This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa
File:                     323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa (raw, json)
Hash identifier:          CCyxQHWsfGRcXik6f9zNIHkcO3OYiE+FhgLI97RTgZk=
Subject key identifier:   8A:74:20:00:B2:1B:6B:A6:C3:E2:EB:A4:80:98:99:67:7B:27:FA:6C
Certificate issuer:       /CN=D7950E03D821895EF335736E8640695BA4F4AD3E
Certificate serial:       2B4BA320EFBED0808E5A37A60B0DCA5EBD1106E3
Authority key identifier: D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa
Signing time:             Thu 25 Sep 2025 03:34:48 +0000
ROA not before:           Thu 25 Sep 2025 03:29:48 +0000
ROA not after:            Thu 24 Sep 2026 03:34:48 +0000
asID:                     270997
IP address blocks:        2804:74b0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4b:a3:20:ef:be:d0:80:8e:5a:37:a6:0b:0d:ca:5e:bd:11:06:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Validity
            Not Before: Sep 25 03:29:48 2025 GMT
            Not After : Sep 24 03:34:48 2026 GMT
        Subject: CN=8A742000B21B6BA6C3E2EBA4809899677B27FA6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:f2:e0:71:4d:50:ec:86:ae:70:42:56:74:
                    34:14:89:89:a4:38:fe:cc:9b:d0:14:22:d7:96:74:
                    20:d2:83:5f:06:f1:18:41:92:20:f4:04:41:d4:6d:
                    49:46:9d:d6:96:ff:72:30:ae:d9:d3:0c:30:d6:38:
                    94:10:61:50:aa:1b:ad:c9:c0:10:55:c5:53:e3:63:
                    5d:d9:f7:09:2f:df:a8:18:b8:6a:0b:96:d1:e2:0a:
                    c9:89:06:f9:fa:6d:fc:8a:e0:2c:f3:bc:c3:13:a6:
                    3d:57:f9:65:1b:4a:0c:e9:57:a2:31:9d:ee:46:8e:
                    65:5b:d7:a1:39:83:13:90:bb:69:8f:84:ff:cc:b9:
                    d8:ee:8a:f9:3e:50:7b:f3:50:b6:f0:60:c2:ed:1c:
                    27:4e:07:59:d6:7c:1a:37:14:e3:ed:5a:da:88:46:
                    47:ac:97:73:36:36:af:58:52:7f:58:a5:b7:71:d0:
                    ec:64:87:c2:74:59:b2:1e:2a:d5:bd:ab:58:ec:f6:
                    bb:1b:17:41:8e:4a:49:da:d9:43:79:df:85:25:ae:
                    e2:7a:ed:17:70:d6:b7:0e:2d:ae:35:a5:22:f1:a3:
                    9f:5f:76:31:0a:d3:c3:8d:b7:bd:70:2b:90:05:38:
                    35:ab:e9:ea:0f:eb:ad:cd:a8:17:01:09:0b:d9:fa:
                    4b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:74:20:00:B2:1B:6B:A6:C3:E2:EB:A4:80:98:99:67:7B:27:FA:6C
            X509v3 Authority Key Identifier:
                keyid:D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:ee:88:88:9b:33:dc:d7:5a:fd:ed:39:b6:ec:e9:f1:b7:
         35:8e:4e:75:89:c1:18:62:5a:35:5e:4a:91:14:93:a0:6b:a4:
         15:8d:d2:0a:93:c5:06:72:ce:f1:e5:30:38:15:30:85:8a:2e:
         1f:fa:8b:1b:ae:bf:e2:9a:c1:38:c0:2d:7f:b9:39:3b:84:cd:
         42:4f:77:99:47:e7:04:35:49:af:0c:eb:7c:33:6b:57:c2:b8:
         93:32:df:b5:93:e4:83:81:3e:10:de:6e:92:4a:e4:02:2f:94:
         c3:f7:1b:27:92:d0:f9:0c:c9:07:49:76:ee:37:cf:5e:c7:0a:
         0d:81:2d:6d:44:01:85:b1:bf:70:e2:18:7b:5c:c0:9e:15:c9:
         6c:27:b3:fb:ab:24:10:06:0e:19:cb:64:ca:39:49:96:a5:f1:
         bc:30:6e:5e:47:be:36:af:c6:69:5e:c1:e6:78:5a:fb:57:b0:
         55:d5:9d:06:80:31:5d:d1:57:57:db:dc:3a:2b:7f:a0:a2:2e:
         b6:11:e0:d1:ed:8b:02:c6:86:db:1f:08:79:98:56:fc:8e:e9:
         73:27:3e:ac:31:d4:5b:67:e6:d8:ef:44:f6:a6:49:a7:f2:eb:
         55:df:b9:e2:fb:ce:15:55:db:cb:f6:f1:b6:59:9e:c5:77:da:
         4f:3b:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----