This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a353030303a3a2f34382d3438203d3e203238313238.roa
File:                     323830343a333435383a353030303a3a2f34382d3438203d3e203238313238.roa (raw, json)
Hash identifier:          Qb9ZtpJgE7bdR81vzZiF+QWs5Zu4DrLmrUzu+K5d1ac=
Subject key identifier:   DE:BA:9A:C2:A3:AD:86:D8:F3:F9:47:36:52:F3:47:8B:5D:91:80:7F
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       1FA17457B354D4E323A266ACC1401FC1687A33E8
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a353030303a3a2f34382d3438203d3e203238313238.roa
Signing time:             Tue 07 Oct 2025 09:07:50 +0000
ROA not before:           Tue 07 Oct 2025 09:02:50 +0000
ROA not after:            Tue 06 Oct 2026 09:07:50 +0000
asID:                     28128
IP address blocks:        2804:3458:5000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a1:74:57:b3:54:d4:e3:23:a2:66:ac:c1:40:1f:c1:68:7a:33:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Oct  7 09:02:50 2025 GMT
            Not After : Oct  6 09:07:50 2026 GMT
        Subject: CN=DEBA9AC2A3AD86D8F3F9473652F3478B5D91807F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:1c:e7:12:25:4e:50:89:4d:f7:8d:92:dd:
                    dd:70:6d:4a:67:76:11:c7:83:4c:72:cb:e9:77:72:
                    81:52:02:43:d2:ef:a9:7b:7e:e9:89:55:c1:af:3d:
                    a7:f3:49:ca:03:e5:c4:c5:4c:89:8c:ac:e4:4c:84:
                    73:f6:1c:fc:37:32:82:5a:b4:72:9e:8c:56:78:56:
                    17:58:20:03:be:06:2a:97:3c:63:1b:26:3d:b3:b2:
                    0a:51:a3:fa:05:27:8b:58:1f:30:b2:65:94:e5:ee:
                    9c:bf:9f:a6:63:d8:54:90:9c:98:b5:c8:a4:c7:c1:
                    bf:8c:de:dc:5f:39:41:d3:6d:0e:f1:28:98:25:81:
                    eb:06:4a:31:26:8f:59:3e:e6:89:4b:84:a6:2c:5b:
                    1a:24:24:9f:df:79:48:46:dc:55:05:26:59:7d:13:
                    4b:f9:66:e1:5d:a4:31:9f:e9:fd:bc:1a:57:b4:04:
                    cf:f4:08:91:eb:79:e4:99:a4:39:62:16:b8:7c:96:
                    79:11:32:66:7c:d1:96:e5:55:5c:d1:1a:ee:0d:ce:
                    fe:1c:0a:a2:19:52:3c:c3:ba:c8:39:64:42:5f:ee:
                    a5:f5:0b:f0:2d:76:1d:d2:14:81:76:b8:0c:9b:ce:
                    01:7b:7b:92:bc:7f:4b:08:51:9e:a8:f6:ad:32:56:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BA:9A:C2:A3:AD:86:D8:F3:F9:47:36:52:F3:47:8B:5D:91:80:7F
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a353030303a3a2f34382d3438203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3458:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:04:3c:45:d1:3c:30:af:6f:00:1f:49:67:79:b6:c3:2f:8f:
         65:5c:bd:4e:cf:e1:a6:d8:d2:06:ee:32:42:aa:ba:cf:3f:86:
         e9:a4:fb:03:a5:0e:2f:76:4c:15:9f:68:56:a1:e8:89:aa:3f:
         7f:b9:a1:da:74:c9:1e:a9:90:7c:1c:98:cb:d1:03:21:5f:23:
         76:5b:64:3c:d0:ad:51:ad:dd:88:d5:51:72:87:d3:ca:59:f8:
         14:ba:de:87:03:90:0e:8a:ef:c3:3e:84:62:7e:d7:34:d2:25:
         15:f0:1b:06:c9:f1:aa:ef:9c:2c:b4:6d:49:7a:c9:e5:fb:61:
         a5:1d:79:c4:08:2d:1d:d4:23:de:0f:81:4d:40:56:7c:ee:df:
         d2:ea:ae:48:9f:44:5d:c9:88:54:7d:b7:a6:d8:42:f3:8b:f6:
         90:6f:cc:fd:1a:06:90:f7:f6:3b:55:80:35:18:8c:c3:d0:44:
         3d:7e:11:0a:56:6f:85:ab:2a:9f:8a:66:d7:2f:63:88:84:40:
         5f:7d:bd:2e:c1:ca:10:3e:14:a0:11:15:bb:9f:1d:c5:ae:fd:
         a9:e4:98:6c:9c:ab:ff:3e:6a:84:da:5c:9e:b5:ed:39:a2:f3:
         15:85:a7:7f:3a:83:49:26:86:eb:ef:26:d7:a6:28:13:0c:28:
         b4:aa:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----