This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          enkQ4xO77yxHr0LbGxyZd7R43eii/zTEkwNXCtbL2MA=
Subject key identifier:   39:26:DB:FE:F1:BF:56:92:8C:CA:F8:3E:B2:60:94:16:F1:F9:2E:98
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       5FC22F9FCA214719F57971A01FA8F239532E1C19
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:47 +0000
ROA not before:           Thu 06 Mar 2025 08:04:47 +0000
ROA not after:            Thu 05 Mar 2026 08:09:47 +0000
asID:                     264137
IP address blocks:        2804:2304:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c2:2f:9f:ca:21:47:19:f5:79:71:a0:1f:a8:f2:39:53:2e:1c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:47 2025 GMT
            Not After : Mar  5 08:09:47 2026 GMT
        Subject: CN=3926DBFEF1BF56928CCAF83EB2609416F1F92E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:45:e9:25:23:83:5b:b9:f6:95:3d:6c:fd:
                    2a:9b:25:6e:34:c2:51:b4:9f:f8:e6:9e:76:dc:2a:
                    47:01:0a:52:b7:9f:b9:cf:78:e8:11:5c:a7:ab:38:
                    25:81:d9:a0:9e:bd:73:6e:79:fe:3f:53:de:ab:f1:
                    3a:51:ca:b5:15:81:02:5b:04:fa:cc:32:d8:71:33:
                    73:a9:58:c9:78:54:f7:f4:40:45:6d:b8:20:b3:dc:
                    73:b7:51:c1:b2:e6:e0:db:9e:5a:85:30:91:fd:e8:
                    9b:ba:83:0d:44:8d:6c:10:49:0e:8d:6b:e8:06:c8:
                    c8:96:86:20:35:fb:be:4e:cf:97:c6:2d:af:c8:a6:
                    d8:41:2a:21:8d:e1:9f:62:73:e7:42:6c:ab:06:b3:
                    c5:52:92:8f:98:97:d1:da:85:b2:5f:f3:d6:86:6b:
                    7e:ae:ea:45:5a:30:94:18:4f:7f:4f:46:1f:3f:04:
                    c4:0a:a2:a0:15:a1:58:ca:e3:8e:01:fb:68:32:c9:
                    75:8c:00:5b:ac:40:45:77:a2:c6:c8:fa:74:f7:5d:
                    fc:3c:45:44:e6:78:2c:a1:0c:69:60:fa:54:78:3a:
                    d3:39:65:10:df:75:55:00:19:d3:53:50:21:64:2d:
                    12:e8:57:f4:e3:6f:bd:53:5a:2e:40:8a:1c:42:17:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:DB:FE:F1:BF:56:92:8C:CA:F8:3E:B2:60:94:16:F1:F9:2E:98
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:fc:b1:c7:de:85:b8:0d:28:4b:d0:10:c5:66:73:82:7f:
         c7:32:22:7f:1e:11:65:15:97:90:61:7d:4d:07:b6:5f:c8:e9:
         a1:c8:6a:50:20:03:75:f3:3e:ce:6d:06:a2:83:dc:e3:62:07:
         9a:12:24:2e:2f:6b:32:a8:fc:a2:95:5e:83:9c:2a:eb:c0:34:
         97:e4:2c:9c:d3:b0:5b:8d:66:4b:a6:cc:2b:9a:4b:6c:ae:92:
         d3:d1:bf:49:a7:dc:6a:e5:6b:e9:4c:08:e1:2d:94:ff:8f:b5:
         f8:7a:8d:56:c3:3f:34:12:76:9a:f7:1b:2c:0b:a9:74:96:03:
         3b:f9:86:52:a7:e4:d4:51:2f:a4:c1:d8:1f:22:e1:3e:aa:69:
         fc:23:9e:65:1c:24:d8:c7:6a:8d:d7:ef:c6:06:fa:f9:02:04:
         d3:f6:e4:8b:35:e2:c4:3c:78:03:8c:d5:aa:e2:13:d4:a7:6c:
         fa:bc:ff:b3:b0:2b:15:90:04:f9:c9:a9:58:37:fd:c6:56:32:
         12:08:5d:c1:95:a6:25:72:53:50:e5:0a:02:80:f5:d3:86:1f:
         6d:c2:f6:45:ea:0d:f4:6a:e5:a9:a2:64:26:fa:fd:6a:00:8d:
         b8:3e:2a:71:e8:36:69:b7:2c:27:27:c8:e3:fb:98:4e:fb:a1:
         d8:13:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----