This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa
File:                     3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa (raw, json)
Hash identifier:          mnsi6hSRiOqavAAtjzswqUJFYhcgi60tle3raUu6YS8=
Subject key identifier:   1D:40:C2:5E:55:4B:93:F0:F8:C0:95:41:AB:CB:EC:D1:88:CD:B7:2A
Certificate issuer:       /CN=4BBE28D0CB4D80A62D6C82B8BB5BAA27EC9481E3
Certificate serial:       68D22435CD80962B95C893279AD5D0DE4B582501
Authority key identifier: 4B:BE:28:D0:CB:4D:80:A6:2D:6C:82:B8:BB:5B:AA:27:EC:94:81:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BBE28D0CB4D80A62D6C82B8BB5BAA27EC9481E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa
Signing time:             Mon 12 May 2025 14:38:04 +0000
ROA not before:           Mon 12 May 2025 14:33:04 +0000
ROA not after:            Mon 11 May 2026 14:38:04 +0000
asID:                     265139
IP address blocks:        143.255.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d2:24:35:cd:80:96:2b:95:c8:93:27:9a:d5:d0:de:4b:58:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BBE28D0CB4D80A62D6C82B8BB5BAA27EC9481E3
        Validity
            Not Before: May 12 14:33:04 2025 GMT
            Not After : May 11 14:38:04 2026 GMT
        Subject: CN=1D40C25E554B93F0F8C09541ABCBECD188CDB72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:b9:a0:d2:b5:89:ae:15:62:33:39:10:8e:
                    88:05:9a:46:c6:56:cb:cc:8f:7a:f0:4f:58:04:d3:
                    9f:7e:5e:98:ab:b4:f3:24:48:07:12:5d:4b:5e:29:
                    38:b1:57:8c:81:a8:0b:99:a9:24:1c:2f:d1:84:de:
                    04:10:d4:68:11:38:39:28:60:5a:2e:d2:4e:4e:ad:
                    a3:d9:e3:39:14:33:05:70:3b:c4:a1:01:e5:fc:f0:
                    e6:2c:cb:a4:46:66:47:3d:69:3c:f0:c5:32:cf:01:
                    fd:a4:2d:48:e4:0a:c0:9c:63:fc:7b:73:cc:96:05:
                    fd:5c:f1:70:8f:13:17:f7:90:5c:e2:94:97:da:99:
                    d2:7e:38:b4:44:05:e9:05:6b:6f:48:5f:53:d4:ed:
                    27:3a:1f:6d:60:38:fc:a1:b0:fc:41:63:da:31:aa:
                    6b:38:75:b5:26:6a:b1:24:a2:a6:7b:0f:64:92:b9:
                    d3:87:dc:f4:91:eb:b2:9a:15:40:4c:e3:b6:51:bc:
                    17:62:c1:d1:0b:bf:25:be:a0:9e:98:4b:d9:be:d5:
                    2f:2d:07:83:ba:6c:a3:0d:0a:27:ec:d5:45:32:46:
                    48:e7:7e:11:24:4c:26:54:24:44:bb:73:38:be:82:
                    c1:8f:35:39:1f:86:e3:e2:35:77:c6:a6:fc:37:d2:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:C2:5E:55:4B:93:F0:F8:C0:95:41:AB:CB:EC:D1:88:CD:B7:2A
            X509v3 Authority Key Identifier:
                keyid:4B:BE:28:D0:CB:4D:80:A6:2D:6C:82:B8:BB:5B:AA:27:EC:94:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BBE28D0CB4D80A62D6C82B8BB5BAA27EC9481E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BBE28D0CB4D80A62D6C82B8BB5BAA27EC9481E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:ed:47:d5:ee:ea:06:78:5c:7f:19:84:e0:3e:c2:68:62:
         5b:8e:52:25:6d:c7:7b:05:81:a5:ff:eb:c6:aa:ea:f9:f6:27:
         e0:16:05:41:00:10:ac:da:02:90:39:ce:f9:7d:7d:c4:38:4e:
         ef:ee:94:89:d8:71:d6:61:b6:ed:4e:72:1f:b0:e0:33:6c:0a:
         8e:ef:ab:12:fc:5a:ac:fd:c2:da:f9:f4:1b:85:8c:3d:14:6f:
         00:75:71:49:b8:be:3e:a6:56:86:4a:26:06:b3:5d:4a:4a:8f:
         d7:b1:c6:67:31:dc:64:6b:cd:5f:ce:80:49:c6:37:57:1a:0e:
         60:04:07:e9:9a:65:0b:f5:8a:ba:8e:70:0a:ed:f4:12:56:a5:
         02:7a:7b:53:74:de:bb:b5:73:3e:25:a5:d3:37:fe:db:11:ef:
         7c:1f:5b:04:ed:8c:eb:06:af:d8:09:76:7d:b0:d0:86:39:52:
         76:0e:ab:44:ed:3e:cf:32:12:33:6d:97:38:ec:a0:22:aa:a8:
         b2:6b:c2:7f:85:87:b2:18:15:41:f5:15:87:3b:8f:56:25:f9:
         9d:fe:92:14:1e:32:7b:b0:54:31:55:cc:2e:eb:38:84:9d:65:
         67:b0:d1:88:66:b8:d7:8f:b6:10:ee:32:87:20:41:5a:57:de:
         73:6a:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----