This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/34352e3138392e3234302e302f32322d3232203d3e20323639363034.roa
File:                     34352e3138392e3234302e302f32322d3232203d3e20323639363034.roa (raw, json)
Hash identifier:          2IFxfPoFyPb++B0tIZTp1xKeq6FODi2A5Y92KGJugu4=
Subject key identifier:   1D:70:25:69:04:F6:B6:8C:49:66:D2:01:6C:18:20:0E:BD:5B:FB:0F
Certificate issuer:       /CN=80203E22C8FA0050317D1387223B6C2E9CFE204B
Certificate serial:       4BB4E237E4DF9E618AB52BEDC8FEF848AD067AF3
Authority key identifier: 80:20:3E:22:C8:FA:00:50:31:7D:13:87:22:3B:6C:2E:9C:FE:20:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80203E22C8FA0050317D1387223B6C2E9CFE204B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/34352e3138392e3234302e302f32322d3232203d3e20323639363034.roa
Signing time:             Thu 01 May 2025 22:57:54 +0000
ROA not before:           Thu 01 May 2025 22:52:54 +0000
ROA not after:            Thu 30 Apr 2026 22:57:54 +0000
asID:                     269604
IP address blocks:        45.189.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b4:e2:37:e4:df:9e:61:8a:b5:2b:ed:c8:fe:f8:48:ad:06:7a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80203E22C8FA0050317D1387223B6C2E9CFE204B
        Validity
            Not Before: May  1 22:52:54 2025 GMT
            Not After : Apr 30 22:57:54 2026 GMT
        Subject: CN=1D70256904F6B68C4966D2016C18200EBD5BFB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:ad:39:8a:1e:ab:3c:6f:4b:44:b7:6a:71:
                    86:1a:2b:5b:ed:48:bf:cc:cd:0f:b7:87:68:de:46:
                    88:49:56:ee:05:34:cc:a4:96:97:a7:ae:cb:68:e7:
                    02:76:63:d6:3a:69:d6:24:46:bd:c9:e3:a8:a8:67:
                    44:83:9f:8b:61:ba:68:9d:ec:e2:5e:b4:e4:d3:77:
                    c2:1d:6f:ce:08:f5:83:35:2d:87:89:32:ab:8b:e0:
                    9e:62:8f:5a:8f:fb:d3:80:8c:57:9d:44:14:07:d2:
                    ce:7b:9d:8b:8e:78:2a:eb:1f:26:49:e6:76:e9:b8:
                    88:b1:52:16:52:e3:12:dc:a6:50:bc:10:29:e3:bf:
                    a9:54:56:fc:3c:b4:06:eb:64:b4:3e:cc:42:56:0b:
                    ab:f3:4a:fb:1a:34:ab:41:80:f3:ed:8c:f1:98:e0:
                    b0:53:59:79:d6:40:d9:68:7f:24:85:d7:ea:6a:cc:
                    4a:52:cc:2d:2b:a0:51:d6:5b:22:e9:a6:2e:c5:32:
                    b5:a9:f4:9e:fc:aa:4a:4a:4e:91:04:f3:a7:04:d3:
                    67:f8:cf:ab:7b:58:c1:ec:66:09:7e:15:d7:bb:64:
                    56:34:e7:42:7f:6d:05:06:62:7f:10:64:89:31:80:
                    62:d2:a6:32:0d:85:c4:7a:47:4e:80:4e:84:8e:f2:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:70:25:69:04:F6:B6:8C:49:66:D2:01:6C:18:20:0E:BD:5B:FB:0F
            X509v3 Authority Key Identifier:
