This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33342d3334203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33342d3334203d3e20323638333038.roa (raw, json)
Hash identifier:          /rhqmS8SWSdKv++Ykus1TN2RrFEVBcq0KQIgt1v+WGw=
Subject key identifier:   53:6E:C7:E0:CD:7C:89:F7:97:13:C6:B4:DC:08:17:C9:54:B5:9C:4D
Certificate issuer:       /CN=8D04B01D1AC6E397E778A8BB24BF8A398E2E8187
Certificate serial:       0C20331FA3C2CC13ACC3F8D22CCB696541B6C2B9
Authority key identifier: 8D:04:B0:1D:1A:C6:E3:97:E7:78:A8:BB:24:BF:8A:39:8E:2E:81:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33342d3334203d3e20323638333038.roa
Signing time:             Fri 12 Sep 2025 19:44:52 +0000
ROA not before:           Fri 12 Sep 2025 19:39:52 +0000
ROA not after:            Fri 11 Sep 2026 19:44:52 +0000
asID:                     268308
IP address blocks:        2804:4f28::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:33:1f:a3:c2:cc:13:ac:c3:f8:d2:2c:cb:69:65:41:b6:c2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D04B01D1AC6E397E778A8BB24BF8A398E2E8187
        Validity
            Not Before: Sep 12 19:39:52 2025 GMT
            Not After : Sep 11 19:44:52 2026 GMT
        Subject: CN=536EC7E0CD7C89F79713C6B4DC0817C954B59C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:00:05:2f:d7:71:63:81:9a:c8:a2:9c:76:
                    12:ef:33:77:ef:e7:6c:2e:04:d7:0a:d1:d7:69:50:
                    45:23:e4:ee:e2:26:22:8a:02:4c:ea:04:ab:da:9d:
                    45:b6:c6:fa:34:13:46:a1:37:db:91:9c:56:f3:c2:
                    6f:eb:cf:dd:1d:58:4a:15:f2:d3:b2:75:06:ff:92:
                    09:59:4b:65:10:4b:ff:2a:18:06:d5:d0:bf:cc:15:
                    b2:bb:39:ab:67:e8:49:a7:66:46:9a:66:c3:b1:56:
                    ff:a7:be:75:18:b7:bc:ce:a1:7d:5a:14:54:41:64:
                    29:31:e6:c6:7e:f3:db:96:06:ac:cf:6a:f3:43:f2:
                    6c:be:98:3c:23:55:30:3c:c6:27:0b:fe:59:12:19:
                    57:67:42:1d:3c:08:ce:69:a0:71:be:6d:09:83:4d:
                    b3:4c:82:65:88:55:6b:c8:03:ba:59:18:f4:7a:ce:
                    53:14:d1:78:79:26:b2:1c:87:de:8e:54:42:a5:e7:
                    4a:23:ce:8a:d1:41:73:71:a6:92:12:f7:e0:3d:9d:
                    7c:29:b9:be:af:f4:b8:f4:16:65:4a:00:08:88:b0:
                    58:7d:91:ae:95:ba:71:f9:50:39:55:88:d0:0e:08:
                    6e:92:31:5e:75:80:10:01:4e:d0:fa:0e:bf:1b:a0:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:C7:E0:CD:7C:89:F7:97:13:C6:B4:DC:08:17:C9:54:B5:9C:4D
            X509v3 Authority Key Identifier:
                keyid:8D:04:B0:1D:1A:C6:E3:97:E7:78:A8:BB:24:BF:8A:39:8E:2E:81:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33342d3334203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:14:d6:25:e3:0f:d4:8b:61:cc:e4:38:0a:47:1c:b0:a0:2f:
         d6:eb:07:d9:65:9c:70:8a:01:d1:31:2c:10:fc:13:77:77:47:
         ca:5e:37:5d:12:ac:7b:e5:82:c0:34:7e:ce:34:08:70:08:72:
         64:15:1f:f6:72:7b:c6:8d:9d:ca:02:c3:0d:09:9a:34:23:ab:
         da:dc:6f:c2:f0:9d:d7:cc:c4:37:c0:d5:a7:c9:d9:3f:01:be:
         9c:50:78:60:f7:b7:17:b4:d3:47:c8:2c:61:84:27:c8:41:90:
         8c:a0:fc:9a:28:b9:bd:7d:fe:32:5c:17:87:e9:cb:4f:7a:29:
         f0:85:29:f5:6c:95:50:16:d0:49:f6:ef:2e:7d:f1:3e:f0:6f:
         19:4a:17:f7:40:2b:2f:28:32:45:c1:62:37:1b:2f:20:1d:97:
         82:cd:33:72:33:87:ea:5a:aa:b2:5d:ab:93:df:83:64:91:2d:
         e1:6f:67:f3:e4:94:0d:d7:8a:ce:c2:9f:b4:bf:9b:a7:a5:da:
         40:18:26:4b:d1:d9:47:54:47:23:5f:ee:ed:16:b6:76:c1:7b:
         f2:b0:cd:74:f3:e8:83:7f:04:8c:3c:17:c7:d1:f0:04:1d:a3:
         eb:aa:90:22:00:69:fd:2a:0f:ab:5d:0c:ec:71:29:5e:1b:40:
         6f:50:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----