This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33332d3333203d3e20323730383830.roa
File:                     323830343a373264633a3a2f33332d3333203d3e20323730383830.roa (raw, json)
Hash identifier:          iIJ4EZV1R6amdSz5aGKQtS6Kvg2xFxIS3sgUaEzy7Wc=
Subject key identifier:   04:55:91:CE:D1:3C:F3:1B:4D:48:32:78:03:2B:11:08:E5:E3:C6:55
Certificate issuer:       /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial:       084E4265D24CBA72AAF3786B8EE1A416A4D5AF6F
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33332d3333203d3e20323730383830.roa
Signing time:             Mon 04 Dec 2023 19:48:51 +0000
ROA not before:           Mon 04 Dec 2023 19:43:51 +0000
ROA not after:            Mon 02 Dec 2024 19:48:51 +0000
asID:                     270880
IP address blocks:        2804:72dc::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4e:42:65:d2:4c:ba:72:aa:f3:78:6b:8e:e1:a4:16:a4:d5:af:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Validity
            Not Before: Dec  4 19:43:51 2023 GMT
            Not After : Dec  2 19:48:51 2024 GMT
        Subject: CN=045591CED13CF31B4D483278032B1108E5E3C655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:86:c2:4d:5b:da:74:7b:68:9d:71:02:50:
                    3b:06:7f:3f:14:c2:ad:3e:ce:13:f8:a7:78:30:b7:
                    d5:7f:29:13:8d:d7:b4:79:31:df:ba:03:fb:77:77:
                    ef:18:3a:e4:04:d6:ea:2d:26:29:41:74:41:ad:33:
                    9b:95:fa:a5:58:22:a3:f3:7e:6c:0e:18:19:ba:c4:
                    80:7c:7d:ad:cf:5b:71:f3:f8:ea:89:ef:77:df:fc:
                    e3:23:55:98:ec:cd:c3:ef:c2:f0:21:29:6d:b0:e4:
                    66:cd:a6:df:10:de:9e:7c:f7:12:0f:91:93:34:d3:
                    11:16:ac:c9:b0:88:48:e9:5a:11:e1:f9:0c:5e:1c:
                    a1:9b:e9:56:11:f9:ce:3c:f1:e5:07:7c:c7:f9:a4:
                    d6:a5:57:ce:54:af:4c:28:2e:00:ad:21:a6:c6:75:
                    74:cf:df:6b:a2:71:eb:e9:ef:4d:94:8f:a5:e4:29:
                    7b:6a:ee:f3:17:23:07:21:35:6f:81:6b:5a:34:bb:
                    45:59:b3:66:84:65:61:d5:89:5d:c7:9e:6a:e1:09:
                    20:f9:84:f3:54:68:63:7d:9a:f1:5e:d0:c1:1f:7c:
                    72:af:93:0d:86:ec:da:6a:c2:50:16:d5:c0:e4:44:
                    ea:29:72:a6:30:18:11:3d:60:fb:8a:09:8b:f2:9d:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:55:91:CE:D1:3C:F3:1B:4D:48:32:78:03:2B:11:08:E5:E3:C6:55
            X509v3 Authority Key Identifier:
                keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33332d3333203d3e20323730383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72dc::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:00:da:12:8c:0c:68:ac:72:4f:02:f9:49:20:12:6a:82:47:
