This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa
File:                     3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa (raw, json)
Hash identifier:          iRw9/4rJpOYX60HrikKUD+hM5i546e6s3PpfIIP6X9Y=
Subject key identifier:   16:75:72:A3:DF:AF:78:27:DA:CB:17:DE:A1:C9:0A:77:20:8D:88:E2
Certificate issuer:       /CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
Certificate serial:       3077385C8ED99F8B0E91920AE646C8FEF288B678
Authority key identifier: 0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa
Signing time:             Tue 06 May 2025 12:57:15 +0000
ROA not before:           Tue 06 May 2025 12:52:15 +0000
ROA not after:            Tue 05 May 2026 12:57:15 +0000
asID:                     266022
IP address blocks:        170.245.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:77:38:5c:8e:d9:9f:8b:0e:91:92:0a:e6:46:c8:fe:f2:88:b6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
        Validity
            Not Before: May  6 12:52:15 2025 GMT
            Not After : May  5 12:57:15 2026 GMT
        Subject: CN=167572A3DFAF7827DACB17DEA1C90A77208D88E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:77:41:b6:65:03:ac:3b:43:f9:23:bd:54:
                    16:ae:c7:87:99:cc:35:aa:29:29:8a:aa:dc:d5:08:
                    65:96:21:5e:98:b2:1b:62:0e:d6:6e:00:a8:47:95:
                    b5:d1:9e:aa:4a:f0:57:cc:54:00:da:9b:32:0f:88:
                    d0:8f:ba:9d:b1:f1:70:46:74:2f:70:ae:ad:ef:63:
                    4d:f9:38:fe:61:30:4b:8f:08:de:81:f5:f0:f5:31:
                    74:80:00:a2:78:8c:f4:3b:30:6e:e7:91:51:d3:82:
                    bc:d9:6d:db:41:c6:61:27:7b:2a:04:cc:4b:47:10:
                    a0:43:74:33:1c:67:f1:c6:15:4c:cb:4c:83:6f:3a:
                    05:0d:96:43:27:0a:5a:96:44:e7:61:ff:87:4e:4f:
                    3e:9a:9e:da:0c:ff:36:2c:29:cd:c1:7a:a0:aa:d6:
                    7c:47:9d:ba:26:33:66:19:be:eb:e2:6c:0f:56:3c:
                    75:11:db:d8:d2:4d:04:d4:22:05:51:15:12:2e:ca:
                    e6:41:f0:1f:a0:3a:3a:08:e7:0e:65:d6:5e:f4:d8:
                    76:b7:e4:2e:d7:57:76:4c:e8:00:12:d3:1f:d4:e6:
                    b6:35:30:a3:04:af:5c:f8:ed:86:85:d0:15:aa:55:
                    1b:a3:f6:d2:0d:e1:c5:51:74:28:e6:92:b3:9c:de:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:72:A3:DF:AF:78:27:DA:CB:17:DE:A1:C9:0A:77:20:8D:88:E2
            X509v3 Authority Key Identifier:
                keyid:0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:22:67:39:a5:fb:47:08:54:42:48:fd:7a:0a:21:12:14:92:
         f7:3e:b2:e1:e8:ff:16:7f:aa:88:43:5c:44:23:a1:5a:e5:84:
         1e:6b:2a:83:d8:a2:bc:a6:e1:1e:d0:e2:45:b1:1d:f9:de:df:
         f5:d4:c9:65:77:24:9b:e9:22:ed:02:7d:f5:cd:9a:49:44:98:
         ba:99:90:6f:80:6f:73:61:5e:ae:00:78:1d:e8:28:55:92:da:
         e1:14:67:9c:3e:01:ce:ce:ac:7d:c5:16:46:93:72:88:11:b3:
         6f:66:f1:7b:30:50:10:04:73:2d:ee:6b:c1:5c:d0:14:5a:71:
         de:e5:20:fa:d7:9d:f4:38:7a:d8:1c:04:f1:49:d2:4a:c6:f9:
         f9:74:bd:23:e9:10:73:c9:08:9d:2c:0b:53:65:5b:11:ec:68:
         89:6d:6e:d0:1d:20:a6:89:a6:72:e2:5d:40:b2:90:ee:98:25:
         9f:d4:31:bd:c7:b9:7a:94:9a:db:12:bc:c6:71:fd:3f:27:47:
         37:8b:b5:37:ed:09:71:fa:20:04:f2:62:24:35:41:78:68:33:
         13:d0:72:8b:fb:21:ca:64:0b:64:e4:5c:c1:c7:17:78:01:fb:
         77:bb:ed:6c:d8:52:21:da:98:21:f9:cb:9e:76:59:df:04:4c:
         18:e7:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----