This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a323633303a3a2f33322d313238203d3e20323634333331.roa
File:                     323830343a323633303a3a2f33322d313238203d3e20323634333331.roa (raw, json)
Hash identifier:          GWkv/JkNQ6FOV7EI3Nbgo6CMjRkiCQw/OICbtkhwqdo=
Subject key identifier:   A0:E6:60:05:53:C9:75:3B:30:F6:61:28:45:C2:D4:28:39:F6:6F:DA
Certificate issuer:       /CN=D123858020F0224957058CA805488D517D88F47A
Certificate serial:       439C2F0E947861BBB0119D11D08BAC285FE33085
Authority key identifier: D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a323633303a3a2f33322d313238203d3e20323634333331.roa
Signing time:             Wed 05 Mar 2025 18:34:17 +0000
ROA not before:           Wed 05 Mar 2025 18:29:17 +0000
ROA not after:            Wed 04 Mar 2026 18:34:17 +0000
asID:                     264331
IP address blocks:        2804:2630::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9c:2f:0e:94:78:61:bb:b0:11:9d:11:d0:8b:ac:28:5f:e3:30:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D123858020F0224957058CA805488D517D88F47A
        Validity
            Not Before: Mar  5 18:29:17 2025 GMT
            Not After : Mar  4 18:34:17 2026 GMT
        Subject: CN=A0E6600553C9753B30F6612845C2D42839F66FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:25:19:84:61:18:62:32:42:aa:ad:a0:91:
                    62:a8:19:b5:c3:49:6a:52:c6:5f:e9:43:28:df:2d:
                    51:8e:d6:7c:5c:71:39:11:bd:d6:dd:13:f7:4e:d1:
                    5a:42:d4:5c:63:9c:b4:64:00:f1:d2:79:23:0c:0b:
                    1c:c7:72:44:a3:6f:ab:c8:83:9e:89:24:91:3e:59:
                    fa:fd:d2:43:07:50:41:a3:e1:11:33:ab:96:dc:a2:
                    ba:f7:4e:76:08:a7:4a:d6:c2:8c:5d:32:88:04:d3:
                    96:28:3c:59:58:c0:45:dc:d3:e7:16:f6:f2:06:00:
                    ff:e0:b2:23:12:13:e4:dd:3c:57:05:28:7a:2e:40:
                    3d:ba:50:79:d2:d5:cc:b1:5a:5e:c8:c7:b0:ca:dc:
                    aa:a6:ad:6e:1f:60:62:f0:f1:2a:73:b4:e9:63:68:
                    e7:fb:2e:7a:22:99:3c:f0:cf:e9:04:69:b1:d1:d9:
                    0a:6b:cd:19:30:0b:88:bf:d3:90:1d:c8:6b:33:49:
                    53:2d:58:fd:0e:29:2e:32:f1:0a:3b:5a:24:1e:c6:
                    14:c8:fd:17:db:78:1c:00:86:0f:97:01:4c:ee:ca:
                    ba:be:d0:9b:25:ea:e5:ac:dc:8f:e3:c7:71:25:ec:
                    15:87:b7:e4:2e:e3:53:dc:b6:97:87:02:2c:87:5e:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E6:60:05:53:C9:75:3B:30:F6:61:28:45:C2:D4:28:39:F6:6F:DA
            X509v3 Authority Key Identifier:
                keyid:D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/323830343a323633303a3a2f33322d313238203d3e20323634333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2630::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:51:03:0c:1e:b2:d0:91:b3:d2:9c:96:e8:cf:81:6a:72:
         d4:78:1f:05:ab:59:1e:4d:08:20:8c:ef:38:26:7c:d2:0c:6e:
         94:37:c2:d5:07:c1:78:bc:56:d1:b0:24:ac:cf:82:c0:ab:4e:
         23:41:77:73:43:0b:d1:0e:1a:e3:0b:5e:5d:bc:96:5d:02:66:
         f0:14:d8:13:ee:fb:2f:c2:51:dc:bc:8a:4e:e7:23:f6:b2:6d:
         6e:20:56:55:b9:fa:cb:55:2c:de:94:62:b4:0e:e4:34:9e:39:
         80:07:16:b3:f3:72:64:6f:62:6d:c6:c9:d8:3a:f9:0d:4b:ea:
         c9:6e:7f:93:07:f9:71:9a:6f:fb:4e:f1:fb:f8:34:5e:63:93:
         30:71:90:21:aa:0a:6b:08:37:91:c5:63:be:79:64:e3:14:bf:
         03:f8:6a:7f:a3:70:33:b1:11:54:cc:0b:7f:7f:b2:b8:c2:4e:
         dd:1b:9c:fa:7d:4b:33:3a:aa:52:b0:74:91:89:a9:59:c9:63:
         d2:7c:28:b0:bb:d1:a5:1a:58:0d:f3:6b:1a:c1:95:2c:e3:f7:
         45:79:4f:3d:42:ba:36:ee:bd:17:ab:16:47:9c:d0:14:0e:8e:
         62:5b:94:d7:cf:03:a0:e6:ad:69:a2:e7:48:7c:ef:a6:ac:5e:
         81:80:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----