This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/34352e37302e3137322e302f32322d3234203d3e20323637353834.roa
File:                     34352e37302e3137322e302f32322d3234203d3e20323637353834.roa (raw, json)
Hash identifier:          bJeiUhbDJAj+6vozaDwrZ6k+Ab8r2ljiBcCF0hgKowI=
Subject key identifier:   2B:13:A4:9A:B1:FE:03:E3:CE:33:28:FD:0B:EB:22:3E:A8:78:50:B0
Certificate issuer:       /CN=2EE98CD7A649AE2259E9DAD3099736C3C595E9D5
Certificate serial:       22CECF1C1BAAF704320BC1527E2B4F5EA83B3AA1
Authority key identifier: 2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/34352e37302e3137322e302f32322d3234203d3e20323637353834.roa
Signing time:             Thu 06 Mar 2025 11:52:01 +0000
ROA not before:           Thu 06 Mar 2025 11:47:01 +0000
ROA not after:            Thu 05 Mar 2026 11:52:01 +0000
asID:                     267584
IP address blocks:        45.70.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ce:cf:1c:1b:aa:f7:04:32:0b:c1:52:7e:2b:4f:5e:a8:3b:3a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE98CD7A649AE2259E9DAD3099736C3C595E9D5
        Validity
            Not Before: Mar  6 11:47:01 2025 GMT
            Not After : Mar  5 11:52:01 2026 GMT
        Subject: CN=2B13A49AB1FE03E3CE3328FD0BEB223EA87850B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:9a:cc:9c:55:ac:50:c9:6f:d2:98:fb:03:
                    7d:c0:cc:4a:f1:15:31:91:32:ef:13:d7:4d:c1:af:
                    99:2d:a4:7b:3f:ba:1e:f7:ee:98:f0:cf:f6:9a:51:
                    07:83:d7:af:5a:83:43:33:26:c2:79:3d:57:25:73:
                    2c:e7:e7:32:94:23:08:0b:1c:af:02:34:39:28:ea:
                    34:63:3c:38:3d:fd:9f:e6:98:b0:ec:f3:83:50:b7:
                    3c:0b:10:00:31:8f:bb:9f:d2:c9:5f:c7:14:22:68:
                    c0:5d:8c:79:4e:14:92:06:b6:78:39:97:16:21:e8:
                    50:61:86:36:cf:37:d2:e1:b0:d6:73:fb:dc:99:93:
                    79:1d:4c:0a:41:e1:b2:7b:ac:30:20:51:ef:ed:80:
                    b3:f2:84:54:9d:af:5a:37:7a:76:42:79:e3:27:d4:
                    28:1f:e4:ab:8d:4b:e8:d6:c0:85:2b:39:b6:9a:e9:
                    18:2a:35:2c:37:2b:4f:68:92:d0:60:e7:28:4d:27:
                    76:42:0e:a8:6f:aa:99:1e:b0:e0:62:ba:c7:4f:c3:
                    c1:56:f7:12:41:83:2b:41:9e:80:95:21:52:b9:c0:
                    0d:bb:8d:01:c6:67:2b:e0:c0:0d:a0:b0:87:96:79:
                    d2:da:82:01:80:6b:9b:5c:85:d2:27:1b:67:0e:59:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:13:A4:9A:B1:FE:03:E3:CE:33:28:FD:0B:EB:22:3E:A8:78:50:B0
            X509v3 Authority Key Identifier:
                keyid:2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/34352e37302e3137322e302f32322d3234203d3e20323637353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:a8:6a:d9:e0:26:d0:87:ae:5c:c2:b1:ab:ff:3d:77:55:
         03:e8:e2:5a:ea:a2:51:3e:86:33:d7:ae:1a:6d:6d:50:56:bc:
         a4:b3:58:40:02:64:63:4c:57:4c:9e:27:2c:86:89:bf:5f:bc:
         f9:1b:f6:29:b9:77:e9:80:78:4a:a0:71:5d:60:e1:40:d0:a0:
         e1:95:3c:87:1b:2e:42:f1:dd:2f:91:08:ce:48:7d:a5:d7:59:
         c4:90:51:ad:1c:d6:b6:d6:17:0c:95:05:2d:2e:12:37:e9:2b:
         ef:46:42:22:e9:16:62:ea:38:c0:78:c1:03:ef:ee:3c:86:22:
         9e:93:d2:54:f6:3a:22:2c:57:95:cf:fb:34:ca:07:11:e1:ac:
         19:5c:b5:0b:6b:da:7c:5e:31:95:f5:92:97:a1:7b:31:51:2d:
         6b:c1:7a:84:04:63:f9:dc:d2:ab:c8:d8:2a:7e:66:d6:d3:8e:
         25:7c:10:03:59:5c:60:e7:7b:4d:09:b1:5f:19:f4:16:fc:f9:
         63:7d:62:a9:47:a5:6e:34:29:e9:6d:17:23:ec:5d:20:11:c0:
         f3:23:60:3c:cc:5e:81:2b:b5:33:4a:39:e7:3d:f0:f8:30:51:
         32:5f:74:a0:e4:cd:7a:3d:27:65:c8:31:f1:6a:68:f1:32:96:
         24:bb:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----