This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa
File:                     3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          Hfu9yviO7SG9VTd4OJ9tt7+/1vo+OFG2lGe/bGmf9NI=
Subject key identifier:   5B:4F:CD:7B:36:4E:38:B5:D0:24:98:6E:66:88:00:31:6D:10:07:DA
Certificate issuer:       /CN=8A6FD0B797ED6A627290062BC40CB751266060C8
Certificate serial:       647463D193AFDD9B8FD5C306ACEA7904E24525B0
Authority key identifier: 8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa
Signing time:             Thu 24 Jul 2025 20:49:32 +0000
ROA not before:           Thu 24 Jul 2025 20:44:32 +0000
ROA not after:            Thu 23 Jul 2026 20:49:32 +0000
asID:                     262417
IP address blocks:        177.129.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:63:d1:93:af:dd:9b:8f:d5:c3:06:ac:ea:79:04:e2:45:25:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6FD0B797ED6A627290062BC40CB751266060C8
        Validity
            Not Before: Jul 24 20:44:32 2025 GMT
            Not After : Jul 23 20:49:32 2026 GMT
        Subject: CN=5B4FCD7B364E38B5D024986E668800316D1007DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:1e:a3:cc:7e:86:49:52:d3:98:b0:7c:d1:
                    99:7d:df:5e:4d:c7:2e:f4:33:89:2d:7c:f7:43:ab:
                    b1:9b:02:1a:84:f7:b2:03:8e:ce:75:14:96:86:64:
                    a5:56:30:84:6e:63:7a:de:76:f8:6f:d0:ab:ab:cb:
                    91:08:95:17:d0:0b:de:25:e7:32:fa:63:8d:1f:a5:
                    40:05:7b:f2:ed:9f:f2:df:08:3d:6b:b6:e8:94:7a:
                    6e:3a:24:ed:cf:1b:68:b6:f0:3d:fd:5a:0d:ed:8a:
                    13:7e:4b:f5:10:34:89:ec:4c:76:a3:59:34:21:05:
                    84:00:39:9c:d9:d2:02:89:e7:89:85:53:a1:63:ae:
                    0b:22:1b:90:37:b8:3a:7c:93:12:44:9a:08:d3:a1:
                    f8:7c:15:0c:4a:85:12:c7:ce:4d:bf:11:3f:7e:5b:
                    d2:65:84:96:17:98:10:9c:db:a4:f6:05:ea:30:12:
                    1c:a3:e0:e1:f7:2e:9b:54:73:25:e9:fd:00:22:b5:
                    22:1c:cc:33:a1:45:e5:c1:6e:29:93:4a:1d:dd:21:
                    e3:2c:83:e5:b7:68:39:50:a2:bf:1d:2e:ca:58:cc:
                    f4:40:45:e9:c4:44:93:ad:fb:39:81:ec:ad:33:74:
                    43:63:56:9c:23:7c:32:62:ac:52:1f:fc:70:52:79:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4F:CD:7B:36:4E:38:B5:D0:24:98:6E:66:88:00:31:6D:10:07:DA
            X509v3 Authority Key Identifier:
                keyid:8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:c8:65:93:82:0c:ae:e7:34:f3:7d:30:dc:e9:54:0e:05:
         0b:01:25:69:24:1c:47:13:92:66:37:5b:eb:5d:7f:df:2a:a7:
         eb:d5:42:bd:86:b7:23:f1:f9:d7:65:23:3d:89:98:84:a9:ae:
         ef:ca:c5:f8:d9:fa:57:2c:58:c7:b2:cc:67:71:81:8c:eb:b5:
         5b:b7:9c:78:f2:30:42:49:4a:83:b5:21:16:8b:82:3f:72:4d:
         2d:73:ed:8b:c7:35:51:f9:00:48:73:02:b4:96:5d:7e:c6:53:
         be:90:e0:cb:0c:2d:68:4e:5f:00:74:f4:ee:36:ac:86:90:03:
         5e:9e:b6:3f:d2:9a:ea:ad:37:88:87:a0:a2:7f:af:79:87:2f:
         16:8f:49:19:12:32:59:67:a1:e5:c4:4b:12:0e:83:7b:84:17:
         29:af:99:cd:b1:69:f8:fe:e4:b9:97:d9:5a:2a:7d:46:14:a4:
         53:d0:d4:90:92:47:63:f9:41:a1:5c:d0:ee:b9:77:55:d8:35:
         9c:f7:f5:a7:fb:61:2e:16:10:e3:17:ef:fd:bd:ac:aa:90:2c:
         55:5f:8a:3b:21:18:22:80:db:72:95:0e:39:67:97:2f:57:de:
         b0:10:9e:cc:bc:72:2b:1d:e7:1b:2e:a5:a6:0e:4b:d6:42:b6:
         0e:97:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----