This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231362e302f32332d3233203d3e20323638363533.roa
File:                     34352e3136342e3231362e302f32332d3233203d3e20323638363533.roa (raw, json)
Hash identifier:          QTFZYFL1RYxjD6YiPrrrIiPjc1gbTWe38ylreomykAM=
Subject key identifier:   2F:68:93:F6:6F:5C:90:81:22:F9:78:4B:A6:08:86:CB:60:36:81:AE
Certificate issuer:       /CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
Certificate serial:       78A85E94E615DA860A0C41E376E259C310D0BCE6
Authority key identifier: 8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231362e302f32332d3233203d3e20323638363533.roa
Signing time:             Thu 24 Mar 2022 20:05:42 +0000
ROA not before:           Thu 24 Mar 2022 20:00:42 +0000
ROA not after:            Thu 23 Mar 2023 20:05:42 +0000
asID:                     268653
IP address blocks:        45.164.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a8:5e:94:e6:15:da:86:0a:0c:41:e3:76:e2:59:c3:10:d0:bc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
        Validity
            Not Before: Mar 24 20:00:42 2022 GMT
            Not After : Mar 23 20:05:42 2023 GMT
        Subject: CN=2F6893F66F5C908122F9784BA60886CB603681AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:76:23:a8:87:ba:6c:a9:67:be:e9:d8:6e:
                    9a:a2:c6:34:6f:cd:f7:dc:1f:92:d9:73:6a:71:4c:
                    4d:d8:0f:0e:90:05:93:f9:a0:65:83:db:a1:30:27:
                    c6:46:fd:89:5c:b3:dd:ee:01:dd:3e:d2:36:31:41:
                    80:d6:9f:ac:35:ea:ce:31:37:56:d3:11:86:ca:ae:
                    65:62:5d:47:42:02:db:33:4d:f0:5d:fc:cb:e1:53:
                    16:f8:13:b3:57:3a:9c:ed:d4:03:08:0c:00:40:33:
                    02:2b:8f:9f:74:ad:25:6f:45:9a:76:63:2a:fb:a9:
                    5d:a7:43:2e:77:12:24:7a:5b:2b:47:ee:d3:12:9b:
                    1f:c8:c5:00:b4:96:58:60:86:00:4a:de:40:f9:02:
                    98:a2:1d:6a:f7:60:68:bb:8e:4e:3d:95:ae:f0:90:
                    06:f3:23:e6:11:cf:ce:96:4d:be:dd:ba:85:aa:04:
                    66:93:71:20:10:db:dc:4e:88:53:6a:d7:c8:70:c7:
                    95:28:2a:12:a7:d1:6f:37:bb:27:34:d9:e6:c6:41:
                    c9:a5:74:f3:ec:aa:7b:26:ef:a8:42:44:c3:a0:f7:
                    7e:95:38:3c:90:19:43:c6:7f:01:42:85:0c:e0:22:
                    fc:be:22:43:c5:39:67:f4:9e:b7:0f:5d:c5:bd:12:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:68:93:F6:6F:5C:90:81:22:F9:78:4B:A6:08:86:CB:60:36:81:AE
            X509v3 Authority Key Identifier:
                keyid:8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/34352e3136342e3231362e302f32332d3233203d3e20323638363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:4d:2e:6e:84:69:9b:19:3b:10:cb:5b:72:a2:49:85:c2:c0:
