This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233382e302f32332d3233203d3e203631363839.roa
File:                     3137372e38342e3233382e302f32332d3233203d3e203631363839.roa (raw, json)
Hash identifier:          Z0ZjJVMhZi7wDzNdLjFTulDq6qjjiDMjCLUmIllG8hs=
Subject key identifier:   F2:A9:33:89:32:31:60:08:57:9E:FD:10:7D:58:86:D9:80:57:C8:D0
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       507E576836034B93EAAA558019BFCAEEA8E384DA
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233382e302f32332d3233203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:29 +0000
ROA not before:           Fri 25 Jul 2025 20:43:29 +0000
ROA not after:            Fri 24 Jul 2026 20:48:29 +0000
asID:                     61689
IP address blocks:        177.84.238.0/23 maxlen: 23
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7e:57:68:36:03:4b:93:ea:aa:55:80:19:bf:ca:ee:a8:e3:84:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:29 2025 GMT
            Not After : Jul 24 20:48:29 2026 GMT
        Subject: CN=F2A9338932316008579EFD107D5886D98057C8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:c2:a6:6c:de:78:d6:f9:f5:3d:5f:3c:ba:
                    a0:94:0f:c7:c1:52:dc:6f:8a:8f:9e:60:86:70:54:
                    24:9b:76:60:22:45:57:f4:c1:86:42:3c:79:0e:0e:
                    3a:eb:00:a8:d8:a8:9d:b5:42:1c:93:80:9e:bb:61:
                    fd:c5:a3:93:f1:03:0f:35:98:c5:a4:54:ae:21:97:
                    ca:21:97:95:d3:70:e2:89:64:16:cd:05:e5:aa:9f:
                    e5:8f:64:5c:e5:0d:96:ad:94:c3:be:fb:e7:03:50:
                    0d:9c:36:79:1a:f8:13:f6:29:4f:c2:ca:35:26:c2:
                    26:73:50:b9:1f:32:22:78:f7:51:1b:c6:46:e4:59:
                    e7:e5:ca:0a:06:c4:11:43:c7:0e:a9:50:06:eb:55:
                    6c:e1:c2:71:9b:f6:a0:9f:9b:49:49:d9:6f:e2:1c:
                    7a:28:29:76:5b:7a:bf:87:98:d9:38:23:19:24:7a:
                    0d:dc:06:10:da:cc:4e:db:b8:ee:ac:b4:62:e4:d1:
                    10:aa:6e:f5:f6:de:ec:d1:04:d8:ad:4a:bb:43:1e:
                    36:f5:00:10:9c:63:99:4a:a6:1a:eb:52:89:c1:32:
                    39:4f:0a:15:da:eb:fc:79:09:a0:e5:92:1d:1a:a3:
                    0a:e0:e0:b3:ce:82:cd:ba:ea:ab:78:6c:4e:f1:84:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A9:33:89:32:31:60:08:57:9E:FD:10:7D:58:86:D9:80:57:C8:D0
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233382e302f32332d3233203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:2a:53:dd:ae:c3:e2:b3:b1:cb:01:14:0c:23:9d:a3:80:
         d7:10:6f:1b:db:d1:7a:e7:43:0a:5e:36:ab:93:17:21:4b:ab:
         49:a8:c6:6c:8e:70:04:58:a8:7e:30:b4:99:92:e5:91:08:b6:
         79:59:ab:26:e5:5f:41:95:67:43:26:24:99:56:13:30:56:f4:
         14:64:2e:19:de:68:83:9c:b8:88:71:e7:ee:45:c7:1a:69:1e:
         65:a0:e1:fc:08:8c:d6:82:27:4c:df:b5:1d:1c:0b:66:ff:e6:
         af:76:c1:99:4c:d1:cd:32:e1:dd:ff:c8:01:56:1d:61:d1:06:
         8f:7d:98:0a:d2:ab:58:8f:a3:bc:7c:71:4e:97:30:10:4d:13:
         ca:23:f1:f3:36:c8:f6:8e:29:c9:6e:04:d8:00:4b:ea:0b:83:
         65:01:83:18:40:a4:d2:34:1c:19:33:20:7f:22:ab:d7:f4:b5:
         41:fc:f9:71:e8:e5:58:fa:a3:db:29:bf:e9:26:9d:e1:af:58:
         d9:3a:50:00:e8:72:2a:a7:f8:be:ce:93:a2:ef:35:39:78:75:
         0c:45:33:04:c6:1d:69:77:6e:7f:13:11:56:f0:9e:cf:2c:7b:
         6c:66:fa:3a:76:a3:b3:ab:61:f8:b2:ab:8f:ce:8f:f9:3c:e1:
         97:e0:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----