This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          5iD8OM9vXOD+hEs0E0k6JQ0vgLrpYtp0POQlu3qBWqc=
Subject key identifier:   E3:03:67:5C:73:7D:6A:8E:BA:C6:A0:1E:72:24:D7:CC:8E:26:3A:F3
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       436DDD9788472B47FD8A63B20E34CA58ACF07CE0
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa
Signing time:             Mon 19 May 2025 12:21:44 +0000
ROA not before:           Mon 19 May 2025 12:16:44 +0000
ROA not after:            Mon 18 May 2026 12:21:44 +0000
asID:                     52706
IP address blocks:        170.233.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6d:dd:97:88:47:2b:47:fd:8a:63:b2:0e:34:ca:58:ac:f0:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: May 19 12:16:44 2025 GMT
            Not After : May 18 12:21:44 2026 GMT
        Subject: CN=E303675C737D6A8EBAC6A01E7224D7CC8E263AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:31:4b:be:0a:8c:d9:79:df:5b:77:9d:95:
                    86:f7:06:97:cd:b1:e9:fd:58:5d:35:63:ea:8c:63:
                    8c:44:c1:62:a0:74:76:8f:6f:d8:48:b5:75:07:fb:
                    19:9c:9f:50:3f:88:b3:68:6d:51:c7:13:5c:dc:0c:
                    97:2a:9f:db:55:ce:b4:0b:58:0e:b2:bc:56:20:ab:
                    81:33:28:7e:2c:67:69:75:89:16:ee:33:33:e1:46:
                    7b:e4:6d:88:21:77:6d:79:97:5e:1b:67:82:38:94:
                    49:3f:7f:01:53:5d:37:e6:55:8c:23:9c:c0:19:f1:
                    fe:07:92:9c:20:a2:67:65:ab:03:46:26:b4:31:4a:
                    90:dc:d2:56:b2:64:c3:21:f3:7d:a7:ea:02:32:7b:
                    6d:41:67:f1:3f:a2:54:8a:86:a4:43:86:49:60:23:
                    ce:a1:b0:1c:95:48:b2:99:d0:0c:7f:e7:75:0a:ad:
                    9b:17:b4:af:d3:98:47:65:56:cd:83:fb:19:b9:b3:
                    03:aa:13:99:3c:db:e7:39:fb:7d:9d:33:2c:c2:a4:
                    61:b5:89:c8:2a:a0:df:51:e6:c7:29:ef:3a:16:85:
                    dd:e7:a7:6a:f4:d0:b3:0a:7f:83:91:14:2f:5a:5d:
                    11:e9:5d:b2:d9:6e:1e:f2:c6:a4:05:ab:3f:b3:30:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:03:67:5C:73:7D:6A:8E:BA:C6:A0:1E:72:24:D7:CC:8E:26:3A:F3
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:da:ee:af:53:a4:b1:f4:ee:e8:a8:7e:eb:45:74:32:4f:22:
         da:5f:ab:34:ea:8a:65:fb:df:db:ad:72:7d:da:e5:7e:43:09:
         36:b9:24:f3:90:95:45:e7:b2:22:60:4d:67:70:e6:14:88:bf:
         52:95:27:e8:da:7c:75:60:0b:c7:cc:35:0c:bf:2e:82:ee:78:
         14:9b:f9:36:5d:bb:96:a8:03:09:4a:e3:6b:54:b8:e3:da:25:
         51:cf:72:89:32:ef:0d:c9:b9:0a:eb:30:0b:82:f6:c9:95:b0:
         da:d5:e5:b3:6f:b5:f8:13:ca:a1:3d:fe:30:dc:82:ec:d6:0f:
         11:53:21:47:7c:4b:40:13:cd:35:0b:b4:22:8c:11:bf:7f:a7:
         26:8f:ad:df:2a:e9:8d:2c:c6:15:5f:14:6c:7e:5d:15:08:65:
         39:7f:ba:d6:f7:98:b4:e6:8f:45:a6:9b:3e:bc:91:6f:8f:af:
         a0:70:a8:48:00:a4:58:c8:48:22:8c:f9:a1:43:72:b3:f3:4e:
         51:3a:f7:87:ba:e9:bb:4e:79:9b:a1:77:db:05:db:84:0c:bf:
         07:18:e4:99:50:4d:11:5c:0f:e5:2c:30:fc:86:e0:6a:14:d0:
         56:8e:b0:1c:47:2d:0b:65:cb:a9:d0:a1:4e:17:5d:58:d8:70:
         b3:03:33:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ23dl4hHK0f9imOyDjTKWKzwfOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTA1MTkxMjE2NDRaFw0yNjA1MTgxMjIxNDRaMDMxMTAvBgNV
BAMTKEUzMDM2NzVDNzM3RDZBOEVCQUM2QTAxRTcyMjREN0NDOEUyNjNBRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6zFLvgqM2XnfW3edlYb3BpfN
sen9WF01Y+qMY4xEwWKgdHaPb9hItXUH+xmcn1A/iLNobVHHE1zcDJcqn9tVzrQL
WA6yvFYgq4EzKH4sZ2l1iRbuMzPhRnvkbYghd215l14bZ4I4lEk/fwFTXTfmVYwj
nMAZ8f4HkpwgomdlqwNGJrQxSpDc0layZMMh832n6gIye21BZ/E/olSKhqRDhklg
I86hsByVSLKZ0Ax/53UKrZsXtK/TmEdlVs2D+xm5swOqE5k82+c5+32dMyzCpGG1
icgqoN9R5scp7zoWhd3np2r00LMKf4ORFC9aXRHpXbLZbh7yxqQFqz+zMNErAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4wNnXHN9ao66xqAeciTXzI4mOvMwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzMwMmUzMjMzMzMyZTMyMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq6dYwDQYJKoZIhvcNAQELBQADggEBACfa7q9T
pLH07uiofutFdDJPItpfqzTqimX739utcn3a5X5DCTa5JPOQlUXnsiJgTWdw5hSI
v1KVJ+jafHVgC8fMNQy/LoLueBSb+TZdu5aoAwlK42tUuOPaJVHPcoky7w3JuQrr
MAuC9smVsNrV5bNvtfgTyqE9/jDcguzWDxFTIUd8S0ATzTULtCKMEb9/pyaPrd8q
6Y0sxhVfFGx+XRUIZTl/utb3mLTmj0Wmmz68kW+Pr6BwqEgApFjISCKM+aFDcrPz
TlE694e66btOeZuhd9sF24QMvwcY5JlQTRFcD+UsMPyG4GoU0FaOsBxHLQtly6nQ
oU4XXVjYcLMDM8s=
-----END CERTIFICATE-----