This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3234203d3e20323632343137.roa
File:                     3136382e3139352e3232382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          sMe0iqdSI4SHI0maN29trcFZdka1/YuKW49UWafvIEA=
Subject key identifier:   4E:36:63:1F:14:2F:62:68:F2:C9:26:73:63:3F:67:28:F2:A8:D6:EE
Certificate issuer:       /CN=8A6FD0B797ED6A627290062BC40CB751266060C8
Certificate serial:       6AFD9D7C85C2176D2580A7A568813B982B27C733
Authority key identifier: 8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3234203d3e20323632343137.roa
Signing time:             Fri 22 Aug 2025 15:48:39 +0000
ROA not before:           Fri 22 Aug 2025 15:43:39 +0000
ROA not after:            Fri 21 Aug 2026 15:48:39 +0000
asID:                     262417
IP address blocks:        168.195.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:9d:7c:85:c2:17:6d:25:80:a7:a5:68:81:3b:98:2b:27:c7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6FD0B797ED6A627290062BC40CB751266060C8
        Validity
            Not Before: Aug 22 15:43:39 2025 GMT
            Not After : Aug 21 15:48:39 2026 GMT
        Subject: CN=4E36631F142F6268F2C92673633F6728F2A8D6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:f5:ef:3c:82:21:50:bb:74:50:15:cf:8d:
                    e9:3f:47:6b:d4:22:f2:2f:25:ed:e0:46:fb:7a:76:
                    dd:ce:14:cf:05:4c:cf:70:21:1a:61:73:60:36:c5:
                    d6:6a:77:53:5d:6a:af:be:b2:4e:91:74:a8:fe:03:
                    6e:43:1f:2b:30:28:bc:64:a7:a6:c5:a8:fe:e8:c8:
                    00:25:6c:bf:e1:24:63:5f:23:17:e0:d1:1a:6a:13:
                    dd:3b:e3:7c:4f:4c:1d:5f:ab:8f:9a:7c:ff:e7:1c:
                    a3:03:6b:c0:64:eb:25:b1:9f:bf:ab:e9:8b:c5:96:
                    1e:85:ad:e7:ec:91:16:59:b0:e3:f8:ad:8f:97:6f:
                    4e:8f:b8:be:30:71:35:f0:f2:b6:27:40:05:7f:b2:
                    df:fb:92:92:ff:31:ac:e3:43:34:f0:c8:7c:23:01:
                    54:bb:06:86:fa:79:fa:81:48:94:80:e1:a8:6d:81:
                    46:e6:eb:df:c1:a2:45:fd:3d:b8:ba:02:2f:48:c9:
                    d0:eb:d1:db:88:46:e6:b8:51:97:8e:b7:56:f5:a3:
                    5a:11:5e:a2:ed:f0:32:00:49:cb:ed:dd:6d:1b:d7:
                    36:c1:e7:c0:74:99:82:3f:ef:e1:24:0d:d2:b1:8c:
                    ee:80:25:25:3b:cf:92:61:99:6a:8f:6d:fd:ff:8e:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:36:63:1F:14:2F:62:68:F2:C9:26:73:63:3F:67:28:F2:A8:D6:EE
            X509v3 Authority Key Identifier:
                keyid:8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:39:4f:f5:81:23:77:21:ec:8e:cb:29:2c:86:d7:fa:92:
         20:e8:09:46:4e:8e:ed:00:82:e1:d1:80:d4:2f:0b:d9:63:1a:
         12:6d:ad:d5:b1:f0:a1:6f:60:ef:e2:25:16:64:48:7a:24:d1:
         8e:1b:52:f6:d2:3f:59:10:37:39:fd:9e:39:35:d9:b8:9f:81:
         44:13:cc:57:19:1b:f9:92:54:ef:27:18:21:8d:fa:ab:36:72:
         a6:2d:4e:27:ad:93:24:47:8b:a4:fe:20:58:6e:0d:31:0f:7f:
         c2:ad:2b:76:fe:18:6e:8b:dd:21:40:90:b2:b2:dd:a1:7b:2c:
         45:33:3d:d1:e1:1c:14:fb:3c:30:7c:02:3d:c3:6a:93:cb:59:
         0a:8f:79:6e:10:37:37:de:12:1d:2e:78:47:4a:86:11:35:f0:
         a4:ab:37:ad:30:80:db:50:06:43:0f:1b:cf:19:04:2d:a5:96:
         94:7a:f1:f9:2a:fb:bd:88:ed:47:e8:84:39:a6:05:a5:c8:f6:
         5b:ac:c1:8f:4d:de:12:73:b4:f3:0f:c0:2d:f4:49:62:38:22:
         9b:a3:ba:c1:eb:fc:db:b6:bd:58:64:1e:58:8a:8f:d9:d9:79:
         8c:21:93:9e:20:f4:83:d5:b9:48:5c:ca:75:37:7e:62:18:db:
         a9:71:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----