This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232322e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232322e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          /9wW1QboJtnUD0QAno9UtOAHpuUI8uLNGV2YDWcZ/8I=
Subject key identifier:   55:28:A1:9C:A9:8D:7E:7D:E3:31:D2:E5:F8:B4:2D:DF:56:8F:C4:EF
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       5A99974DAA20D3EC6501FDDAEC05920FE5B1663E
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232322e302f32342d3234203d3e20323634313337.roa
Signing time:             Fri 29 Aug 2025 14:58:41 +0000
ROA not before:           Fri 29 Aug 2025 14:53:41 +0000
ROA not after:            Fri 28 Aug 2026 14:58:41 +0000
asID:                     264137
IP address blocks:        170.0.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:99:97:4d:aa:20:d3:ec:65:01:fd:da:ec:05:92:0f:e5:b1:66:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Aug 29 14:53:41 2025 GMT
            Not After : Aug 28 14:58:41 2026 GMT
        Subject: CN=5528A19CA98D7E7DE331D2E5F8B42DDF568FC4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:60:20:7d:59:a3:b5:bb:df:0a:00:00:59:
                    f3:ff:39:d5:9c:cf:b3:42:ad:bd:85:0a:85:75:4c:
                    ad:71:ee:c7:2a:60:4f:4a:16:6f:a7:6f:0e:05:5f:
                    ce:fd:ea:68:30:2f:c1:4f:51:e1:48:86:dd:c9:a2:
                    e0:9f:c4:48:bb:cc:e6:b5:55:05:ca:0b:0f:74:70:
                    f2:04:08:f3:55:2e:9c:91:24:90:c7:b5:e1:8d:61:
                    77:a0:3b:67:62:3f:ba:e9:93:01:ed:5c:da:27:84:
                    64:be:c7:2e:b9:9c:62:31:fc:19:88:b2:21:c3:da:
                    c4:45:31:29:4a:45:0a:14:2f:95:ff:01:06:31:e3:
                    b7:94:86:4b:d0:41:36:8d:ae:07:1a:25:17:0d:ac:
                    05:71:d1:c7:98:57:f0:ab:84:c9:29:dc:50:2d:ac:
                    30:82:3f:a6:e8:c6:e9:a1:de:68:d2:c6:27:23:6f:
                    f2:7a:85:28:db:9b:22:b3:86:0f:15:fb:67:a4:07:
                    4a:6d:73:73:34:a5:6e:ea:b8:21:78:3e:e1:44:4e:
                    68:af:73:b9:a5:0f:8f:e3:b5:f5:43:d7:98:54:e1:
                    91:93:dd:c7:e7:28:5e:94:f9:66:5e:c9:48:4d:11:
                    62:6b:20:4a:1e:57:6c:13:37:cf:d3:bd:09:1d:69:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:A1:9C:A9:8D:7E:7D:E3:31:D2:E5:F8:B4:2D:DF:56:8F:C4:EF
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232322e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:ae:d3:ce:d7:1f:be:a1:c5:f8:09:0d:20:d3:42:ce:b0:
         73:60:28:dc:bd:1e:fd:09:2e:09:1e:67:f5:ac:ce:27:c9:11:
         9f:3d:41:36:d9:5a:2b:02:83:7f:cc:c7:5e:e6:34:1c:1f:0d:
         d0:15:81:5d:9b:f1:09:51:93:fe:71:43:0d:f8:18:98:78:14:
         3b:a4:fd:64:8e:77:68:05:ac:df:fe:1d:ab:32:6c:06:64:81:
         93:5c:c5:02:2f:7f:7e:73:1c:a1:2c:d0:9f:83:04:09:3e:27:
         1d:1e:62:32:23:67:69:62:71:73:85:d7:e7:b0:ee:90:59:39:
         af:a0:97:4d:56:7e:8a:bc:df:98:03:36:b3:9b:49:8e:56:08:
         5d:06:27:98:a7:95:79:b3:57:46:b5:6f:21:0b:8e:3c:12:7c:
         18:5c:49:5a:05:b2:0a:2f:d7:0a:8b:2e:69:4f:07:05:2c:ad:
         c8:fa:54:4c:80:a1:72:8c:c3:df:d1:64:9f:51:c0:d7:fc:62:
         29:99:b0:ca:01:a7:0f:47:af:93:b8:c1:25:d1:d9:72:ae:b9:
         b0:9e:0d:68:52:47:ec:c6:56:e0:22:71:d4:92:da:b8:a7:43:
         ff:b4:10:30:78:92:00:3c:35:96:78:49:dc:c0:49:b8:ed:2a:
         08:eb:06:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWpmXTaog0+xlAf3a7AWSD+WxZj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcwODBCOTYwRTk2Q0NEODY2RjFEOUM1N0Q4MkI1QkE1
NTEyMEUwQTAeFw0yNTA4MjkxNDUzNDFaFw0yNjA4MjgxNDU4NDFaMDMxMTAvBgNV
BAMTKDU1MjhBMTlDQTk4RDdFN0RFMzMxRDJFNUY4QjQyRERGNTY4RkM0RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fmAgfVmjtbvfCgAAWfP/OdWc
z7NCrb2FCoV1TK1x7scqYE9KFm+nbw4FX8796mgwL8FPUeFIht3JouCfxEi7zOa1
VQXKCw90cPIECPNVLpyRJJDHteGNYXegO2diP7rpkwHtXNonhGS+xy65nGIx/BmI
siHD2sRFMSlKRQoUL5X/AQYx47eUhkvQQTaNrgcaJRcNrAVx0ceYV/CrhMkp3FAt
rDCCP6boxumh3mjSxicjb/J6hSjbmyKzhg8V+2ekB0ptc3M0pW7quCF4PuFETmiv
c7mlD4/jtfVD15hU4ZGT3cfnKF6U+WZeyUhNEWJrIEoeV2wTN8/TvQkdaUZNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVSihnKmNfn3jMdLl+LQt31aPxO8wHwYDVR0j
BBgwFoAU1wgLlg6WzNhm8dnFfYK1ulUSDgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE5RdVhBWFcxN3hSODQxdjlCYzVRbTVGZTZYRkNwQ3hjblllc3FhRm10
WXQvMS9ENzA4MEI5NjBFOTZDQ0Q4NjZGMUQ5QzU3RDgyQjVCQTU1MTIwRTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MDgwQjk2MEU5NkNDRDg2
NkYxRDlDNTdEODJCNUJBNTUxMjBFMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROUXVYQVhXMTd4Ujg0MXY5QmM1UW01RmU2WEZDcEN4Y25ZZXNxYUZtdFl0LzEv
MzEzNzMwMmUzMDJlMzIzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqgDeMA0GCSqGSIb3DQEBCwUAA4IBAQAC+K7Tztcf
vqHF+AkNINNCzrBzYCjcvR79CS4JHmf1rM4nyRGfPUE22VorAoN/zMde5jQcHw3Q
FYFdm/EJUZP+cUMN+BiYeBQ7pP1kjndoBazf/h2rMmwGZIGTXMUCL39+cxyhLNCf
gwQJPicdHmIyI2dpYnFzhdfnsO6QWTmvoJdNVn6KvN+YAzazm0mOVghdBieYp5V5
s1dGtW8hC448EnwYXElaBbIKL9cKiy5pTwcFLK3I+lRMgKFyjMPf0WSfUcDX/GIp
mbDKAacPR6+TuMEl0dlyrrmwng1oUkfsxlbgInHUktq4p0P/tBAweJIAPDWWeEnc
wEm47SoI6wbF
-----END CERTIFICATE-----