                keyid:80:20:3E:22:C8:FA:00:50:31:7D:13:87:22:3B:6C:2E:9C:FE:20:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/80203E22C8FA0050317D1387223B6C2E9CFE204B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80203E22C8FA0050317D1387223B6C2E9CFE204B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/34352e3138392e3234302e302f32322d3232203d3e20323639363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:29:f0:56:25:b5:95:74:3d:de:06:09:9b:3b:3b:fe:27:d7:
         1d:09:37:b9:a3:e5:78:03:b4:af:24:6b:e9:cc:60:72:d9:b6:
         31:36:f0:d4:9a:14:89:ea:be:2b:f1:6e:7b:01:50:ed:7e:fa:
         67:01:79:73:a4:05:82:8a:45:f9:10:78:34:fb:2c:3b:cc:c6:
         94:6e:2b:e6:b3:2a:7c:71:09:c0:89:fd:30:d2:be:84:d6:ea:
         b0:bb:f2:96:2c:53:f5:30:84:05:da:ed:ca:d4:55:d3:de:8c:
         60:bb:36:aa:ab:b9:a0:60:48:f9:1f:e8:9d:02:fd:8f:62:e2:
         6b:d4:89:45:9a:85:49:32:b7:fb:f4:4e:1a:0b:1d:0d:49:da:
         0b:d2:06:d4:90:76:84:f0:ef:35:d4:ba:d7:5b:1d:2e:07:05:
         0f:78:dd:30:49:a1:e3:e4:97:96:22:bd:4b:fc:0e:38:52:09:
         73:02:80:9a:17:44:dd:5a:45:cf:69:b5:78:b3:f8:7d:2d:61:
         2e:bb:7d:48:5a:af:34:62:92:e7:ed:f1:84:ba:b2:39:a1:7a:
         cc:49:18:ae:78:71:19:d2:f4:17:a4:e1:5b:53:cb:52:f7:f7:
         cc:2e:be:b3:9b:30:8d:aa:3a:3d:82:9f:11:f0:30:c2:7b:6c:
         ab:bd:25:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS7TiN+TfnmGKtSvtyP74SK0GevMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAyMDNFMjJDOEZBMDA1MDMxN0QxMzg3MjIzQjZDMkU5
Q0ZFMjA0QjAeFw0yNTA1MDEyMjUyNTRaFw0yNjA0MzAyMjU3NTRaMDMxMTAvBgNV
BAMTKDFENzAyNTY5MDRGNkI2OEM0OTY2RDIwMTZDMTgyMDBFQkQ1QkZCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQba05ih6rPG9LRLdqcYYaK1vt
SL/MzQ+3h2jeRohJVu4FNMyklpenrsto5wJ2Y9Y6adYkRr3J46ioZ0SDn4thumid
7OJetOTTd8Idb84I9YM1LYeJMquL4J5ij1qP+9OAjFedRBQH0s57nYuOeCrrHyZJ
5nbpuIixUhZS4xLcplC8ECnjv6lUVvw8tAbrZLQ+zEJWC6vzSvsaNKtBgPPtjPGY
4LBTWXnWQNlofySF1+pqzEpSzC0roFHWWyLppi7FMrWp9J78qkpKTpEE86cE02f4
z6t7WMHsZgl+Fde7ZFY050J/bQUGYn8QZIkxgGLSpjINhcR6R06AToSO8kcHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHXAlaQT2toxJZtIBbBggDr1b+w8wHwYDVR0j
BBgwFoAUgCA+Isj6AFAxfROHIjtsLpz+IEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5Zb2IyenJ5UGJ5U3pkQTFzOXByclZKZks4RjNNVU1ndGNLYnU3ZDVv
R0cvMC84MDIwM0UyMkM4RkEwMDUwMzE3RDEzODcyMjNCNkMyRTlDRkUyMDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMjAzRTIyQzhGQTAwNTAz
MTdEMTM4NzIyM0I2QzJFOUNGRTIwNEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuWW9iMnpyeVBieVN6ZEExczlwcnJWSmZLOEYzTVVNZ3RjS2J1N2Q1b0dHLzAv
MzQzNTJlMzEzODM5MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzNjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvfAwDQYJKoZIhvcNAQELBQADggEBAIAp8FYl
tZV0Pd4GCZs7O/4n1x0JN7mj5XgDtK8ka+nMYHLZtjE28NSaFInqvivxbnsBUO1+
+mcBeXOkBYKKRfkQeDT7LDvMxpRuK+azKnxxCcCJ/TDSvoTW6rC78pYsU/UwhAXa
7crUVdPejGC7NqqruaBgSPkf6J0C/Y9i4mvUiUWahUkyt/v0ThoLHQ1J2gvSBtSQ
doTw7zXUutdbHS4HBQ943TBJoePkl5YivUv8DjhSCXMCgJoXRN1aRc9ptXiz+H0t
YS67fUharzRikuft8YS6sjmhesxJGK54cRnS9Bek4VtTy1L398wuvrObMI2qOj2C
nxHwMMJ7bKu9JQ0=
-----END CERTIFICATE-----