This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
File:                     34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa (raw, json)
Hash identifier:          lx57QXPzhQ0rZ8eHYKwzl7zsoO3m/FvVC0DWk9sXkJ4=
Subject key identifier:   81:D6:D3:9C:60:95:CD:28:71:E1:C6:69:64:90:09:C5:68:91:BD:C1
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       56BDDACF7805FC9F519AE8FCAEE6DAE130BF7DC5
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
Signing time:             Thu 06 Mar 2025 04:33:10 +0000
ROA not before:           Thu 06 Mar 2025 04:28:10 +0000
ROA not after:            Thu 05 Mar 2026 04:33:10 +0000
asID:                     267329
IP address blocks:        45.232.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bd:da:cf:78:05:fc:9f:51:9a:e8:fc:ae:e6:da:e1:30:bf:7d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Mar  6 04:28:10 2025 GMT
            Not After : Mar  5 04:33:10 2026 GMT
        Subject: CN=81D6D39C6095CD2871E1C669649009C56891BDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:ca:53:24:7c:d3:d3:b3:e4:17:2d:2d:c8:
                    81:9b:18:ac:eb:4e:60:90:f2:0c:ad:d2:42:f3:ef:
                    8a:ec:18:fe:ac:50:ce:68:6e:6c:f7:3d:98:62:dd:
                    6e:19:5a:74:e9:73:1a:75:16:dd:28:ab:b4:f1:72:
                    e0:a0:be:11:5a:1d:97:f1:3d:26:46:3e:c0:87:7f:
                    f6:8f:72:e9:a7:06:31:f7:f7:06:cb:b6:95:69:0b:
                    b1:1d:e0:2b:39:a5:29:c9:9e:aa:1f:e0:1a:c1:f7:
                    3f:29:bb:e9:1d:bb:9d:f1:80:87:f6:0c:61:6b:5a:
                    9c:e7:db:dc:97:a4:91:a5:9a:59:f6:82:06:f2:6f:
                    d0:56:06:fd:a8:90:4c:b7:d4:4f:9e:dc:f6:4a:78:
                    6a:69:36:88:34:f9:ef:ef:6b:56:42:82:b3:5e:a8:
                    e9:2f:f6:ca:6a:80:c2:b6:e1:e1:6f:f8:ee:45:38:
                    58:ee:4b:ff:c9:f8:a2:68:87:eb:a4:b2:60:53:dc:
                    ab:cc:87:46:4e:e4:58:b8:8d:95:d6:68:bd:b6:cf:
                    77:8e:5b:fc:09:f3:db:a6:5d:30:f1:93:5f:70:67:
                    00:76:49:d5:63:b0:54:22:29:a6:18:dc:49:43:69:
                    87:c3:a6:e4:43:d7:67:af:df:70:25:fe:49:08:5d:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:D3:9C:60:95:CD:28:71:E1:C6:69:64:90:09:C5:68:91:BD:C1
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:4e:5b:b3:9e:92:af:32:ae:33:a0:ba:6e:5b:1b:de:37:
         55:b6:67:2f:d5:0e:ee:14:66:b2:bf:60:2a:1f:a2:4d:29:ca:
         41:fc:3a:bb:12:03:fa:1b:c4:5d:45:96:d3:9f:a0:fb:60:72:
         4c:6a:55:28:14:bd:cf:98:10:d1:f9:4e:80:89:04:36:21:1d:
         72:2d:f5:13:9a:e3:ac:61:38:8f:9a:10:b9:79:40:3e:8c:32:
         2b:28:d0:fb:d4:7a:48:e5:7f:a2:52:be:cd:2d:75:a1:c4:ae:
         dc:81:3d:e1:8a:bc:4e:ac:b3:b4:0a:9b:d5:50:ef:42:33:14:
         34:70:bd:72:05:00:a0:6b:7f:b8:b3:ba:e9:f8:c3:95:80:a2:
         42:d2:6c:76:63:da:9c:24:f5:bc:c8:31:55:4b:b5:33:3e:3c:
         e6:7c:c2:64:22:8e:a1:a2:8b:50:78:db:68:77:33:d6:93:fe:
         f9:ca:b6:97:b7:b9:3c:ae:0d:c5:1e:ba:ef:a5:f7:ae:4a:f8:
         28:4b:2a:2e:2c:19:41:1a:48:ca:96:5b:bf:e4:b5:c1:0b:72:
         9c:14:30:9d:59:09:c6:e0:1b:d8:61:5d:45:4c:21:aa:44:2a:
         db:69:da:aa:12:3e:82:ab:02:84:21:02:c5:7d:3a:3f:1e:d0:
         45:92:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----