This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32322d3332203d3e20323634333539.roa
File:                     3136382e302e3139322e302f32322d3332203d3e20323634333539.roa (raw, json)
Hash identifier:          td+GfM4dNbErFLurbdrtKXCHnUuySYGV1CQ4LMWHDGU=
Subject key identifier:   69:FA:13:2F:1D:8F:64:B7:85:BC:01:47:00:A4:0E:FF:A1:87:42:63
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       19F64F354A18D886F3ACAF41B51CB45C9262F4D9
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32322d3332203d3e20323634333539.roa
Signing time:             Mon 25 Aug 2025 18:53:07 +0000
ROA not before:           Mon 25 Aug 2025 18:48:07 +0000
ROA not after:            Mon 24 Aug 2026 18:53:07 +0000
asID:                     264359
IP address blocks:        168.0.192.0/22 maxlen: 32
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f6:4f:35:4a:18:d8:86:f3:ac:af:41:b5:1c:b4:5c:92:62:f4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 25 18:48:07 2025 GMT
            Not After : Aug 24 18:53:07 2026 GMT
        Subject: CN=69FA132F1D8F64B785BC014700A40EFFA1874263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:0f:d8:87:79:f3:36:32:de:7b:28:95:72:
                    dc:a4:24:25:bb:52:f6:f9:a1:d9:52:db:2b:18:1b:
                    9b:ab:8d:c6:c0:64:75:7c:8b:8d:a8:6c:47:fc:7a:
                    c7:b6:b0:e9:dd:b7:63:0e:96:91:8e:b2:9a:f5:ae:
                    8b:27:e8:24:29:22:be:eb:09:5e:6b:22:4f:41:eb:
                    46:ba:b0:d1:e1:da:d3:b1:e3:6c:74:af:a6:7a:44:
                    af:ff:b5:2c:b7:78:6f:a1:de:39:60:25:9d:3f:a6:
                    12:60:1d:14:e4:19:e5:83:74:d0:4b:41:16:65:04:
                    3a:03:99:71:8a:d4:bf:69:98:3c:a1:ab:20:fb:c8:
                    6b:59:d5:62:11:e1:fe:20:c7:4e:a6:ce:3b:b1:1a:
                    5b:15:39:7d:c7:19:9f:71:7c:25:de:85:5f:ad:81:
                    10:a8:2a:c6:af:29:06:37:93:fa:50:b0:2f:17:bc:
                    e6:49:05:a0:ff:94:f9:a6:b4:a5:de:0f:fc:ab:d5:
                    65:78:b6:8b:64:e6:75:4d:38:82:c5:4b:08:7b:9b:
                    3a:42:3c:12:ec:5b:6d:fd:90:42:56:c3:1a:d0:5b:
                    ec:61:b4:5c:87:e5:10:ab:dd:67:9d:2b:c0:d6:51:
                    2e:07:b6:a6:f8:2f:cb:9d:7c:06:50:65:f0:5d:20:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FA:13:2F:1D:8F:64:B7:85:BC:01:47:00:A4:0E:FF:A1:87:42:63
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32322d3332203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:50:ea:45:ec:93:2b:b8:81:43:d7:de:b1:c7:df:b5:55:de:
         56:3f:53:84:52:ea:6a:e8:f8:db:67:77:e9:ec:b3:d6:b3:9e:
         e2:93:50:96:68:4d:c2:e4:eb:75:77:65:3b:56:55:21:fc:45:
         cd:b0:56:1d:6f:1d:68:a7:ba:7e:24:bb:ee:2f:07:db:94:d2:
         53:22:a6:c3:d9:8f:ff:30:fe:d2:1e:17:57:e1:0a:49:2b:f7:
         54:fc:33:70:5c:03:4f:a2:10:56:fb:99:6f:40:c4:c2:37:f2:
         55:d7:57:2d:84:83:0e:4f:1a:90:56:c1:57:67:04:c4:68:2f:
         25:f6:e7:b2:2b:68:c0:bc:38:09:0b:86:67:6d:b7:aa:24:49:
         f9:49:90:7f:16:ce:7c:cf:f0:e2:09:a5:04:1f:4a:ec:74:54:
         d7:e9:87:86:98:6d:41:c3:cb:dd:b3:b4:fd:3f:89:b7:24:fc:
         43:c2:4b:f8:be:88:53:66:b5:ab:e8:af:cc:e3:8d:77:18:6d:
         29:36:1e:09:71:d8:6d:12:05:66:1d:f3:ea:b4:9e:ee:e1:96:
         f1:50:39:6b:e5:b1:9f:cc:dc:70:54:05:5f:92:39:6b:a7:43:
         77:c7:8a:41:f0:c0:bb:9d:2f:1e:c7:3b:0a:63:5a:2b:56:91:
         90:19:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----