This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a333030303a3a2f34382d3438203d3e203238313238.roa
File:                     323830343a333435383a333030303a3a2f34382d3438203d3e203238313238.roa (raw, json)
Hash identifier:          D0ZyEMjbEKnyYk1EFcG5IFBsOojLhrDVkqnHbZedhAY=
Subject key identifier:   AF:06:7A:BA:30:DA:67:13:30:82:9B:08:79:CC:C4:06:8A:DD:BF:A6
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       2190F010B1E59C93163C49EA71499F05D7FAF7C1
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a333030303a3a2f34382d3438203d3e203238313238.roa
Signing time:             Tue 07 Oct 2025 09:07:46 +0000
ROA not before:           Tue 07 Oct 2025 09:02:46 +0000
ROA not after:            Tue 06 Oct 2026 09:07:46 +0000
asID:                     28128
IP address blocks:        2804:3458:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:90:f0:10:b1:e5:9c:93:16:3c:49:ea:71:49:9f:05:d7:fa:f7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Oct  7 09:02:46 2025 GMT
            Not After : Oct  6 09:07:46 2026 GMT
        Subject: CN=AF067ABA30DA671330829B0879CCC4068ADDBFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:53:bf:39:76:76:58:cf:99:e5:65:87:27:
                    48:ef:89:86:3d:d2:cc:53:75:f9:ec:6a:7c:74:86:
                    18:29:da:77:0c:99:8d:d8:f0:25:25:30:15:70:d9:
                    6e:99:38:bc:f1:37:83:d1:6f:ee:75:4f:34:d8:ca:
                    ba:18:4d:24:7c:00:ab:07:7c:4e:db:70:ff:5b:9b:
                    0c:cc:9e:03:3e:13:d4:be:2b:19:12:7a:a7:a9:76:
                    5e:6c:3a:5d:80:6e:31:02:07:5b:6a:7c:c2:3f:f7:
                    12:5f:86:a5:73:21:d3:3d:c3:aa:44:3d:5e:81:3d:
                    98:60:56:93:73:f1:6a:36:9c:e6:98:75:e0:26:41:
                    c6:de:ae:1b:80:92:fc:d7:26:16:db:81:87:3a:c3:
                    1a:af:6a:92:e2:6c:91:1d:04:d5:df:f6:12:f3:1c:
                    bc:70:52:e5:2b:e5:78:56:5d:0a:f5:51:56:80:6c:
                    91:2e:b2:4c:b3:a6:49:27:32:84:ac:13:85:e5:b8:
                    48:90:f4:5b:40:ec:9b:e6:75:16:40:68:3e:4f:44:
                    bb:9f:7c:bf:6f:88:c2:ab:f6:ee:92:a0:23:39:93:
                    f6:00:51:b8:20:04:4c:71:98:16:f7:c6:90:fa:34:
                    e0:cf:07:14:26:36:01:0d:52:6e:37:92:95:f3:e0:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:06:7A:BA:30:DA:67:13:30:82:9B:08:79:CC:C4:06:8A:DD:BF:A6
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a333030303a3a2f34382d3438203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3458:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:c5:ad:37:86:83:c4:15:e2:d7:bb:ba:a8:d7:c2:34:f3:
         60:79:0d:78:e3:54:fc:fb:6c:1d:27:20:5a:e1:84:a7:60:78:
         7b:96:0a:e8:3f:3f:e4:07:0f:24:df:67:d2:3f:a5:9a:22:a9:
         b5:36:d8:fd:5f:b6:96:2e:d4:17:34:0e:8a:48:39:80:c7:fc:
         05:12:08:65:33:5e:1f:fb:c9:36:01:7a:e0:db:70:17:71:6f:
         e1:ed:a2:5c:70:67:b8:3a:85:7f:c5:81:c8:8c:ec:44:75:68:
         5d:53:fa:bb:9b:e6:52:5d:4c:28:d6:67:9a:99:12:79:bd:f6:
         07:73:65:1d:75:f0:1d:42:50:85:38:03:83:8a:e6:d3:64:b9:
         c4:58:f7:9c:6b:86:d3:f9:1c:75:c1:a1:b5:35:d2:fa:97:59:
         23:c0:05:c4:7c:fd:53:15:2d:ce:ac:5b:58:84:d7:6d:ab:9d:
         50:24:25:b5:ae:a9:e6:df:e0:dc:b5:64:e8:c0:1b:a3:30:58:
         cd:67:fc:1f:48:89:14:b3:8c:66:f6:76:b3:60:28:0d:b8:37:
         29:44:90:b0:a4:6f:e3:7f:7c:f1:3e:e8:b5:c2:e6:ec:8f:7b:
         30:ce:f9:07:ac:66:c5:f1:2c:9d:fd:e6:16:14:c9:c5:52:2c:
         aa:4d:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----