This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e37302e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          yH2q4GhU+7u1x5bjm/tZITlvm4V3Q+9PvMKlkHqcNyQ=
Subject key identifier:   70:B2:07:D5:70:89:96:8E:92:AD:A4:45:E8:3A:43:FF:10:8D:8C:72
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       469154CB7A7ED89C290FC8FC70E700DD1FAB2151
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
Signing time:             Thu 06 Mar 2025 13:54:55 +0000
ROA not before:           Thu 06 Mar 2025 13:49:55 +0000
ROA not after:            Thu 05 Mar 2026 13:54:55 +0000
asID:                     267363
IP address blocks:        45.234.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:54:cb:7a:7e:d8:9c:29:0f:c8:fc:70:e7:00:dd:1f:ab:21:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Mar  6 13:49:55 2025 GMT
            Not After : Mar  5 13:54:55 2026 GMT
        Subject: CN=70B207D57089968E92ADA445E83A43FF108D8C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:73:2b:35:92:bc:0c:d3:9f:4e:42:a3:9c:
                    7f:51:01:02:ed:19:f6:89:6f:83:7a:b8:7f:9a:8c:
                    0d:9f:10:9c:d9:16:74:24:df:e7:c0:b0:be:ff:50:
                    ae:f6:45:c3:4b:33:8b:3a:a3:8b:89:4f:5a:1a:00:
                    0b:19:4c:55:bd:a0:08:5a:ad:8c:85:5a:f8:08:c0:
                    60:c6:3b:86:6d:e5:41:3d:8e:ad:cc:73:f0:93:af:
                    94:66:5b:ce:35:b4:ec:0d:62:d3:8f:a7:52:44:a3:
                    ff:56:ba:14:65:15:85:6f:87:d3:7a:c0:cb:5e:fe:
                    8f:5b:ce:13:ac:13:03:01:ba:c5:37:ec:76:b9:51:
                    87:79:fa:96:79:70:e9:3f:0e:fa:f4:81:87:53:88:
                    db:1d:e5:68:20:ed:8e:1d:4b:70:ff:89:10:b1:6e:
                    67:d2:d7:d9:12:69:a5:92:11:32:9d:a2:78:e5:bc:
                    5d:42:bb:52:19:18:f3:6f:77:2b:b8:68:6e:2d:5b:
                    06:c8:83:79:f1:39:88:5d:f7:5d:03:57:84:1a:32:
                    4a:77:2b:e0:ce:08:c1:9d:01:28:22:d7:30:95:87:
                    2a:c7:5f:e6:c3:1a:44:b0:c0:92:8b:b5:5b:9b:c5:
                    d3:e0:3a:3f:4c:e4:dc:cd:3f:6a:38:7a:40:98:b5:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B2:07:D5:70:89:96:8E:92:AD:A4:45:E8:3A:43:FF:10:8D:8C:72
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3b:01:38:5f:38:55:38:29:4c:cd:57:1f:8f:c0:e6:3b:47:
         bb:9f:f8:0f:20:26:e7:3a:44:fa:13:84:b9:ba:9f:9d:0f:63:
         89:0e:6b:21:07:0f:13:cc:d5:86:c8:ad:3c:d1:5d:90:9c:d6:
         e1:95:f4:9b:1b:1e:f5:3b:62:a8:eb:41:7c:fa:be:12:70:63:
         39:85:9c:2f:a4:f1:eb:b0:a5:1b:fd:32:bb:24:c9:d8:2c:db:
         d2:ef:86:ca:22:3c:5c:77:01:c8:9b:ba:51:5e:38:e5:f1:9d:
         f9:32:89:61:a6:ef:03:b7:97:e2:ce:90:15:19:0b:22:79:65:
         b9:12:02:08:7a:25:10:22:75:d4:7c:82:40:47:f0:73:e6:e7:
         19:d3:fb:15:21:1a:97:5c:21:a5:3c:9b:96:00:8f:04:fe:cc:
         fe:da:91:f7:ee:f3:18:41:75:d6:9b:d1:e3:58:70:8a:ff:3f:
         e4:87:49:96:fd:88:87:26:4a:0c:12:1a:f0:6a:ab:6b:ba:05:
         1d:4e:b3:2c:03:45:00:85:2c:be:19:00:9b:4b:eb:78:4a:61:
         b1:32:13:d2:c1:a0:df:c1:73:dd:66:a9:45:ad:e4:b0:4e:c3:
         09:11:a1:82:de:26:25:6f:4f:28:37:aa:a1:ab:14:42:c7:ad:
         36:cf:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----