         43:ec:af:8e:d4:3a:e2:1f:bc:9e:d4:30:bb:f4:f0:e8:f7:9f:
         69:cd:df:4c:e9:43:1e:6d:af:92:31:27:b7:33:0b:79:0e:be:
         c2:88:17:17:b4:32:4c:c0:ef:cd:c6:c1:e2:c7:67:f5:2c:1f:
         4e:9e:a6:98:29:da:d5:2f:fe:eb:a9:2d:3b:34:7f:30:8e:24:
         a5:d0:da:29:db:ee:ab:6c:1c:34:80:3d:8c:a3:1d:8c:b3:58:
         b2:ce:e6:e8:a5:d6:5e:a3:61:b3:88:e0:cc:e3:81:1a:e2:03:
         93:41:23:89:1f:47:27:6e:7f:28:32:fb:51:a9:0b:09:48:e6:
         82:d3:c3:ca:fa:45:ad:db:03:54:1f:18:2c:18:c2:2f:0c:29:
         1c:ef:e8:0d:58:c3:ed:70:e7:d8:fc:89:61:c8:4c:41:b7:15:
         70:ce:1a:9b:9f:b0:e1:47:36:38:ca:cb:b4:1b:2e:d0:6b:96:
         c8:0e:ee:43:00:bb:78:01:08:ef:70:c1:7f:ac:d1:eb:df:27:
         48:5e:df:1c:84:e1:9e:bd:f1:19:ff:b9:99:6d:58:0c:56:e5:
         bb:a1:43:f8:ab:ae:7b:cc:8d:e0:bb:a3:66:62:4a:e6:e2:cb:
         49:94:d9:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCE5CZdJMunKq83hrjuGkFqTVr28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBQUVDQkMzNDI2RDM4MTI1NjI5OUMyRDZFN0Y2RkM2
MkM4RURFQzAeFw0yMzEyMDQxOTQzNTFaFw0yNDEyMDIxOTQ4NTFaMDMxMTAvBgNV
BAMTKDA0NTU5MUNFRDEzQ0YzMUI0RDQ4MzI3ODAzMkIxMTA4RTVFM0M2NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzYbCTVvadHtonXECUDsGfz8U
wq0+zhP4p3gwt9V/KRON17R5Md+6A/t3d+8YOuQE1uotJilBdEGtM5uV+qVYIqPz
fmwOGBm6xIB8fa3PW3Hz+OqJ73ff/OMjVZjszcPvwvAhKW2w5GbNpt8Q3p589xIP
kZM00xEWrMmwiEjpWhHh+QxeHKGb6VYR+c488eUHfMf5pNalV85Ur0woLgCtIabG
dXTP32uicevp702Uj6XkKXtq7vMXIwchNW+Ba1o0u0VZs2aEZWHViV3HnmrhCSD5
hPNUaGN9mvFe0MEffHKvkw2G7NpqwlAW1cDkROopcqYwGBE9YPuKCYvynQrlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBFWRztE88xtNSDJ4AysRCOXjxlUwHwYDVR0j
BBgwFoAUh6rsvDQm04ElYpnC1uf2/GLI7ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZheGE0MktrVHVzTjVZWmpiam1ITXg2UGoxcEcyYmNtVlhuZ2NHZ3E5
QjYvMC84N0FBRUNCQzM0MjZEMzgxMjU2Mjk5QzJENkU3RjZGQzYyQzhFREVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3QUFFQ0JDMzQyNkQzODEy
NTYyOTlDMkQ2RTdGNkZDNjJDOEVERUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2YXhhNDJLa1R1c041WVpqYmptSE14NlBqMXBHMmJjbVZYbmdjR2dxOUI2LzAv
MzIzODMwMzQzYTM3MzI2NDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzgzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARy3AAwDQYJKoZIhvcNAQELBQADggEBALUA2hKM
DGisck8C+UkgEmqCR0Psr47UOuIfvJ7UMLv08Oj3n2nN30zpQx5tr5IxJ7czC3kO
vsKIFxe0MkzA783GweLHZ/UsH06eppgp2tUv/uupLTs0fzCOJKXQ2inb7qtsHDSA
PYyjHYyzWLLO5uil1l6jYbOI4MzjgRriA5NBI4kfRydufygy+1GpCwlI5oLTw8r6
Ra3bA1QfGCwYwi8MKRzv6A1Yw+1w59j8iWHITEG3FXDOGpufsOFHNjjKy7QbLtBr
lsgO7kMAu3gBCO9wwX+s0evfJ0he3xyE4Z698Rn/uZltWAxW5buhQ/irrnvMjeC7
o2ZiSubiy0mU2Qs=
-----END CERTIFICATE-----