This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/34352e3137312e3139322e302f32342d3234203d3e20323638373238.roa
File:                     34352e3137312e3139322e302f32342d3234203d3e20323638373238.roa (raw, json)
Hash identifier:          y14LRhzXqhfjsFaVKqtyzdPd2t3bhc4lGSoeDX/4b6M=
Subject key identifier:   FB:AC:70:EB:D6:AE:2D:C9:C6:C6:73:3A:92:D7:15:81:59:E1:7E:05
Certificate issuer:       /CN=753001312ACD66ED6C7129E4CADC553A57EDE77F
Certificate serial:       5AD50D6841501242E7B8CF5EC66ACAAAEF013F0D
Authority key identifier: 75:30:01:31:2A:CD:66:ED:6C:71:29:E4:CA:DC:55:3A:57:ED:E7:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/753001312ACD66ED6C7129E4CADC553A57EDE77F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/34352e3137312e3139322e302f32342d3234203d3e20323638373238.roa
Signing time:             Fri 25 Jul 2025 20:48:21 +0000
ROA not before:           Fri 25 Jul 2025 20:43:21 +0000
ROA not after:            Fri 24 Jul 2026 20:48:21 +0000
asID:                     268728
IP address blocks:        45.171.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d5:0d:68:41:50:12:42:e7:b8:cf:5e:c6:6a:ca:aa:ef:01:3f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=753001312ACD66ED6C7129E4CADC553A57EDE77F
        Validity
            Not Before: Jul 25 20:43:21 2025 GMT
            Not After : Jul 24 20:48:21 2026 GMT
        Subject: CN=FBAC70EBD6AE2DC9C6C6733A92D7158159E17E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:f5:32:40:5a:e0:bc:13:80:5f:b3:a5:b3:
                    b5:c8:2e:35:4c:ff:77:f6:db:c0:84:b4:d5:48:1e:
                    7f:39:d9:7b:c9:40:92:26:12:a4:9d:fc:ea:12:1f:
                    c9:68:c3:17:6a:c0:9c:76:53:df:9a:9e:66:ec:d6:
                    26:95:61:de:44:6e:cf:02:ed:a2:9f:37:29:06:af:
                    8b:fc:8e:03:ed:df:96:67:b1:f8:93:50:b9:49:b3:
                    1a:31:1b:c7:f6:7f:f9:43:9b:4f:81:b7:83:a4:d4:
                    ca:1c:89:9d:fe:04:90:8e:e1:dd:ed:5c:a0:12:7d:
                    0a:56:2d:9a:f3:a3:e8:33:62:d6:1e:e4:86:9e:c0:
                    c9:ea:c4:4d:ca:f6:d0:ed:69:04:68:12:97:91:7e:
                    ad:e0:b7:c4:ee:fb:f9:9f:0f:15:2d:30:4f:bc:19:
                    a0:eb:c5:29:ef:2f:9f:da:f6:8d:d0:b7:a5:d1:68:
                    b2:d7:00:35:b8:75:aa:8a:64:66:58:f4:b4:58:84:
                    3e:fc:be:b9:4a:a7:95:94:28:66:0c:64:4e:87:34:
                    b1:62:46:98:f1:39:1e:54:18:2c:92:c4:09:56:8a:
                    9a:f8:38:a1:0d:9c:20:3f:0b:cf:75:1f:12:87:f1:
                    e8:62:a4:33:47:74:04:45:02:21:4b:2d:7e:36:56:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:70:EB:D6:AE:2D:C9:C6:C6:73:3A:92:D7:15:81:59:E1:7E:05
            X509v3 Authority Key Identifier:
