This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa
File:                     34352e3138362e35322e302f32332d3233203d3e20323639343131.roa (raw, json)
Hash identifier:          s23kCV/mDmmRvAvNYmXoRDpKGrqaS1EREcV9YmcMuAY=
Subject key identifier:   FF:CA:8A:B0:7B:62:89:3E:39:30:9E:43:EC:CF:4A:B9:E0:3C:38:8C
Certificate issuer:       /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
Certificate serial:       3637AD23FF1E4ED301ED3DAAF52E11B625F9FA0B
Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa
Signing time:             Thu 19 Jun 2025 13:13:05 +0000
ROA not before:           Thu 19 Jun 2025 13:08:05 +0000
ROA not after:            Thu 18 Jun 2026 13:13:05 +0000
asID:                     269411
IP address blocks:        45.186.52.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:37:ad:23:ff:1e:4e:d3:01:ed:3d:aa:f5:2e:11:b6:25:f9:fa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
        Validity
            Not Before: Jun 19 13:08:05 2025 GMT
            Not After : Jun 18 13:13:05 2026 GMT
        Subject: CN=FFCA8AB07B62893E39309E43ECCF4AB9E03C388C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:7c:1c:15:6b:81:30:85:70:38:9c:da:e0:
                    b4:9f:47:9b:d2:36:66:a7:89:d0:89:57:b4:44:cf:
                    e1:a3:38:43:47:8b:9a:63:0d:71:7d:1e:59:09:be:
                    44:01:15:c4:ab:26:9a:cf:1c:89:ba:43:eb:d8:71:
                    78:0c:43:ac:34:b8:a9:03:a6:57:df:6e:94:40:7f:
                    1f:62:80:4c:a3:b8:a6:d4:44:23:6e:4f:8e:38:ed:
                    58:87:26:e3:0d:1c:40:c5:e6:01:4b:ac:1f:a7:1e:
                    20:4e:a5:b2:ea:b2:d7:05:09:83:cc:51:09:07:9c:
                    41:83:ee:7b:16:f6:be:4f:fa:64:ae:94:1f:f4:36:
                    28:dd:bc:a4:ae:50:1c:40:3d:7f:90:5b:cd:78:8a:
                    fa:45:80:b8:29:97:f1:37:49:2a:ad:bb:66:16:e4:
                    05:c7:e6:f1:50:23:c5:54:0d:bb:f0:d5:bc:3a:22:
                    b7:df:7a:5c:ee:64:af:02:db:0f:35:8b:28:b5:e7:
                    48:df:48:13:1c:22:72:a7:3c:27:85:bb:5f:5a:27:
                    c9:ae:b0:60:3a:cc:01:2f:73:b9:9f:23:86:1e:76:
                    45:31:24:88:fc:9b:d4:62:9b:34:10:e7:ab:98:60:
                    4f:cf:ad:fe:22:d0:28:6f:f6:d6:92:44:6e:a3:ad:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CA:8A:B0:7B:62:89:3E:39:30:9E:43:EC:CF:4A:B9:E0:3C:38:8C
            X509v3 Authority Key Identifier:
                keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:a6:50:62:e8:7c:32:c1:d2:32:fd:98:99:d9:dc:45:24:
         aa:85:a6:35:68:8a:5e:67:87:7e:b6:15:a4:66:46:1d:9b:de:
         10:14:23:cf:2c:de:ab:83:d8:19:d3:6c:df:55:cb:4d:86:77:
         92:5f:ef:30:c6:37:4e:64:c5:93:7d:bc:de:d5:5d:ad:09:5d:
         d4:69:04:10:80:21:29:7f:29:95:be:c8:8f:11:66:1f:d9:0b:
         54:c6:4a:9d:3e:24:16:8a:e4:ca:7a:8a:9a:a9:84:9b:4d:59:
         07:b5:da:97:5f:cc:6c:bc:66:e6:6a:65:86:dd:da:49:95:ec:
         ce:34:be:99:d3:50:9c:94:ab:5f:4c:3e:3c:5c:7f:f0:b2:4b:
         d0:f6:00:41:d4:c4:08:e7:c7:57:46:da:d2:11:5b:dc:cd:1e:
         5d:0c:cf:10:74:39:36:df:3f:e1:c4:66:46:ba:56:c4:3d:f9:
         33:ba:9c:d3:8c:a9:50:28:7e:0b:51:90:6a:31:b6:fc:62:dc:
         5c:45:03:85:8d:c5:67:66:9d:7e:07:58:02:e6:7e:72:f7:cc:
         d3:98:fb:f1:d1:b2:61:37:05:ac:42:5f:ec:78:cf:b0:6c:28:
         a6:20:da:6a:e6:d7:06:72:c4:59:e5:6a:61:cd:31:52:ac:10:
         71:80:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----