This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35322e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          GrkvapViGSeAwe19O63yGlZ4u5XfrSIUMbWRYyzxPgQ=
Subject key identifier:   E8:A7:67:F0:38:30:95:34:98:3B:DC:6D:06:7C:23:6E:30:81:E8:23
Certificate issuer:       /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
Certificate serial:       7EE998A2B04496AA34C5D7E73C7597E11AA29EF3
Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa
Signing time:             Thu 19 Jun 2025 13:13:07 +0000
ROA not before:           Thu 19 Jun 2025 13:08:07 +0000
ROA not after:            Thu 18 Jun 2026 13:13:07 +0000
asID:                     269411
IP address blocks:        45.186.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e9:98:a2:b0:44:96:aa:34:c5:d7:e7:3c:75:97:e1:1a:a2:9e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
        Validity
            Not Before: Jun 19 13:08:07 2025 GMT
            Not After : Jun 18 13:13:07 2026 GMT
        Subject: CN=E8A767F038309534983BDC6D067C236E3081E823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:1c:b9:02:72:90:c2:c3:3f:fe:6d:44:9d:
                    80:6e:68:6a:f3:c8:c6:fc:42:0c:12:27:96:41:43:
                    9b:3d:1f:63:eb:5c:dd:49:35:78:fc:0c:97:ec:34:
                    85:85:da:95:63:d4:e7:ba:0f:4a:21:77:d6:89:fd:
                    3a:05:72:51:32:b0:e9:cc:1e:bc:4a:42:c7:ce:8d:
                    c6:09:16:13:36:2d:9a:48:a1:ca:90:e9:b5:0b:da:
                    da:81:08:4c:9d:86:05:79:fd:2a:77:0b:fc:39:de:
                    76:78:15:d7:33:9d:86:df:9a:81:a3:d7:df:f4:20:
                    9e:7b:27:7f:0f:08:84:e0:98:7f:46:da:81:65:7b:
                    e2:6d:6a:9c:d8:ce:24:29:03:e0:01:44:a8:ac:fa:
                    6c:0f:bf:3a:63:f3:6b:78:d5:88:6a:38:cc:95:e9:
                    03:16:82:a5:6d:b5:78:a2:15:7b:a2:bb:e2:02:10:
                    dd:6a:6f:1f:e6:04:c6:7c:71:95:7f:0d:8f:d2:1a:
                    57:fc:10:36:19:9e:8d:8f:93:15:87:2d:14:d8:99:
                    40:0e:5d:ef:3f:95:ed:90:81:37:f7:76:c3:5c:97:
                    a2:d9:4c:79:6a:65:5b:53:20:b7:cd:d0:f2:a0:fe:
                    8d:dd:25:94:cf:94:c3:83:f0:e1:de:74:b2:ea:da:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:67:F0:38:30:95:34:98:3B:DC:6D:06:7C:23:6E:30:81:E8:23
            X509v3 Authority Key Identifier:
                keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:68:7f:71:88:09:49:95:e3:1a:b3:b3:0b:4a:d1:23:05:7d:
         9f:12:6d:f8:82:13:8b:93:d8:f5:3c:a6:66:db:f1:86:4c:b9:
         69:e3:aa:a9:a1:88:dd:a9:b2:9a:96:67:6c:bb:59:2e:0e:8d:
         6f:c1:6a:b3:a0:a6:f3:a3:71:83:74:f3:81:09:c8:f5:37:ec:
         59:66:12:13:4e:80:61:db:0c:77:0e:37:89:76:3b:b8:d2:8c:
         e3:b8:63:38:25:93:f0:f1:e6:77:82:1f:67:35:df:3e:04:b2:
         d6:d4:d0:75:72:33:71:bc:35:b6:6a:7c:54:e5:db:de:36:d8:
         af:1c:03:cf:14:86:4f:70:52:ed:d2:12:a8:79:09:8f:4e:ea:
         9a:aa:5f:ea:9a:2d:8a:68:5f:33:36:51:9a:26:25:03:80:92:
         a4:70:28:9b:5d:80:e2:35:b2:04:71:8c:1c:93:ee:bc:03:c2:
         f3:ec:13:32:cc:c7:d2:af:6a:4b:48:13:bf:06:23:b0:07:58:
         2f:05:68:7d:bf:71:d9:a9:86:66:4f:22:20:b0:4b:40:e9:16:
         3b:76:b7:26:56:27:f9:fa:12:ec:5a:d9:38:34:39:0e:17:eb:
         f7:02:d9:0d:ec:e4:2b:9b:75:b3:43:5c:7f:b7:cd:bd:2e:b2:
         08:3f:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----