This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa
File:                     323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa (raw, json)
Hash identifier:          cBzw6/yw/M4zElaR6zEB4PtRmRbnBKrP8bxgLZc0xe8=
Subject key identifier:   2A:39:90:3E:EF:BE:03:53:84:58:4F:6D:0F:12:52:6C:8B:C3:83:37
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       7DA655F11AD5300EEB88B569C0F045CB0E01B0CA
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:48 +0000
ROA not before:           Thu 06 Mar 2025 08:04:48 +0000
ROA not after:            Thu 05 Mar 2026 08:09:48 +0000
asID:                     264137
IP address blocks:        2804:2304:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:55:f1:1a:d5:30:0e:eb:88:b5:69:c0:f0:45:cb:0e:01:b0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:48 2025 GMT
            Not After : Mar  5 08:09:48 2026 GMT
        Subject: CN=2A39903EEFBE035384584F6D0F12526C8BC38337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:43:5f:bf:10:3b:31:c4:35:fc:aa:09:3a:
                    3e:95:aa:7a:00:7f:73:48:0e:69:9e:27:bc:f4:ce:
                    03:5a:5b:31:84:5c:a6:dc:a6:a4:ed:10:ad:99:22:
                    46:54:68:76:78:12:f5:2e:4b:2a:26:db:8f:ba:65:
                    08:fb:ce:e6:df:f0:e1:f4:30:37:cb:3f:bc:4a:7d:
                    2b:4b:c1:87:3d:72:3c:3e:c0:61:78:32:03:4f:e9:
                    9c:28:88:18:3d:4c:af:23:a9:0f:b1:af:10:52:8a:
                    b5:91:7a:3d:71:65:44:ca:63:c1:e7:d2:ad:dc:a8:
                    87:1d:e2:ca:d2:f6:d4:64:9f:64:f6:c1:7e:36:13:
                    79:74:6c:81:8d:b5:2b:00:7d:87:b4:83:f7:2f:17:
                    4e:55:a9:28:73:a9:7b:a5:96:ba:e4:80:c3:5b:2a:
                    ef:aa:3d:fd:83:e3:c8:43:d6:bb:7c:b6:10:2a:44:
                    d1:04:4b:5d:fc:32:57:a4:6b:81:71:af:04:cf:96:
                    37:cd:8a:78:71:d2:b9:ec:af:98:b2:af:0b:50:8c:
                    65:70:a4:68:fb:a4:42:e1:9e:b0:05:c9:ed:d6:fc:
                    bd:ea:98:df:e8:b9:20:08:0a:1f:82:c3:c3:82:f1:
                    c2:cf:c2:57:52:3f:34:80:fa:ec:ed:2d:21:26:34:
                    4f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:90:3E:EF:BE:03:53:84:58:4F:6D:0F:12:52:6C:8B:C3:83:37
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:a8:29:c7:36:ab:4e:55:3c:93:af:c5:0e:81:79:4a:e1:
         f0:1d:2b:c7:96:0b:3e:f1:97:83:5f:7a:b7:7f:58:98:54:47:
         4d:d1:5b:b9:1c:00:46:8d:a0:f7:a6:64:70:77:ed:75:6c:3a:
         f1:bf:f7:11:8c:a8:37:12:2f:a8:9a:3f:6d:0f:e6:47:b3:1a:
         3d:d7:d1:6e:36:62:fc:73:64:db:14:30:64:f4:10:d9:4b:4a:
         df:9c:bb:21:28:1a:29:ee:9c:37:d1:45:b7:53:3b:91:eb:14:
         62:0c:3a:cc:42:ab:0d:07:49:de:a8:7c:18:f0:a5:fc:59:03:
         19:d7:6f:74:a9:0c:c4:30:cc:1b:59:82:53:af:60:91:c8:cb:
         63:8f:b3:2f:67:86:ab:e3:ee:2b:f3:9b:cd:94:b5:bf:e5:b4:
         40:fc:d5:0c:63:95:ad:a5:9e:b3:bb:9c:c7:fe:59:af:80:a3:
         30:0a:51:81:0f:40:3e:24:28:f9:57:ab:d9:17:ec:f4:b4:3e:
         fc:d8:92:c5:e5:9a:1b:47:f8:24:20:5a:2e:99:dd:23:03:60:
         fe:41:08:52:43:3c:a1:8c:cc:01:4c:91:79:41:c6:48:ec:7c:
         4d:54:16:4e:42:de:8e:0b:16:de:70:bd:39:e7:98:10:6b:94:
         c8:9d:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----