This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32342d3234203d3e203631363839.roa
File:                     3137372e38342e3233362e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          FmAMbHwpfOW1LM2ByxOtBYdB5RKKUdJNuy9arDNkI1g=
Subject key identifier:   74:63:AF:A9:B4:FF:21:00:DA:29:0B:67:17:9E:2A:66:94:76:A1:6A
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       310B701BE7F41D9907943EE64579796FADD5D496
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:57 +0000
ROA not before:           Fri 25 Jul 2025 20:43:57 +0000
ROA not after:            Fri 24 Jul 2026 20:48:57 +0000
asID:                     61689
IP address blocks:        177.84.236.0/24 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0b:70:1b:e7:f4:1d:99:07:94:3e:e6:45:79:79:6f:ad:d5:d4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:57 2025 GMT
            Not After : Jul 24 20:48:57 2026 GMT
        Subject: CN=7463AFA9B4FF2100DA290B67179E2A669476A16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:99:b9:88:17:92:a3:6f:90:ef:2d:c6:cb:
                    7c:c3:b1:30:32:15:3b:ab:c1:be:4b:6d:67:00:32:
                    a8:3c:2b:5f:a0:1d:a0:e4:ce:c6:8b:bc:a1:6e:f8:
                    97:5a:78:b9:d9:fd:95:fc:1b:32:32:e7:2f:59:a6:
                    df:94:3f:f2:4f:8c:ac:ab:3e:a9:f1:49:52:19:a5:
                    68:d7:a6:59:f1:c7:bc:a5:09:77:65:c8:09:83:67:
                    b4:a6:81:c0:bb:84:c8:0f:a3:d5:54:f7:fc:ac:ab:
                    39:c7:11:46:c2:4b:d9:3e:23:1e:1c:4f:cf:1a:6b:
                    39:72:97:3d:28:f1:6c:18:70:06:fb:3e:d3:78:f4:
                    54:ad:a1:30:81:91:63:d8:d2:84:fe:ea:52:81:cb:
                    8c:89:03:47:5e:db:b0:5f:27:f3:30:89:29:8f:9a:
                    4e:d6:62:7f:4c:82:38:21:eb:77:fb:f3:25:54:af:
                    07:87:15:e8:f1:6e:1f:75:4f:0d:09:4e:13:6a:10:
                    b3:ab:86:db:60:7f:8e:8e:bd:0f:1d:bc:0e:61:f3:
                    2f:c5:29:af:26:72:b6:f6:70:42:a4:6d:a2:83:e3:
                    ee:69:b8:62:43:a9:a1:12:64:b3:c8:b5:7a:80:cc:
                    9d:99:c6:88:30:78:ff:c5:74:67:23:2c:e9:33:86:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:AF:A9:B4:FF:21:00:DA:29:0B:67:17:9E:2A:66:94:76:A1:6A
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:70:a5:ca:9b:76:ba:f3:47:66:7f:e1:3d:fd:9b:04:3c:cf:
         47:6b:77:90:36:d9:38:34:d7:bf:17:e8:4a:03:93:b5:2f:7a:
         2a:b9:8e:ce:18:9e:9d:fc:bb:91:3c:3f:4d:9b:e3:e3:cd:c8:
         50:7f:81:34:eb:38:99:c9:fc:0c:42:01:77:a2:0b:01:57:bb:
         d8:73:20:3e:ea:a5:2c:2d:34:a4:60:73:97:05:d9:f0:e0:64:
         56:7f:13:2a:1c:ed:17:d5:3a:51:8d:56:ed:a2:32:76:db:6e:
         60:09:45:29:0a:89:1a:fb:53:0f:bd:03:8c:a2:75:b2:6c:78:
         b3:c1:a4:3e:10:41:28:52:8a:68:55:d9:34:20:e9:a8:0f:d6:
         be:4b:7f:bc:b3:77:61:10:de:64:f1:42:b9:a1:22:3c:05:71:
         2e:67:b6:51:df:cb:28:13:e9:d3:7f:e1:42:36:d0:99:74:e3:
         13:0e:8f:a7:8b:35:d0:9e:c6:b7:b7:51:c8:02:1c:a5:63:a4:
         02:70:67:ee:94:29:79:f2:3c:f7:6c:6c:c1:49:8f:de:39:ba:
         34:93:12:62:f0:82:e5:9a:17:34:fd:bf:0c:73:76:99:76:e6:
         88:77:b3:15:d4:2d:0a:f3:35:f6:98:a4:33:fa:a4:03:b1:cf:
         bd:7c:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----