This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a333030303a3a2f33362d3336203d3e20323634303031.roa
File:                     323830343a323934383a333030303a3a2f33362d3336203d3e20323634303031.roa (raw, json)
Hash identifier:          IeH6wTtcJnijai9zd20ELVC6iCU5Z0Ld8BqiRRvJ6Rk=
Subject key identifier:   73:AB:23:CD:D4:2C:94:BA:B0:9C:A1:B1:00:AE:66:F5:89:30:35:C2
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       2544F5DA235E0E2180F792FFB0AC7D995E9E290E
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a333030303a3a2f33362d3336203d3e20323634303031.roa
Signing time:             Fri 28 Mar 2025 13:58:03 +0000
ROA not before:           Fri 28 Mar 2025 13:53:03 +0000
ROA not after:            Fri 27 Mar 2026 13:58:03 +0000
asID:                     264001
IP address blocks:        2804:2948:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:44:f5:da:23:5e:0e:21:80:f7:92:ff:b0:ac:7d:99:5e:9e:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar 28 13:53:03 2025 GMT
            Not After : Mar 27 13:58:03 2026 GMT
        Subject: CN=73AB23CDD42C94BAB09CA1B100AE66F5893035C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:14:f7:48:6b:6e:85:3a:cc:6e:7f:98:b7:c3:
                    18:8a:48:58:a4:53:9f:cf:e7:50:a3:ac:5a:dc:93:
                    c3:31:a5:ba:d3:94:2d:92:96:88:f8:fb:e3:d3:98:
                    5a:20:4e:ad:a5:07:6f:b5:69:2f:e6:e3:52:09:af:
                    c2:7f:36:6d:2c:5b:9a:f1:21:89:43:47:bc:1d:2b:
                    66:29:e5:58:2e:c3:87:f8:05:de:e9:1c:5f:80:e6:
                    c0:97:ad:f3:4b:bc:a9:3e:5e:49:1b:26:37:c5:a3:
                    52:e2:e5:35:5c:a9:bc:4d:18:49:a2:16:25:7a:37:
                    7c:ba:97:a3:2d:ec:1d:78:52:de:34:e4:5c:07:c0:
                    12:07:8e:19:37:15:14:c5:74:ca:6e:32:b0:72:35:
                    5d:ff:06:b8:05:57:38:16:82:0e:0c:2c:b5:c2:33:
                    81:c1:8d:bf:22:30:a7:9f:9a:51:22:d9:11:46:c0:
                    ed:b8:84:c2:d3:66:ea:b6:3f:b5:c3:6c:39:2e:58:
                    65:0d:cc:23:80:ae:58:82:21:82:dd:06:c1:d2:df:
                    0d:be:6a:b1:b8:a0:3b:b6:7f:b9:44:dc:4e:10:9e:
                    bd:db:92:a5:3f:15:08:ed:3c:b3:3d:64:ef:c9:17:
                    92:3d:83:89:28:46:82:a4:6a:93:18:a1:59:fa:15:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:23:CD:D4:2C:94:BA:B0:9C:A1:B1:00:AE:66:F5:89:30:35:C2
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a333030303a3a2f33362d3336203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:79:0f:82:6d:55:eb:47:8a:bc:01:fe:a7:31:56:11:99:
         19:cc:fa:62:f2:c1:d2:9f:b6:f1:f3:6f:7e:d8:78:1a:05:c7:
         4a:ea:45:98:7e:06:b2:2f:33:06:81:10:d6:dd:df:68:61:b7:
         59:c5:09:61:9c:f4:93:4c:4f:77:5c:37:39:21:9f:d0:ea:07:
         b1:f9:f5:98:78:15:fa:41:dc:3b:02:dd:9f:f3:57:96:dc:2c:
         15:66:af:c5:ba:39:1b:29:53:61:f2:81:5a:bd:e6:6d:60:bb:
         ee:84:e6:d2:0d:f7:cd:2b:0c:c1:43:08:72:46:93:d1:da:cf:
         03:46:88:15:1d:03:20:f4:b4:c4:bb:fb:c3:0b:98:f1:16:d9:
         62:c0:44:23:25:f9:cd:bb:92:f4:9b:61:59:f0:7b:91:06:d2:
         cf:a5:2b:9c:59:1d:63:54:81:56:73:18:4d:68:2f:86:1e:a7:
         8b:29:09:00:86:e4:cd:09:9a:ac:d7:76:32:a0:05:58:0c:2d:
         ae:75:9e:5c:75:33:93:89:d0:6d:11:2a:32:06:92:2e:75:9b:
         83:3e:5c:1a:b1:ac:94:92:dc:57:46:fc:ea:7c:26:52:ea:7f:
         c8:f2:fe:27:19:64:5d:3c:36:38:6a:f8:8b:7a:58:00:af:8e:
         1c:bf:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----