This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a633030303a3a2f33342d3334203d3e20323730393937.roa
File:                     323830343a373462303a633030303a3a2f33342d3334203d3e20323730393937.roa (raw, json)
Hash identifier:          sc6/++RAFGKm1XglJkhG8joyqw2JtgOfoGTETQYL13s=
Subject key identifier:   E9:B4:7F:62:35:96:E4:D4:94:3E:FA:86:FD:4C:F2:71:19:40:FB:4A
Certificate issuer:       /CN=D7950E03D821895EF335736E8640695BA4F4AD3E
Certificate serial:       50ECC084F027D46A56913499B9089DD8D627ACA3
Authority key identifier: D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a633030303a3a2f33342d3334203d3e20323730393937.roa
Signing time:             Thu 25 Sep 2025 03:34:45 +0000
ROA not before:           Thu 25 Sep 2025 03:29:45 +0000
ROA not after:            Thu 24 Sep 2026 03:34:45 +0000
asID:                     270997
IP address blocks:        2804:74b0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ec:c0:84:f0:27:d4:6a:56:91:34:99:b9:08:9d:d8:d6:27:ac:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Validity
            Not Before: Sep 25 03:29:45 2025 GMT
            Not After : Sep 24 03:34:45 2026 GMT
        Subject: CN=E9B47F623596E4D4943EFA86FD4CF2711940FB4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:77:eb:e6:fd:84:f4:b8:67:ec:5d:4c:cf:
                    4e:e0:81:bd:b3:ad:6c:a3:e5:46:df:c0:6b:be:cc:
                    ec:1c:4c:d1:cc:bd:e4:80:4f:1a:d8:cc:c8:39:30:
                    be:02:13:fa:85:10:9c:2f:1c:fe:db:31:e8:c3:01:
                    a5:b6:c8:d8:9a:95:6a:d5:6f:6f:a5:12:a5:a9:43:
                    f3:7d:b6:95:61:89:91:6b:44:03:b5:05:74:21:e2:
                    0c:70:fa:72:4c:d2:76:e3:32:a7:ee:f8:fe:ac:e7:
                    b1:04:fe:2d:51:53:1b:6c:63:f3:29:79:6b:37:b6:
                    ca:cc:15:c7:88:13:5a:c9:7d:3f:23:7f:b0:9c:22:
                    0f:e9:75:a6:eb:29:ed:24:0e:d7:52:0e:fe:b8:b7:
                    83:99:3f:45:36:ec:09:14:01:1a:48:03:f1:ed:d5:
                    e7:a2:33:89:ae:70:c7:8f:fa:fc:fd:67:a9:0d:e3:
                    da:6e:d3:d0:1a:0a:21:3b:e1:ea:3b:ae:51:1a:15:
                    34:77:78:51:66:1c:f1:10:11:0f:f1:e4:07:ab:cc:
                    8a:11:5c:3e:99:59:42:17:35:66:f4:b3:ee:25:81:
                    92:e1:2b:93:ee:b6:1f:f3:cc:c9:4e:9a:61:a7:2b:
                    b8:f9:e2:e1:65:fe:96:39:1c:38:ef:bb:99:6f:3d:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B4:7F:62:35:96:E4:D4:94:3E:FA:86:FD:4C:F2:71:19:40:FB:4A
            X509v3 Authority Key Identifier:
                keyid:D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a633030303a3a2f33342d3334203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:f5:e2:f0:d2:9b:75:74:7b:1f:d1:6d:c0:e9:30:c4:c1:
         78:6b:19:39:c3:7b:5b:53:83:9c:ce:d9:c4:f2:12:2e:bf:bc:
         58:cf:9f:1c:c5:ef:9c:f9:69:95:35:a6:49:89:74:e4:c9:b5:
         23:69:82:52:a1:d4:0f:97:16:b0:9f:84:16:c2:55:0d:cb:84:
         8a:c9:cc:ce:79:04:e3:2d:4e:9e:e4:48:9a:40:11:43:36:e4:
         47:e9:51:94:bf:e4:50:5e:c2:ce:32:f9:8e:74:1e:be:5d:03:
         a8:56:d2:28:52:ff:3a:73:9e:cd:ff:6f:5d:c8:43:30:ef:3e:
         ba:5f:35:f2:ad:9d:dc:b4:63:53:f0:43:5c:af:dc:2f:b5:a3:
         ac:be:b9:5b:ea:a6:f0:84:e0:4f:94:7c:75:52:dc:b3:32:2a:
         c4:d3:2b:e1:86:f5:23:43:57:b0:85:dc:af:85:0b:a5:6c:ac:
         5d:d8:25:7b:cc:47:46:59:9c:bd:7e:53:a2:94:4a:0c:89:66:
         f6:02:59:6d:b6:43:f4:24:ef:5d:06:49:af:06:5c:b5:68:7b:
         fb:31:9d:48:ae:3c:bb:d8:cf:d7:bb:c4:3a:d7:b6:2e:1f:c4:
         5e:0f:83:89:4a:27:ee:6f:2d:4c:28:ab:06:10:6d:01:f7:23:
         76:7a:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----