                keyid:75:30:01:31:2A:CD:66:ED:6C:71:29:E4:CA:DC:55:3A:57:ED:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/753001312ACD66ED6C7129E4CADC553A57EDE77F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/753001312ACD66ED6C7129E4CADC553A57EDE77F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/34352e3137312e3139322e302f32342d3234203d3e20323638373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:ab:12:0e:c0:aa:e0:60:5d:2b:b7:ec:9c:70:46:6e:e5:04:
         c6:df:70:48:60:c5:1e:d8:73:ac:07:b0:60:1b:de:b2:ef:c8:
         9b:1c:32:3f:eb:e4:2d:99:aa:38:a9:de:f5:d0:67:0c:b7:16:
         9f:8b:f2:68:7f:b3:38:42:88:91:04:9d:e4:52:5d:0e:b2:8b:
         b5:d5:85:94:8b:22:84:55:3b:eb:49:76:13:27:3e:b5:1f:ef:
         dc:9c:6d:50:71:65:e9:ab:49:2a:82:0a:57:51:a6:07:a0:0c:
         1c:1b:a3:3b:09:6a:e3:dd:6d:73:71:29:e4:b4:a0:d3:d3:b2:
         b0:20:3e:40:66:8f:58:3b:fe:df:19:a2:9c:a7:8d:e2:04:7f:
         8c:f3:3a:18:d2:42:07:14:71:73:1b:df:64:6a:6d:7e:4c:2d:
         3d:ce:d0:37:ed:13:e5:02:e6:cc:c2:8c:67:cd:2a:0c:63:fd:
         d4:85:e7:0a:ae:a9:6e:5e:8a:6b:d9:19:8e:9c:98:89:0a:c7:
         0b:12:13:67:93:fb:15:1f:2a:90:21:59:8a:9a:5b:94:13:08:
         b1:7e:d3:85:b6:9f:11:f5:13:48:72:50:ba:27:c4:23:be:93:
         68:f9:65:0b:2f:d9:2d:45:35:15:98:69:bb:1f:aa:5c:cd:a1:
         c7:fc:48:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWtUNaEFQEkLnuM9exmrKqu8BPw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUzMDAxMzEyQUNENjZFRDZDNzEyOUU0Q0FEQzU1M0E1
N0VERTc3RjAeFw0yNTA3MjUyMDQzMjFaFw0yNjA3MjQyMDQ4MjFaMDMxMTAvBgNV
BAMTKEZCQUM3MEVCRDZBRTJEQzlDNkM2NzMzQTkyRDcxNTgxNTlFMTdFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPvUyQFrgvBOAX7Ols7XILjVM
/3f228CEtNVIHn852XvJQJImEqSd/OoSH8lowxdqwJx2U9+anmbs1iaVYd5Ebs8C
7aKfNykGr4v8jgPt35ZnsfiTULlJsxoxG8f2f/lDm0+Bt4Ok1MociZ3+BJCO4d3t
XKASfQpWLZrzo+gzYtYe5IaewMnqxE3K9tDtaQRoEpeRfq3gt8Tu+/mfDxUtME+8
GaDrxSnvL5/a9o3Qt6XRaLLXADW4daqKZGZY9LRYhD78vrlKp5WUKGYMZE6HNLFi
RpjxOR5UGCySxAlWipr4OKENnCA/C891HxKH8ehipDNHdARFAiFLLX42Vs/JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+6xw69auLcnGxnM6ktcVgVnhfgUwHwYDVR0j
BBgwFoAUdTABMSrNZu1scSnkytxVOlft538wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3lYckczS2lWc3VMQnd2SmoyRkhvWnlYNVdURlZoclNHU2hBa25IdGZD
MkIvMC83NTMwMDEzMTJBQ0Q2NkVENkM3MTI5RTRDQURDNTUzQTU3RURFNzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1MzAwMTMxMkFDRDY2RUQ2
QzcxMjlFNENBREM1NTNBNTdFREU3N0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd5WHJHM0tpVnN1TEJ3dkpqMkZIb1p5WDVXVEZWaHJTR1NoQWtuSHRmQzJCLzAv
MzQzNTJlMzEzNzMxMmUzMTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtq8AwDQYJKoZIhvcNAQELBQADggEBAHqrEg7A
quBgXSu37JxwRm7lBMbfcEhgxR7Yc6wHsGAb3rLvyJscMj/r5C2Zqjip3vXQZwy3
Fp+L8mh/szhCiJEEneRSXQ6yi7XVhZSLIoRVO+tJdhMnPrUf79ycbVBxZemrSSqC
CldRpgegDBwbozsJauPdbXNxKeS0oNPTsrAgPkBmj1g7/t8ZopynjeIEf4zzOhjS
QgcUcXMb32RqbX5MLT3O0DftE+UC5szCjGfNKgxj/dSF5wquqW5eimvZGY6cmIkK
xwsSE2eT+xUfKpAhWYqaW5QTCLF+04W2nxH1E0hyULonxCO+k2j5ZQsv2S1FNRWY
absfqlzNocf8SIY=
-----END CERTIFICATE-----