This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232302e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232302e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          2qQUYi0uef0zu4vOXlorQ3/wBefWhNjlMHYPNab6Rr0=
Subject key identifier:   C6:32:75:FA:6B:25:DE:F1:CD:F1:47:53:F2:CD:9B:94:8A:8B:26:61
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       266BC76F27E0021CD82BF6B953035D6F78B03398
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232302e302f32342d3234203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:47 +0000
ROA not before:           Thu 06 Mar 2025 08:04:47 +0000
ROA not after:            Thu 05 Mar 2026 08:09:47 +0000
asID:                     264137
IP address blocks:        170.0.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6b:c7:6f:27:e0:02:1c:d8:2b:f6:b9:53:03:5d:6f:78:b0:33:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:47 2025 GMT
            Not After : Mar  5 08:09:47 2026 GMT
        Subject: CN=C63275FA6B25DEF1CDF14753F2CD9B948A8B2661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:b2:fa:4c:01:32:94:69:e5:60:29:ce:22:
                    c8:15:aa:fa:e4:3c:f7:7a:04:a1:75:96:bd:e7:95:
                    9f:1b:34:84:f6:a0:42:75:2b:de:f9:32:1d:de:a8:
                    b7:2c:fb:69:6f:d4:7e:0b:aa:8a:d7:6f:6d:07:15:
                    30:cd:4c:05:3b:80:7c:41:84:4b:08:e2:96:7e:64:
                    9f:5b:69:09:70:cf:a0:d6:06:7f:88:5c:17:8f:44:
                    ba:2c:2a:d2:bb:c3:cd:c0:cd:06:3c:11:fd:53:e1:
                    bc:85:b7:e7:c1:15:4f:20:5f:1b:a2:e1:58:1a:cf:
                    ea:72:55:38:40:ed:b6:74:bc:6c:87:a5:73:c5:3f:
                    05:0b:7a:92:63:ab:3e:e9:ab:5a:a9:c7:f0:db:a4:
                    8a:ff:f8:bf:21:0b:7c:8e:e6:72:34:6a:1d:4d:66:
                    1e:98:03:18:b1:29:e5:7d:04:2c:64:f9:77:49:ba:
                    59:a5:c8:21:df:22:8b:8b:7c:b2:a9:b9:33:cb:8e:
                    16:cd:33:33:c5:50:ed:4e:07:e0:b0:73:3a:9a:d1:
                    cd:5d:da:5b:75:c2:23:b0:97:36:08:48:72:02:3f:
                    a7:01:1e:3e:75:ea:5c:98:dd:fd:6b:b5:c3:05:2e:
                    7d:35:0f:cb:c6:61:8b:41:fc:74:24:88:83:f2:33:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:32:75:FA:6B:25:DE:F1:CD:F1:47:53:F2:CD:9B:94:8A:8B:26:61
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232302e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:df:00:33:9a:6e:ed:13:46:c4:9b:78:61:ef:f1:18:9d:
         7f:27:74:e5:e3:f4:a8:e0:f8:41:cf:2e:19:07:a8:c1:1e:e3:
         8a:ef:ae:6d:22:0a:7f:db:4e:57:aa:ee:58:6e:af:f5:d2:fa:
         84:cd:25:56:34:b2:19:ce:72:75:91:59:29:b3:4f:36:44:54:
         3e:ea:3c:9c:4c:89:bd:d5:55:d6:e5:c1:aa:35:15:50:e7:18:
         c2:8e:b1:19:5d:dd:e1:10:bf:02:d2:64:06:74:0d:f4:ca:c0:
         14:b3:f2:ef:f8:8e:20:0d:30:ff:f4:e8:d1:00:c5:34:f7:ed:
         39:75:74:8c:ba:c0:b3:aa:06:db:5a:73:f4:a4:5d:11:98:17:
         7c:1a:03:25:00:29:ed:1a:84:51:14:b4:fe:6c:2c:46:17:88:
         24:c5:42:34:3a:2e:30:ae:4d:49:61:88:2b:76:fd:6f:f5:3b:
         ae:51:cb:12:83:4b:c8:5c:9f:e5:35:ad:f6:45:12:cb:a2:86:
         1d:74:02:9f:a6:ff:e4:2d:6b:03:82:18:16:fa:3d:72:a8:12:
         b4:5e:41:ed:a9:1d:d8:c4:d7:91:75:ad:e8:b7:87:39:ec:0b:
         e3:ab:d4:bb:0e:b8:a9:72:d1:cf:c2:54:ba:02:3a:ed:51:77:
         df:4c:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----