This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a393137383a3a2f33322d3438203d3e20323734363433.roa
File:                     323830343a393137383a3a2f33322d3438203d3e20323734363433.roa (raw, json)
Hash identifier:          AnF7FZHZ8QhyxuFhsjESOs7a6GRZcVbLSa1o7lnL8Uc=
Subject key identifier:   23:F7:B8:55:91:51:E8:0E:BB:93:53:00:B8:89:02:29:FE:69:13:1B
Certificate issuer:       /CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
Certificate serial:       6033F00726E68B628E9F285A9680AEC41ECE593C
Authority key identifier: D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a393137383a3a2f33322d3438203d3e20323734363433.roa
Signing time:             Thu 18 Sep 2025 13:17:03 +0000
ROA not before:           Thu 18 Sep 2025 13:12:03 +0000
ROA not after:            Thu 17 Sep 2026 13:17:03 +0000
asID:                     274643
IP address blocks:        2804:9178::/32 maxlen: 48
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:33:f0:07:26:e6:8b:62:8e:9f:28:5a:96:80:ae:c4:1e:ce:59:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
        Validity
            Not Before: Sep 18 13:12:03 2025 GMT
            Not After : Sep 17 13:17:03 2026 GMT
        Subject: CN=23F7B8559151E80EBB935300B8890229FE69131B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:9c:57:c0:95:5e:6e:ca:f0:00:b4:47:61:
                    2b:75:d9:02:ac:8b:4e:67:ac:b5:65:5b:83:37:ed:
                    0a:1c:eb:bd:ac:dc:69:a8:47:d0:ca:51:6a:94:01:
                    e2:3f:c9:04:d7:49:c0:3f:17:cc:fa:d8:c9:1a:d4:
                    6c:a8:e6:0e:00:ba:7e:1a:54:b6:07:cb:a9:c3:33:
                    79:e1:6e:d5:9e:1b:89:d8:01:38:82:0f:1f:89:75:
                    07:fe:f5:9e:6d:43:ac:68:f9:3a:94:04:b3:2e:19:
                    12:44:f7:20:68:3b:ed:d7:b4:e4:c2:1d:3b:2b:2e:
                    59:67:0c:07:8f:4b:8d:e8:66:ec:d6:a8:98:a3:a2:
                    7a:d0:f8:02:74:f7:6a:de:a6:f3:3e:d3:c9:27:a2:
                    c5:01:27:bc:5d:c9:30:c6:11:ad:88:24:50:a0:32:
                    dd:b5:a9:cb:5c:f1:d5:b1:d9:a1:f5:41:92:e0:9d:
                    45:f6:e7:92:00:e1:5d:76:c2:3e:c9:a7:4c:00:63:
                    eb:a4:ff:fd:85:83:27:e7:e8:2a:e6:80:39:7c:23:
                    ea:da:20:e2:6a:32:e2:83:14:eb:7e:03:06:48:94:
                    06:2c:68:8d:52:83:d8:ae:7c:cb:b7:2f:a9:7f:74:
                    25:39:9c:36:f6:8d:40:fa:3c:da:8e:2c:8c:99:bb:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F7:B8:55:91:51:E8:0E:BB:93:53:00:B8:89:02:29:FE:69:13:1B
            X509v3 Authority Key Identifier:
                keyid:D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/323830343a393137383a3a2f33322d3438203d3e20323734363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9178::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:da:9e:bf:52:02:9d:6b:26:11:55:64:c5:18:3b:ae:72:5e:
