This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
File:                     3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa (raw, json)
Hash identifier:          G/Ajgsq1hi61q9gXxkEBccZx1fMq3KXLI8Z9stHcLEU=
Subject key identifier:   39:11:ED:4F:CD:C8:ED:68:98:1B:73:EE:3D:B8:46:58:B3:75:EA:1D
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       457F51B7D0CF0EC904D0AC7921BBB50DC2103331
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
Signing time:             Sat 20 Sep 2025 01:26:12 +0000
ROA not before:           Sat 20 Sep 2025 01:21:12 +0000
ROA not after:            Sat 19 Sep 2026 01:26:12 +0000
asID:                     271448
IP address blocks:        181.174.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7f:51:b7:d0:cf:0e:c9:04:d0:ac:79:21:bb:b5:0d:c2:10:33:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Sep 20 01:21:12 2025 GMT
            Not After : Sep 19 01:26:12 2026 GMT
        Subject: CN=3911ED4FCDC8ED68981B73EE3DB84658B375EA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:fb:84:76:c9:0e:bb:ba:42:e9:86:e1:37:
                    a5:08:9e:a2:cb:1a:57:91:b1:8a:1a:6f:a5:8e:28:
                    ad:1f:39:f5:9c:65:69:12:45:9d:44:69:10:c2:47:
                    48:0c:63:9c:55:f5:cb:f3:10:66:c6:ed:69:fb:2e:
                    22:d8:86:0a:2a:3c:f8:f7:10:22:c3:eb:32:40:f7:
                    b0:06:87:a7:ff:b4:e2:57:3a:51:c4:c4:7c:09:99:
                    05:c6:b7:d0:a3:28:a6:02:61:f0:e0:eb:32:a7:c4:
                    39:fc:da:44:a9:3b:cc:b1:95:15:f3:02:15:68:26:
                    9d:2c:40:f6:62:8c:94:fe:8f:50:12:96:6f:cc:1d:
                    85:1b:e0:e9:62:11:51:a4:5d:91:05:8c:69:d3:ac:
                    80:4f:3f:79:4b:4b:18:75:7d:fb:f7:9f:08:d1:93:
                    f7:3d:a8:f6:ed:29:32:ea:06:84:8a:70:13:1a:51:
                    1c:11:bc:b3:26:41:15:93:09:0e:7b:1f:75:15:b9:
                    4e:e4:5e:fa:8c:79:0f:ab:47:63:a4:95:2c:75:c4:
                    83:17:de:ba:4f:98:38:5b:39:3c:93:1b:ba:19:a5:
                    72:50:c7:9a:0b:23:f7:c5:e5:e5:a7:17:0f:3c:9d:
                    98:32:4d:c4:ba:5c:80:33:af:6c:63:59:87:8b:e2:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:ED:4F:CD:C8:ED:68:98:1B:73:EE:3D:B8:46:58:B3:75:EA:1D
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:06:53:e7:5f:8d:85:00:17:28:7a:1a:c6:d8:3c:c0:76:5e:
         d4:9c:4d:8d:fb:3e:81:50:b2:58:81:c9:a8:08:97:63:ea:a0:
         b9:73:55:4f:a7:2a:7a:48:22:11:e2:92:70:39:35:2e:c4:09:
         44:98:c8:a2:2a:94:27:87:66:42:e5:32:40:3a:e3:08:12:9e:
         c6:24:0f:38:e2:a7:4c:74:fc:09:f5:59:a2:8c:26:e9:cf:86:
         f7:10:6b:55:6a:2b:9c:5e:9a:f4:1a:e0:f5:1b:b8:32:6b:ee:
         bd:3f:f3:03:e1:ed:7d:52:a7:a7:64:43:d4:52:f4:1f:38:3f:
         97:f7:30:f6:02:5e:5c:a1:7f:2f:61:cf:c2:06:b2:f4:ef:6c:
         9f:fc:87:fb:26:41:c8:c0:f8:d9:d5:0a:8a:92:86:38:fb:c3:
         6a:54:9f:d0:d4:06:a2:2e:89:39:b5:e7:9f:26:0a:fe:bf:19:
         0f:de:52:90:d0:e5:08:2a:9c:4d:ab:da:a5:79:a4:7f:8a:4b:
         9a:3f:5a:ea:d7:a2:51:f2:24:de:4c:dd:d7:50:87:6b:62:5e:
         59:f2:6c:ee:cb:89:d7:61:e3:de:1d:d7:90:7c:14:97:d7:f3:
         09:a4:ac:4e:26:37:f5:05:e8:97:e7:43:2b:ea:0f:ab:ba:4c:
         92:0d:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----