This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130362e302f32332d3233203d3e20323638303534.roa
File:                     34352e3136372e3130362e302f32332d3233203d3e20323638303534.roa (raw, json)
Hash identifier:          gshBf9Pbyg21oApR7Cffrc4AzYkE5JZQTpA4LOA3ePo=
Subject key identifier:   8E:28:37:56:B4:BA:C4:64:11:94:D5:7D:13:28:83:FC:A5:F5:83:D5
Certificate issuer:       /CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Certificate serial:       2CAB5B56980C23C6FECC9EB3D76762E9A9BEE83D
Authority key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130362e302f32332d3233203d3e20323638303534.roa
Signing time:             Sat 20 Sep 2025 01:26:11 +0000
ROA not before:           Sat 20 Sep 2025 01:21:11 +0000
ROA not after:            Sat 19 Sep 2026 01:26:11 +0000
asID:                     268054
IP address blocks:        45.167.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ab:5b:56:98:0c:23:c6:fe:cc:9e:b3:d7:67:62:e9:a9:be:e8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
        Validity
            Not Before: Sep 20 01:21:11 2025 GMT
            Not After : Sep 19 01:26:11 2026 GMT
        Subject: CN=8E283756B4BAC4641194D57D132883FCA5F583D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:73:7b:d2:90:11:aa:2f:3b:84:f3:cc:1a:
                    d0:49:3f:cc:a1:3f:0e:c6:c3:4c:ca:dd:68:b3:c2:
                    c3:30:92:63:fa:d2:af:c4:ea:9a:27:19:dc:ec:ce:
                    db:3d:3a:36:6c:5c:19:9e:cd:3f:10:66:76:f2:12:
                    a0:4a:0f:96:67:e1:8e:53:fa:be:b1:83:e4:f6:31:
                    81:17:c0:44:46:5b:4b:7a:dc:5b:6e:99:95:77:d4:
                    b9:33:6d:6e:a4:c1:40:fc:bf:b5:eb:10:6e:54:9b:
                    8c:3d:17:be:54:2f:da:d4:98:68:33:ae:0d:42:19:
                    50:36:70:cb:4e:4b:6d:c3:cc:d6:f5:fb:05:58:92:
                    49:0e:f4:98:41:d1:ad:b7:5f:68:4f:eb:70:07:54:
                    7b:02:a3:8f:71:6f:30:6f:38:78:98:f8:ce:45:a7:
                    ef:2f:33:83:d9:c4:e5:a5:04:da:d2:03:9b:ce:ec:
                    68:af:7c:29:52:73:e4:18:50:71:48:fc:c1:ce:24:
                    24:f9:8b:60:c2:84:8a:17:2f:04:91:71:14:f2:b5:
                    1a:88:16:60:c2:4e:df:72:7a:db:76:55:1b:82:b7:
                    51:4a:8e:a5:7f:07:f3:15:d5:fa:04:f2:49:a6:27:
                    16:db:8d:f3:76:36:a6:ef:ed:2f:5a:c2:fe:bd:a3:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:28:37:56:B4:BA:C4:64:11:94:D5:7D:13:28:83:FC:A5:F5:83:D5
            X509v3 Authority Key Identifier:
                keyid:A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130362e302f32332d3233203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:6d:60:95:53:97:2b:1c:74:ca:df:99:61:e4:10:13:da:62:
         5c:14:64:16:e0:94:b5:02:22:84:8b:61:04:41:3b:ee:af:6d:
         dc:1a:1f:b0:7a:bb:b0:33:37:f8:99:df:1e:6b:c2:d3:54:ad:
         e4:b5:dc:39:0b:6a:ca:ba:b5:a1:a0:ed:bc:67:d4:06:0b:d0:
         55:3a:af:ab:6e:e6:d8:6f:68:8c:90:79:eb:64:ce:74:bf:9b:
         85:b4:b7:54:3e:64:b6:b2:e7:b4:01:32:61:84:28:9d:8f:0f:
         7f:7b:08:89:57:8f:35:99:8b:cd:44:91:50:d1:80:a5:bf:ca:
         c1:ba:5c:91:62:5d:d4:6d:d9:24:e2:53:ef:16:67:3a:5f:ee:
         7b:62:0e:b6:4d:63:44:48:0f:bc:eb:9f:bd:b5:85:f1:2a:38:
         0d:69:a9:4f:59:22:40:49:e7:28:6c:fc:fc:96:7b:64:0a:ec:
         57:60:a9:c0:22:b3:48:51:3f:60:24:46:dd:3c:81:e7:2d:de:
         bd:10:27:8d:71:02:8d:54:27:74:30:86:5f:8c:9c:24:56:14:
         90:3c:4d:54:31:67:df:94:61:fd:af:c0:e7:57:72:6b:22:66:
         db:b7:51:ad:b9:00:6d:78:79:e7:47:cd:ee:48:c7:0c:3d:04:
         63:69:16:ff
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULKtbVpgMI8b+zJ6z12di6am+6D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0NEZFN0FBM0I0Qjk5QjI4NDI2RTlBN0UyMDEyNEE1
MDQ1MEQxMjAeFw0yNTA5MjAwMTIxMTFaFw0yNjA5MTkwMTI2MTFaMDMxMTAvBgNV
BAMTKDhFMjgzNzU2QjRCQUM0NjQxMTk0RDU3RDEzMjg4M0ZDQTVGNTgzRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EnN70pARqi87hPPMGtBJP8yh
Pw7Gw0zK3WizwsMwkmP60q/E6ponGdzszts9OjZsXBmezT8QZnbyEqBKD5Zn4Y5T
+r6xg+T2MYEXwERGW0t63FtumZV31LkzbW6kwUD8v7XrEG5Um4w9F75UL9rUmGgz
rg1CGVA2cMtOS23DzNb1+wVYkkkO9JhB0a23X2hP63AHVHsCo49xbzBvOHiY+M5F
p+8vM4PZxOWlBNrSA5vO7GivfClSc+QYUHFI/MHOJCT5i2DChIoXLwSRcRTytRqI
FmDCTt9yett2VRuCt1FKjqV/B/MV1foE8kmmJxbbjfN2Nqbv7S9awv69o6TLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjig3VrS6xGQRlNV9EyiD/KX1g9UwHwYDVR0j
BBgwFoAUqUT+eqO0uZsoQm6afiASSlBFDRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlRSVnYyeHM5VnlhZjhwejZ5M1pvMVNmUTFMVldncjJaaE5oajFEcjY1
TEYvMS9BOTQ0RkU3QUEzQjRCOTlCMjg0MjZFOUE3RTIwMTI0QTUwNDUwRDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NDRGRTdBQTNCNEI5OUIy
ODQyNkU5QTdFMjAxMjRBNTA0NTBEMTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJUUlZ2MnhzOVZ5YWY4cHo2eTNabzFTZlExTFZXZ3IyWmhOaGoxRHI2NUxGLzEv
MzQzNTJlMzEzNjM3MmUzMTMwMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMDM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtp2owDQYJKoZIhvcNAQELBQADggEBAI9tYJVT
lyscdMrfmWHkEBPaYlwUZBbglLUCIoSLYQRBO+6vbdwaH7B6u7AzN/iZ3x5rwtNU
reS13DkLasq6taGg7bxn1AYL0FU6r6tu5thvaIyQeetkznS/m4W0t1Q+ZLay57QB
MmGEKJ2PD397CIlXjzWZi81EkVDRgKW/ysG6XJFiXdRt2STiU+8WZzpf7ntiDrZN
Y0RID7zrn721hfEqOA1pqU9ZIkBJ5yhs/PyWe2QK7FdgqcAis0hRP2AkRt08gect
3r0QJ41xAo1UJ3Qwhl+MnCRWFJA8TVQxZ9+UYf2vwOdXcmsiZtu3Ua25AG14eedH
ze5Ixww9BGNpFv8=
-----END CERTIFICATE-----