         a1:65:2d:b9:76:43:15:6b:b4:9c:44:e1:b0:42:15:3b:c5:4c:
         14:3e:ff:ff:ee:00:32:35:33:dd:2e:be:4f:1a:c2:3f:19:a5:
         a0:ea:b4:15:29:3a:96:8d:23:ce:5c:10:c1:2d:68:b3:3d:41:
         c4:71:7e:8a:37:2f:c4:ac:15:a1:01:0f:b2:d4:e1:3e:18:ed:
         6d:95:b0:4c:86:59:5c:18:ba:2d:05:ea:38:68:6d:42:5b:38:
         c6:5e:42:59:7e:93:8b:df:a8:13:d4:4a:d0:61:ad:17:6d:2e:
         49:58:47:56:3b:46:b4:60:16:89:57:83:ea:67:f0:df:d9:14:
         e1:25:2e:66:6d:d6:a5:75:0f:d6:d3:74:b9:7a:97:f2:b4:a2:
         fc:51:ea:13:0f:47:84:28:4c:76:4b:4b:ef:cd:a2:bf:51:81:
         e5:38:0c:30:1a:6b:b3:2c:54:f9:76:48:d1:5a:5e:4f:13:d6:
         29:b4:b0:a0:af:0b:44:a5:34:b6:99:11:7a:6a:5c:fb:4e:f0:
         08:5e:7f:c2:c2:be:c2:d8:62:1f:34:73:68:7e:6c:f2:1e:15:
         55:86:3c:26:94:e2:72:fe:d0:bd:01:65:23:bd:f7:f8:dd:56:
         87:82:4c:11
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYDPwBybmi2KOnyhaloCuxB7OWTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkyMTMzQTA4MEFBNjJGNkI3OTdGQUQwQUI2QTZGRDMw
NzQxNzBFMTAeFw0yNTA5MTgxMzEyMDNaFw0yNjA5MTcxMzE3MDNaMDMxMTAvBgNV
BAMTKDIzRjdCODU1OTE1MUU4MEVCQjkzNTMwMEI4ODkwMjI5RkU2OTEzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E5xXwJVebsrwALRHYSt12QKs
i05nrLVlW4M37Qoc672s3GmoR9DKUWqUAeI/yQTXScA/F8z62Mka1Gyo5g4Aun4a
VLYHy6nDM3nhbtWeG4nYATiCDx+JdQf+9Z5tQ6xo+TqUBLMuGRJE9yBoO+3XtOTC
HTsrLllnDAePS43oZuzWqJijonrQ+AJ092repvM+08knosUBJ7xdyTDGEa2IJFCg
Mt21qctc8dWx2aH1QZLgnUX255IA4V12wj7Jp0wAY+uk//2Fgyfn6CrmgDl8I+ra
IOJqMuKDFOt+AwZIlAYsaI1Sg9iufMu3L6l/dCU5nDb2jUD6PNqOLIyZu8kVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUI/e4VZFR6A67k1MAuIkCKf5pExswHwYDVR0j
BBgwFoAU2SEzoICqYva3l/rQq2pv0wdBcOEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QRnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBL
LzAvRDkyMTMzQTA4MEFBNjJGNkI3OTdGQUQwQUI2QTZGRDMwNzQxNzBFMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EOTIxMzNBMDgwQUE2MkY2Qjc5
N0ZBRDBBQjZBNkZEMzA3NDE3MEUxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
RnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBLLzAvMzIz
ODMwMzQzYTM5MzEzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzM0MzYz
NDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASReDANBgkqhkiG9w0BAQsFAAOCAQEAstqev1ICnWsm
EVVkxRg7rnJeoWUtuXZDFWu0nEThsEIVO8VMFD7//+4AMjUz3S6+TxrCPxmloOq0
FSk6lo0jzlwQwS1osz1BxHF+ijcvxKwVoQEPstThPhjtbZWwTIZZXBi6LQXqOGht
Qls4xl5CWX6Ti9+oE9RK0GGtF20uSVhHVjtGtGAWiVeD6mfw39kU4SUuZm3WpXUP
1tN0uXqX8rSi/FHqEw9HhChMdktL782iv1GB5TgMMBprsyxU+XZI0VpeTxPWKbSw
oK8LRKU0tpkRempc+07wCF5/wsK+wthiHzRzaH5s8h4VVYY8JpTicv7QvQFlI733
+N1Wh4JMEQ==
-----END CERTIFICATE-----