This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3332203d3e20323638363635.roa
File:                     34352e3136352e302e302f32322d3332203d3e20323638363635.roa (raw, json)
Hash identifier:          dYY3MlgnhnOml7GIjRRHei2QhjXTZquLadyZnPbyIyg=
Subject key identifier:   76:03:5E:94:77:98:20:A7:B6:47:E3:13:69:CF:22:32:51:65:6D:74
Certificate issuer:       /CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
Certificate serial:       1DD1F756D57F9C94077CDCBE58BD47B37F26295F
Authority key identifier: 97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3332203d3e20323638363635.roa
Signing time:             Wed 23 Jul 2025 19:16:40 +0000
ROA not before:           Wed 23 Jul 2025 19:11:40 +0000
ROA not after:            Wed 22 Jul 2026 19:16:40 +0000
asID:                     268665
IP address blocks:        45.165.0.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d1:f7:56:d5:7f:9c:94:07:7c:dc:be:58:bd:47:b3:7f:26:29:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
        Validity
            Not Before: Jul 23 19:11:40 2025 GMT
            Not After : Jul 22 19:16:40 2026 GMT
        Subject: CN=76035E94779820A7B647E31369CF223251656D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:27:51:d7:50:32:4c:19:91:b9:78:58:b1:
                    3d:82:6a:23:a0:ee:77:46:f8:7e:db:3a:1a:a5:ea:
                    74:5d:16:f1:c1:2f:d0:ab:39:11:ce:9f:94:10:d2:
                    3f:66:04:bb:d2:ec:56:31:a1:6e:44:ca:d8:34:bd:
                    eb:a7:6d:09:17:0e:39:80:dd:e5:6c:99:14:b4:83:
                    57:6b:ef:26:80:1d:c8:88:78:f8:0e:f4:dc:93:c0:
                    a9:61:03:11:cd:6b:7f:ac:a7:6b:90:7a:e7:5a:a5:
                    e4:78:16:cc:27:d9:f0:4a:13:70:9e:38:cc:21:45:
                    e2:27:3c:5d:9d:05:72:ac:fd:45:af:07:56:35:47:
                    d4:0e:d7:51:99:ed:7a:db:f7:96:02:fb:11:1c:cf:
                    c7:d2:6d:cb:f9:40:51:2f:6a:08:a3:6d:c5:22:10:
                    e2:37:2f:a6:bc:93:2d:cb:c8:c8:73:3c:0d:12:28:
                    34:bb:75:cf:c8:51:5c:85:2b:45:81:4b:a0:0b:f5:
                    73:72:c2:68:38:4b:72:22:01:a9:d9:c8:dc:ca:b4:
                    71:84:51:ee:cc:e1:9a:2a:22:86:0e:3a:fa:21:8b:
                    49:e3:b7:6f:56:07:11:92:a6:57:0a:6c:92:b9:8d:
                    c6:b4:89:63:1a:f6:53:e6:a4:6b:f6:7b:e8:d6:d5:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:03:5E:94:77:98:20:A7:B6:47:E3:13:69:CF:22:32:51:65:6D:74
            X509v3 Authority Key Identifier:
                keyid:97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3332203d3e20323638363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:4d:37:01:ea:f6:2b:86:27:66:6e:10:39:d6:01:5d:50:
         30:6a:b3:35:f3:9a:ba:5c:d6:15:0c:ad:aa:9e:a9:3d:f8:e9:
         2f:51:4f:66:80:f1:ec:a5:9d:2f:92:04:04:12:0d:29:64:01:
         da:53:d4:74:18:29:76:84:e7:68:2e:15:55:ce:a3:1c:a4:21:
         ac:e0:e0:cf:48:a7:8b:6e:13:31:b4:d8:77:24:f4:22:f5:8f:
         95:68:f7:f2:43:e2:bc:80:bf:6d:82:02:4b:f6:4e:f9:ce:27:
         d9:55:c6:4a:f0:f7:1a:80:fd:c5:ec:c4:a6:2c:18:1f:8a:a2:
         e9:de:f8:26:e7:a0:c5:0f:04:56:f5:e7:34:86:ec:da:90:52:
         62:3e:27:e5:75:8f:93:e8:6f:71:05:ed:f7:63:3f:99:46:62:
         4a:12:c7:fb:c9:7f:77:7e:52:ce:9f:fb:7d:b8:54:3d:2f:6c:
         df:05:af:d0:34:86:34:6b:a3:fe:3a:df:30:80:1e:c6:7a:f4:
         ec:6a:b5:c9:70:23:a9:c6:f8:33:38:39:3a:72:be:5b:61:e6:
         79:7d:d8:d1:0e:dc:e3:f6:b7:b8:41:0a:d7:a0:3e:4a:b2:8c:
         ea:c4:cf:d5:c3:ad:89:65:b3:f9:46:02:d3:77:15:b8:4d:f6:
         ee:b0:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----