This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa
File:                     34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa (raw, json)
Hash identifier:          SL09YdOZsKHKKFgAj9DEFu1osdytBa0620LaRbQCSEM=
Subject key identifier:   F0:BD:3A:E8:73:46:53:64:B8:1C:3B:A4:52:BB:30:44:70:D1:2C:E1
Certificate issuer:       /CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
Certificate serial:       7215B2B224C616F8DA1F404E5F199D6AF5A8D5E0
Authority key identifier: 94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa
Signing time:             Tue 09 Sep 2025 20:42:15 +0000
ROA not before:           Tue 09 Sep 2025 20:37:15 +0000
ROA not after:            Tue 08 Sep 2026 20:42:15 +0000
asID:                     269537
IP address blocks:        45.188.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:15:b2:b2:24:c6:16:f8:da:1f:40:4e:5f:19:9d:6a:f5:a8:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
        Validity
            Not Before: Sep  9 20:37:15 2025 GMT
            Not After : Sep  8 20:42:15 2026 GMT
        Subject: CN=F0BD3AE873465364B81C3BA452BB304470D12CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:e9:af:cb:29:66:6f:35:30:34:1c:69:ee:
                    f7:a8:de:cd:7b:d5:a2:50:96:14:05:d5:b1:7e:51:
                    d3:93:0b:61:ac:0c:35:1a:9e:50:1c:53:e5:c3:85:
                    ee:5a:61:63:04:ec:12:70:0d:c5:5d:8a:4c:fd:dc:
                    c4:de:c1:a6:2c:f6:b3:a6:cb:73:0b:30:d1:20:4a:
                    12:e8:2b:ca:b3:fc:72:27:93:f0:55:04:a8:5e:9a:
                    17:f2:e1:a0:56:88:9e:52:7d:60:7d:35:28:6b:3a:
                    f5:a3:62:cd:cd:30:53:65:73:c8:e2:5f:fc:2e:1e:
                    70:c8:29:9c:6d:0b:82:60:e9:e5:02:71:0d:f4:b3:
                    60:4d:15:15:0a:1b:8b:cb:79:13:fd:b6:a6:9a:74:
                    57:29:9f:da:be:ed:63:35:e5:b4:ef:90:88:a4:46:
                    eb:21:19:9a:76:c1:1b:38:f7:44:07:1a:67:1f:0b:
                    08:5a:b9:d7:71:31:13:ae:8a:30:cf:b1:95:55:9d:
                    c1:3a:fd:cb:70:e2:87:70:ca:19:0c:eb:9d:d2:ef:
                    df:40:95:b1:16:55:bc:f2:02:c7:87:e0:60:7a:ca:
                    7e:88:2f:34:e3:43:8c:cc:e1:48:9a:d6:50:61:71:
                    05:f3:9e:6b:37:3d:c7:9d:0d:b5:6b:fb:50:ed:89:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BD:3A:E8:73:46:53:64:B8:1C:3B:A4:52:BB:30:44:70:D1:2C:E1
            X509v3 Authority Key Identifier:
                keyid:94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:98:36:47:1a:17:3b:e0:95:90:a9:5f:54:c8:92:e6:9b:0f:
         7b:de:da:7e:00:ff:0e:11:a9:8b:ef:83:48:e7:19:c3:26:19:
         ae:5a:a9:ed:98:09:df:21:1a:61:a8:e1:cb:c6:f8:0d:e5:37:
         bf:ae:37:1a:06:5e:cd:ee:89:2f:d8:46:39:09:2c:fb:5d:8f:
         fe:60:75:72:08:54:b4:88:58:ca:53:4d:89:08:e7:8c:6f:8d:
         39:7b:f4:f4:d0:b8:a5:54:4e:71:29:ef:65:76:4c:f1:4c:ed:
         d7:a4:af:73:b6:17:3b:8b:59:30:ab:6b:ab:ed:f7:2a:13:e6:
         1e:ad:c0:88:4f:8a:14:8a:e2:79:e6:f3:6a:38:ab:67:8a:45:
         99:4d:87:08:95:2a:db:05:50:a8:a9:62:ea:46:6d:1c:99:3e:
         16:67:22:49:d3:8c:58:c4:6e:ed:ef:59:f7:33:79:6a:d4:dd:
         3e:e9:3e:1a:eb:22:c5:e3:89:b3:04:f1:aa:f4:c0:e7:d0:03:
         95:5d:18:e8:56:6f:ae:15:22:45:8b:a0:9e:6e:5c:a1:af:a9:
         80:6f:d9:9c:11:f8:31:42:75:fa:d7:72:a8:f4:35:c3:a0:50:
         3b:d5:24:61:0a:5e:20:90:10:ce:91:67:b3:d0:89:9c:fd:9f:
         fa:95:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----