This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa
File:                     3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          8jvnjcBobFzALqomkKv9iDdpA3FZ5L0wJIg+dYqhZHM=
Subject key identifier:   17:53:BE:4D:90:C4:24:62:E5:53:DB:AB:41:AE:71:31:83:80:D5:05
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       1F6C63BF1188F5249F316982B0C73E3AB068B36A
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     61614
IP address blocks:        168.227.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6c:63:bf:11:88:f5:24:9f:31:69:82:b0:c7:3e:3a:b0:68:b3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:22:a8:c6:7a:70:86:7b:2e:2f:61:d1:73:
                    d3:e6:b3:cd:52:62:f8:77:b2:4d:c5:89:e6:e2:45:
                    04:84:fa:10:ae:74:35:73:4f:dc:10:16:f5:5b:98:
                    3b:6d:3a:46:a0:bd:c7:56:d5:94:8b:18:f0:bc:f2:
                    f6:ca:0d:7f:d5:5a:c5:18:49:88:c4:ec:84:36:01:
                    19:7a:4a:86:59:f3:6c:e8:7f:3f:d8:b3:cf:a0:87:
                    f1:15:67:34:d7:b6:06:2a:a6:6b:f4:7e:e6:2a:82:
                    c0:6b:eb:63:da:a1:86:2a:a7:41:0f:cf:19:21:14:
                    0d:05:44:21:48:4e:ce:50:34:86:42:74:13:d4:50:
                    ef:3a:ec:d3:c9:2f:61:c0:ab:6a:b6:46:da:69:3a:
                    a5:e8:90:25:14:1c:e4:ec:45:9c:b1:54:1a:f0:5f:
                    43:91:9f:1d:bb:d4:cb:e2:e9:6b:fb:26:9a:aa:b4:
                    6a:fd:40:54:4f:fe:fa:f2:83:17:9a:8b:90:ca:36:
                    04:28:8a:b2:f3:fe:ba:15:29:f0:49:7f:9f:df:1c:
                    84:49:cc:7d:85:2d:e1:a9:86:32:40:3a:84:e2:d7:
                    b1:eb:81:c8:e7:fb:9f:42:2c:b1:65:f0:3b:52:bb:
                    7d:a9:f2:d2:0b:64:a6:6a:c6:07:09:47:94:da:75:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:53:BE:4D:90:C4:24:62:E5:53:DB:AB:41:AE:71:31:83:80:D5:05
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:8d:a2:da:b8:18:a5:de:9a:b4:df:4b:f7:5e:e7:39:24:
         fe:a4:92:a1:6e:9e:1a:d7:6b:6a:dc:1d:81:a1:14:3f:8c:28:
         0d:ff:1a:30:5c:98:7c:c6:a8:55:b2:6b:d9:91:c1:8e:86:b8:
         9c:53:0b:b1:e4:61:52:ed:61:b0:5b:cd:be:4c:9c:fc:e9:de:
         9b:fc:62:80:e4:78:2c:45:76:08:bd:27:dc:fd:ad:cb:e8:e1:
         1b:9c:88:4c:7e:3f:be:db:70:be:6f:d9:4f:ea:cc:4b:22:6d:
         01:f1:75:e0:c2:2e:13:20:02:45:0b:dc:13:2b:14:2a:68:b1:
         4f:51:b7:87:ce:7e:d5:2a:66:98:70:19:22:80:c4:dc:29:89:
         7b:f0:83:4e:11:30:d3:fa:5f:11:c6:0a:e0:41:78:44:70:5e:
         0b:cc:fa:92:0c:ca:31:52:ca:fa:95:90:94:f0:e2:63:bd:05:
         ca:7b:04:c3:82:24:b5:3a:6d:ae:f8:45:99:40:76:10:9b:1b:
         56:60:ce:4e:0f:16:8f:63:0b:50:b5:f7:49:fe:64:63:96:0a:
         8f:d4:c0:8f:8e:d0:00:10:cd:fb:bc:82:c3:ce:94:0b:13:7a:
         c1:c8:26:07:57:ed:ce:5d:b7:b2:53:8a:34:c3:17:c7:f0:2d:
         50:36:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----