         d2:03:fd:8b:f5:d1:79:ad:bd:cd:7a:8e:5c:b4:e6:72:cb:5a:
         d8:88:38:2c:3b:cf:e2:e9:35:c6:4f:15:cd:1e:ce:1b:a9:59:
         c6:00:f4:6a:4a:ef:df:92:27:8f:91:b3:4f:75:2f:44:40:68:
         ad:a2:63:ce:54:f5:5d:57:37:0e:9f:2a:66:43:6e:ac:91:fb:
         e3:88:1a:0e:c9:82:04:99:5f:dd:5b:3c:03:8e:44:bb:80:e7:
         8e:dc:1e:e0:f4:ec:db:0e:d2:91:4e:98:0b:65:46:43:49:40:
         a1:12:c0:4e:70:ef:60:97:59:9e:1d:7e:f0:fe:d3:e3:52:4b:
         99:a0:99:70:78:95:e8:27:9a:d4:0b:cc:ef:23:02:14:5e:76:
         95:94:b4:b2:d6:dd:da:25:89:fd:c7:1d:99:ea:a1:f7:7e:ea:
         ee:44:c0:d6:58:f6:eb:d8:09:96:da:4b:24:0a:f5:bc:eb:46:
         b0:55:ca:7a:73:10:49:4b:d4:5e:e0:72:25:0f:8f:03:5f:6a:
         45:1a:e5:13:0f:9b:3e:1f:84:53:5e:98:60:09:eb:82:ac:c9:
         91:78:70:e4:32:7b:0d:f3:d3:72:ed:9e:e9:95:f1:73:c5:74:
         e7:55:95:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeKhelOYV2oYKDEHjduJZwxDQvOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERDQzUyRUFDNURENkVFNjVGNUQ5NTQwRUQwQzY5QkIx
QTZGN0M2RDAeFw0yMjAzMjQyMDAwNDJaFw0yMzAzMjMyMDA1NDJaMDMxMTAvBgNV
BAMTKDJGNjg5M0Y2NkY1QzkwODEyMkY5Nzg0QkE2MDg4NkNCNjAzNjgxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRHYjqIe6bKlnvunYbpqixjRv
zffcH5LZc2pxTE3YDw6QBZP5oGWD26EwJ8ZG/Ylcs93uAd0+0jYxQYDWn6w16s4x
N1bTEYbKrmViXUdCAtszTfBd/MvhUxb4E7NXOpzt1AMIDABAMwIrj590rSVvRZp2
Yyr7qV2nQy53EiR6WytH7tMSmx/IxQC0llhghgBK3kD5ApiiHWr3YGi7jk49la7w
kAbzI+YRz86WTb7duoWqBGaTcSAQ29xOiFNq18hwx5UoKhKn0W83uyc02ebGQcml
dPPsqnsm76hCRMOg936VODyQGUPGfwFChQzgIvy+IkPFOWf0nrcPXcW9ElUbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUL2iT9m9ckIEi+XhLpgiGy2A2ga4wHwYDVR0j
BBgwFoAUjcxS6sXdbuZfXZVA7QxpuxpvfG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRDSjFQUnlHOGMzcVJzZW94aVZDbjZyUk44cEJSVDFBanVzMkd4YWNS
SHkvMC84RENDNTJFQUM1REQ2RUU2NUY1RDk1NDBFRDBDNjlCQjFBNkY3QzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhEQ0M1MkVBQzVERDZFRTY1
RjVEOTU0MEVEMEM2OUJCMUE2RjdDNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Q0oxUFJ5RzhjM3FSc2VveGlWQ242clJOOHBCUlQxQWp1czJHeGFjUkh5LzAv
MzQzNTJlMzEzNjM0MmUzMjMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpNgwDQYJKoZIhvcNAQELBQADggEBAE9NLm6E
aZsZOxDLW3KiSYXCwNID/Yv10Xmtvc16jly05nLLWtiIOCw7z+LpNcZPFc0ezhup
WcYA9GpK79+SJ4+Rs091L0RAaK2iY85U9V1XNw6fKmZDbqyR++OIGg7JggSZX91b
PAOORLuA547cHuD07NsO0pFOmAtlRkNJQKESwE5w72CXWZ4dfvD+0+NSS5mgmXB4
legnmtQLzO8jAhRedpWUtLLW3dolif3HHZnqofd+6u5EwNZY9uvYCZbaSyQK9bzr
RrBVynpzEElL1F7gciUPjwNfakUa5RMPmz4fhFNemGAJ64KsyZF4cOQyew3z03Lt
numV8XPFdOdVlcE=
-----END CERTIFICATE-----