This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3332203d3e20323635323536.roa
File:                     323830343a326430303a3a2f33322d3332203d3e20323635323536.roa (raw, json)
Hash identifier:          btvMofiqg9tHjoUyPUURtPfZc1EDQgOsHbSR9A9NIBc=
Subject key identifier:   F1:D4:54:B5:15:5F:66:0E:9A:D1:71:4C:46:14:C2:31:CE:9F:57:DF
Certificate issuer:       /CN=79684DFDE931D9553B72CBB4346C66B9C816C683
Certificate serial:       7664690E4578E821BB4662F832FEF771ADC37994
Authority key identifier: 79:68:4D:FD:E9:31:D9:55:3B:72:CB:B4:34:6C:66:B9:C8:16:C6:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79684DFDE931D9553B72CBB4346C66B9C816C683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3332203d3e20323635323536.roa
Signing time:             Sun 12 Jan 2025 16:51:02 +0000
ROA not before:           Sun 12 Jan 2025 16:46:02 +0000
ROA not after:            Sun 11 Jan 2026 16:51:02 +0000
asID:                     265256
IP address blocks:        2804:2d00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:64:69:0e:45:78:e8:21:bb:46:62:f8:32:fe:f7:71:ad:c3:79:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79684DFDE931D9553B72CBB4346C66B9C816C683
        Validity
            Not Before: Jan 12 16:46:02 2025 GMT
            Not After : Jan 11 16:51:02 2026 GMT
        Subject: CN=F1D454B5155F660E9AD1714C4614C231CE9F57DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:29:e2:f7:09:c0:a1:73:de:52:df:69:d8:
                    35:3c:a9:d1:9c:a6:34:bd:83:b0:aa:59:61:4e:b5:
                    f8:4d:9a:19:19:54:4f:69:1a:ba:df:e1:3b:4e:d9:
                    2d:9d:72:a6:3a:6f:96:24:7c:cf:11:de:9f:af:7e:
                    8d:65:0f:80:ff:84:05:1d:b9:f0:ed:b4:3d:50:7c:
                    3c:e9:04:13:32:f9:7c:61:04:d4:5e:14:6d:91:6f:
                    e7:bb:ca:9f:62:b9:42:c1:d5:ec:a4:89:ca:25:0a:
                    ce:6c:44:1c:83:5f:8f:ee:67:b6:5e:dd:f7:b5:5b:
                    81:81:7e:56:67:5a:25:18:24:f6:78:37:d0:50:ff:
                    db:80:65:3b:62:a8:52:ec:94:b3:bb:e7:8d:21:9e:
                    7e:77:4d:59:b5:50:ee:30:ad:7b:9d:65:57:19:58:
                    ee:97:b6:4a:28:56:21:54:e1:97:54:4d:44:8c:89:
                    52:28:68:e3:56:1e:ac:e6:81:f5:90:79:3f:dd:bb:
                    da:25:51:57:f4:ba:b5:3f:c5:cc:b5:16:aa:2f:6f:
                    e6:82:e1:68:5b:9a:11:c1:a1:4b:c6:26:51:19:cd:
                    70:15:10:94:88:a1:1b:44:f9:e5:bf:b0:5d:23:8b:
                    d3:37:9b:29:fa:a6:18:60:13:c3:3a:11:b1:46:26:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D4:54:B5:15:5F:66:0E:9A:D1:71:4C:46:14:C2:31:CE:9F:57:DF
            X509v3 Authority Key Identifier:
                keyid:79:68:4D:FD:E9:31:D9:55:3B:72:CB:B4:34:6C:66:B9:C8:16:C6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/79684DFDE931D9553B72CBB4346C66B9C816C683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79684DFDE931D9553B72CBB4346C66B9C816C683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3332203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a7:a9:4e:ff:dd:4d:41:78:f1:ea:de:00:c9:58:63:fb:13:
         e3:5e:e4:3e:72:0b:e6:3b:de:23:58:5f:76:d2:7c:0c:17:75:
         f6:8e:6b:68:4a:20:ff:c6:36:ea:14:00:5b:47:8b:53:80:0d:
         a0:3d:77:e9:52:e5:3d:a7:9e:f1:63:f5:2f:92:a7:bc:c6:40:
         d1:6a:16:7e:5d:04:ba:dc:af:0f:dd:00:da:6d:fe:cf:1b:4c:
         3b:95:d3:e6:e0:8c:ae:14:4f:11:3b:26:b5:61:70:26:63:6f:
         83:93:6f:8c:12:50:51:c7:70:4d:a5:43:15:df:2b:ab:04:43:
         33:77:40:8a:25:23:d7:c8:f9:93:78:65:8a:33:be:bc:1f:63:
         33:54:74:bd:85:31:0a:c5:d3:8d:93:f6:93:f0:08:8f:46:cf:
         fe:ac:e3:b0:c3:3e:c5:d6:19:ff:db:20:85:04:8c:76:55:c6:
         a1:2e:13:1e:a9:80:2f:cb:0e:69:68:1e:80:3b:06:61:cb:4b:
         c6:4f:22:18:fa:9f:3e:68:1c:4b:36:70:15:2c:57:70:7a:52:
         b0:d8:8f:38:63:d4:37:f4:a9:62:4c:c9:a6:a6:5f:bd:36:a0:
         26:51:e1:6e:e3:e9:a4:c8:fc:3b:4d:80:e0:d5:2c:f9:59:7b:
         36:a2:85:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----