This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33332d3333203d3e20323639323239.roa
File:                     323830343a363135383a383030303a3a2f33332d3333203d3e20323639323239.roa (raw, json)
Hash identifier:          TpuPK/WQ8zJwgyFs+gEHS5bJdSbyF2U1MqbW1Tw50DQ=
Subject key identifier:   5B:6D:1E:BA:01:3A:A4:02:E3:BC:9A:B2:80:27:2C:3C:B6:31:16:55
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       023018D6CC5139508BE9BBFE7B9AE9DBC6A8D47E
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33332d3333203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:47 +0000
ROA not before:           Thu 28 Nov 2024 17:17:47 +0000
ROA not after:            Thu 27 Nov 2025 17:22:47 +0000
asID:                     269229
IP address blocks:        2804:6158:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:30:18:d6:cc:51:39:50:8b:e9:bb:fe:7b:9a:e9:db:c6:a8:d4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:47 2024 GMT
            Not After : Nov 27 17:22:47 2025 GMT
        Subject: CN=5B6D1EBA013AA402E3BC9AB280272C3CB6311655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:45:4c:23:2d:bd:5c:b9:1f:55:c5:5f:86:
                    ed:33:34:37:6b:f7:49:36:a8:6d:bf:fa:9f:ff:ad:
                    ac:11:29:fe:2a:84:b7:cb:ce:0a:05:6c:76:dc:35:
                    56:df:50:46:c7:a7:06:14:f2:4c:3b:17:73:1d:ee:
                    8d:4a:32:3b:48:58:cc:7b:48:1f:da:96:03:5a:87:
                    59:50:57:af:67:c8:c6:35:f2:23:01:a9:d6:7b:53:
                    a4:c9:1e:91:2f:fd:ae:a5:da:bd:ca:16:3e:d3:ab:
                    4b:ea:b6:aa:2f:73:56:ea:0b:47:af:f5:dd:92:a2:
                    87:6b:7c:4e:92:55:86:45:b4:12:e4:a8:54:d5:f1:
                    ae:c8:10:2d:db:be:6c:cd:73:18:4b:15:6c:b6:7e:
                    46:e9:c1:10:c8:8d:95:9b:e4:07:c1:5e:8b:7c:c2:
                    19:af:16:96:67:b9:86:6c:37:97:9b:06:31:23:ec:
                    c6:5d:43:6b:52:47:69:94:ad:83:b7:fe:05:03:01:
                    16:94:5f:53:9f:ec:52:f2:d0:e4:99:dd:5e:be:b7:
                    96:4b:59:d6:3b:de:b6:37:79:47:69:6f:97:d0:74:
                    c2:78:d8:09:6f:24:d2:3b:d7:bd:ef:3c:3c:2d:68:
                    c4:27:ec:d3:16:61:45:cf:f6:5f:84:cb:5b:42:4a:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6D:1E:BA:01:3A:A4:02:E3:BC:9A:B2:80:27:2C:3C:B6:31:16:55
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a383030303a3a2f33332d3333203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6158:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         68:2c:ac:16:a4:f7:1b:1f:0f:f6:18:0e:96:02:14:45:9d:df:
         3e:4b:78:16:33:74:35:cf:74:bf:50:f8:96:10:64:1f:be:40:
         7d:11:c4:2e:dd:9e:3f:de:83:d1:16:27:b2:3f:07:1c:8e:bc:
         a9:cc:c9:cd:ce:c6:ff:bc:0e:3f:d0:0c:08:d8:b3:cd:11:c4:
         fe:b5:2c:f3:94:db:89:06:21:fb:92:fc:45:93:c7:fb:ea:31:
         00:38:ab:ff:7d:96:8a:48:04:10:14:cc:29:9b:b5:8b:46:ed:
         74:d4:a9:0c:de:b2:98:44:fe:7a:e2:0b:b0:96:52:a5:57:6e:
         b1:02:ec:41:fa:96:fc:3f:03:24:c3:6f:d6:a1:b4:fe:53:63:
         54:d9:01:b8:7a:ba:bb:83:fe:cc:5e:da:11:80:0e:94:bd:5d:
         fc:65:72:a8:20:33:c2:91:4d:1e:af:a9:70:2a:5e:8e:e6:c3:
         83:44:48:49:0b:93:77:de:7d:ba:55:c0:60:cd:84:b6:9e:7c:
         24:54:5b:0d:b0:73:e2:4d:6b:ea:42:bc:52:5b:9b:1b:63:27:
         84:c3:bd:7a:86:e9:96:cf:da:4e:c6:8e:9a:9c:f7:06:34:14:
         0c:8a:19:06:70:62:3a:0d:e7:99:35:1e:e5:0b:07:76:c3:86:
         34:74:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----