This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
File:                     3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          dMnjX6Wq5CqnTLgbOZGNkoSPfNLkbERk2ZD+85bozBc=
Subject key identifier:   EC:BF:28:3A:42:10:32:73:4E:A9:F2:14:60:14:11:8C:98:55:38:92
Certificate issuer:       /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial:       1777BF89C0EE0176E38DF2993BA7541F34F0C8D0
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
Signing time:             Wed 27 Aug 2025 11:09:13 +0000
ROA not before:           Wed 27 Aug 2025 11:04:13 +0000
ROA not after:            Wed 26 Aug 2026 11:09:13 +0000
asID:                     262374
IP address blocks:        177.128.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:77:bf:89:c0:ee:01:76:e3:8d:f2:99:3b:a7:54:1f:34:f0:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
        Validity
            Not Before: Aug 27 11:04:13 2025 GMT
            Not After : Aug 26 11:09:13 2026 GMT
        Subject: CN=ECBF283A421032734EA9F2146014118C98553892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:20:7d:b6:82:23:4e:59:c5:8a:b1:80:2b:
                    d6:45:a7:5f:b7:d0:05:bf:71:43:bc:6a:36:db:1f:
                    89:8f:fd:d0:41:c5:8d:4d:de:31:a3:fd:19:43:fa:
                    fb:de:78:d3:77:31:03:9c:da:a8:30:86:f7:49:62:
                    f0:14:8f:cf:b6:da:b2:14:d3:fd:27:13:d3:28:fe:
                    53:dc:8b:2e:d9:02:20:5a:55:48:9d:a4:0a:61:a2:
                    c9:f9:13:54:20:94:b3:f6:ef:e2:9a:38:3e:87:52:
                    60:f0:87:ad:5e:06:8c:0f:21:4f:01:76:cf:e6:a3:
                    8e:d8:ae:6c:cb:84:0d:94:6c:43:33:1a:f6:5d:fa:
                    97:c9:39:4a:c7:3b:79:95:bc:10:88:d7:0a:49:66:
                    ff:2d:c5:43:f1:95:dd:5a:91:f6:c6:74:5c:e6:fd:
                    20:3d:57:6e:50:b8:d7:41:1b:e2:69:55:30:e1:80:
                    40:bb:e6:cc:d9:93:ad:b1:51:65:88:e2:a7:a3:e0:
                    5a:cb:fe:b3:5b:8c:4a:53:16:75:8b:49:91:cb:11:
                    98:8d:d9:3d:83:04:e1:cb:d8:c9:db:7c:e3:60:dd:
                    b6:46:fc:ab:b4:4c:94:ff:0f:d5:d3:c5:e5:94:64:
                    ab:1b:db:4e:06:18:4a:f6:ba:4c:1d:0e:cc:56:a0:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BF:28:3A:42:10:32:73:4E:A9:F2:14:60:14:11:8C:98:55:38:92
            X509v3 Authority Key Identifier:
                keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:48:2a:f9:bb:96:a4:d3:ff:50:50:22:6c:d4:f5:2b:2b:35:
         c6:bd:e8:8b:79:24:e0:63:a0:98:1c:1a:37:6a:fe:83:c7:00:
         95:37:3a:34:f6:a9:76:b6:3f:31:ce:28:eb:bc:4d:68:80:b6:
         84:26:09:62:1d:31:79:91:05:93:75:76:2f:eb:06:16:d0:f2:
         00:8b:aa:71:92:59:e3:52:ef:69:bb:85:de:c0:1c:79:8d:9c:
         e1:30:55:a0:4c:f0:65:f5:79:90:1c:09:e4:86:2d:16:e6:c8:
         ba:9f:10:24:79:96:a2:9c:aa:e6:1b:75:68:8e:98:25:3e:d0:
         61:3d:88:2b:97:80:a7:60:84:1a:8c:3f:21:3e:11:e7:a5:9c:
         ab:a1:22:96:37:4f:e9:8f:54:68:0d:29:07:1c:0e:18:c6:11:
         77:f0:f0:a2:0e:58:de:e1:84:1f:32:7b:49:a4:6d:f3:ec:83:
         bc:39:22:f7:05:90:7c:02:a1:38:e3:e3:99:23:45:2d:35:6d:
         b3:54:7f:07:6d:d3:77:08:c0:43:32:d1:0c:c1:fa:85:ac:e7:
         0b:bf:c3:17:5c:73:5e:99:d3:2a:4b:f9:66:61:2c:96:a3:3e:
         0f:b2:f6:27:ac:95:40:c6:67:fd:97:37:c9:0c:c3:5e:8d:13:
         de:17:0c:1b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUF3e/icDuAXbjjfKZO6dUHzTwyNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Q0I5RDY5Njk4QkVCRDA3QTE1NUM3MEM3NjJDOUEy
MTdCNDcwNjAeFw0yNTA4MjcxMTA0MTNaFw0yNjA4MjYxMTA5MTNaMDMxMTAvBgNV
BAMTKEVDQkYyODNBNDIxMDMyNzM0RUE5RjIxNDYwMTQxMThDOTg1NTM4OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvESB9toIjTlnFirGAK9ZFp1+3
0AW/cUO8ajbbH4mP/dBBxY1N3jGj/RlD+vveeNN3MQOc2qgwhvdJYvAUj8+22rIU
0/0nE9Mo/lPciy7ZAiBaVUidpAphosn5E1QglLP27+KaOD6HUmDwh61eBowPIU8B
ds/mo47YrmzLhA2UbEMzGvZd+pfJOUrHO3mVvBCI1wpJZv8txUPxld1akfbGdFzm
/SA9V25QuNdBG+JpVTDhgEC75szZk62xUWWI4qej4FrL/rNbjEpTFnWLSZHLEZiN
2T2DBOHL2MnbfONg3bZG/Ku0TJT/D9XTxeWUZKsb204GGEr2ukwdDsxWoDu/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7L8oOkIQMnNOqfIUYBQRjJhVOJIwHwYDVR0j
BBgwFoAU20y51paYvr0HoVXHDHYsmiF7RwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVraDVOd0pySmk4OWNLWTlvS3g0YVVLMXNoTFVCazk5ZE53RUh6N1c1
Sm4vMS9EQjRDQjlENjk2OThCRUJEMDdBMTU1QzcwQzc2MkM5QTIxN0I0NzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNENCOUQ2OTY5OEJFQkQw
N0ExNTVDNzBDNzYyQzlBMjE3QjQ3MDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhla2g1TndKckppODljS1k5b0t4NGFVSzFzaExVQms5OWROd0VIejdXNUpuLzEv
MzEzNzM3MmUzMTMyMzgyZTMxMzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GAoDANBgkqhkiG9w0BAQsFAAOCAQEABEgq
+buWpNP/UFAibNT1Kys1xr3oi3kk4GOgmBwaN2r+g8cAlTc6NPapdrY/Mc4o67xN
aIC2hCYJYh0xeZEFk3V2L+sGFtDyAIuqcZJZ41LvabuF3sAceY2c4TBVoEzwZfV5
kBwJ5IYtFubIup8QJHmWopyq5ht1aI6YJT7QYT2IK5eAp2CEGow/IT4R56Wcq6Ei
ljdP6Y9UaA0pBxwOGMYRd/Dwog5Y3uGEHzJ7SaRt8+yDvDki9wWQfAKhOOPjmSNF
LTVts1R/B23TdwjAQzLRDMH6haznC7/DF1xzXpnTKkv5ZmEslqM+D7L2J6yVQMZn
/Zc3yQzDXo0T3hcMGw==
-----END CERTIFICATE-----