This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa
File:                     34352e3233322e3231322e302f32322d3232203d3e203631363134.roa (raw, json)
Hash identifier:          r967pLT9rxnY8xctVQM5C7YBE3Ub4WtllKyJHdaGhVg=
Subject key identifier:   11:3D:F7:5E:E9:9F:3B:1D:46:60:E2:0D:7B:1C:D9:29:4E:70:2F:15
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       76A16C6A747A04C8848252444DBA0AAF6E8C5D9A
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61614
IP address blocks:        45.232.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a1:6c:6a:74:7a:04:c8:84:82:52:44:4d:ba:0a:af:6e:8c:5d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:24:6f:b8:46:ec:1d:cd:ee:4c:ac:70:01:c0:
                    b6:e3:32:28:f0:67:89:74:b7:07:c0:a8:f8:77:bc:
                    9b:b7:a6:67:45:18:a4:71:c1:53:a1:03:00:cf:8f:
                    24:c0:ee:55:a1:b6:93:7d:95:f1:d2:66:4b:4d:7f:
                    c5:af:6a:9f:d8:e3:db:f9:9e:b7:0f:47:06:a2:2f:
                    af:bf:9c:24:59:c9:a0:ae:3a:d8:f2:d0:2b:f6:b0:
                    51:b3:4d:54:de:70:30:94:3e:8f:d8:82:45:c8:5f:
                    c8:69:b5:4a:bd:4e:8e:fb:73:7d:11:ed:60:af:23:
                    dc:68:81:c1:be:d5:3e:a2:92:f1:52:5b:32:3f:1f:
                    ca:4d:ac:57:22:a2:01:1a:0a:30:dd:16:e6:aa:ee:
                    83:f7:b7:a0:11:08:88:ea:10:66:85:35:3c:94:51:
                    8a:84:17:1e:c3:fd:ed:b9:2d:4c:fc:f2:81:59:72:
                    62:3f:e5:81:c8:0a:cc:ac:12:15:50:3f:d9:40:a1:
                    9e:d1:f7:09:63:e0:13:66:c9:a0:19:2c:de:f8:81:
                    54:31:3e:50:f3:de:8a:b7:95:26:fc:db:8b:ed:d2:
                    de:5e:9d:ca:7e:14:be:84:ba:6f:34:6d:14:bf:a8:
                    4f:3a:65:a5:3e:5b:6d:6f:93:d4:93:69:af:4f:2a:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:F7:5E:E9:9F:3B:1D:46:60:E2:0D:7B:1C:D9:29:4E:70:2F:15
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:3c:93:74:7f:23:b3:56:9a:58:f3:d9:ef:a3:bb:f1:14:e7:
         fb:bc:c0:1c:4f:2c:a2:54:db:64:36:72:54:8a:f3:0b:6c:71:
         8b:4f:f3:96:f7:9f:14:c2:23:d2:3e:e0:da:a0:1d:8d:6a:ff:
         03:75:fc:b3:c0:5a:2c:52:23:39:a4:6b:31:6c:9c:5b:29:0f:
         2c:d3:1e:b5:f6:e6:51:66:0b:d4:60:e3:44:dc:d7:5b:33:fb:
         c8:cb:bd:aa:e4:b6:93:8c:30:e9:d8:02:5c:61:af:ff:b2:24:
         30:c0:d1:a0:a8:70:fd:5f:3a:58:53:47:91:93:4a:b0:c6:84:
         a8:b3:48:12:14:72:18:0f:9f:82:3e:e1:34:cb:71:99:2a:88:
         13:61:40:fe:b6:f9:05:0b:75:30:fc:f3:f9:93:c1:2f:21:7a:
         3f:66:fc:6e:04:11:79:38:a2:f9:35:10:c9:f1:71:03:d7:f3:
         36:ca:f4:53:d9:9f:54:43:65:ae:52:21:0d:95:e2:13:bc:28:
         86:71:3e:b8:5b:1c:96:1b:61:cf:c6:16:da:bf:76:7d:f9:ca:
         92:4b:73:3c:b1:15:77:71:47:a7:ce:43:49:43:33:fb:1c:6a:
         2b:3c:05:48:92:8c:9f:d4:03:7f:36:d7:48:4c:a0:ed:10:18:
         b0:47:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----