B:6C:2E:9C:FE:20:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/80203E22C8FA0050317D1387223B6C2E9CFE204B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80203E22C8FA0050317D1387223B6C2E9CFE204B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/323830343a363731633a3a2f33322d3332203d3e20323639363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:671c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:c0:50:9f:52:b5:1a:20:1c:dd:ad:89:be:e2:b8:bc:de:7e:
         94:37:57:7c:e9:f6:2c:94:bd:09:83:09:c5:80:dc:84:f5:2a:
         b3:9a:18:c1:56:e2:2e:24:29:0f:e3:de:7e:5a:04:42:1a:6a:
         cd:b4:7d:38:42:44:59:9c:47:b7:ff:5e:97:f5:a2:65:bc:f8:
         6e:97:08:f7:51:54:b0:e6:f1:a3:e4:bb:a7:71:82:2e:d2:e0:
         77:c9:db:d3:a9:97:82:da:3d:07:63:f6:d7:3b:49:2b:ec:7a:
         2e:83:7a:d9:c2:14:a6:6e:82:ca:09:bb:b1:66:71:ea:9c:db:
         69:8c:69:6b:91:fd:18:83:24:35:09:f7:3f:14:66:1e:af:a9:
         8e:ca:33:5e:ed:d2:c6:c8:38:ec:be:23:ff:07:c5:6f:57:ec:
         5d:c4:3c:42:db:ec:25:7b:24:6a:0c:24:fa:52:97:d9:ef:f8:
         63:83:05:03:15:d9:d5:0e:85:c9:ab:e5:c7:70:60:26:0e:0d:
         60:de:92:4f:6a:8c:f0:65:2e:52:3b:f1:83:41:7b:e5:a7:05:
         1e:1a:23:25:35:80:0c:1f:c2:ce:b9:5c:bf:17:83:2b:c3:16:
         b9:03:55:36:58:5f:aa:f8:0a:4f:9d:ba:e7:2a:5e:47:60:46:
         ea:00:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----