This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232332e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          xxARahwpG8JY4s6R7768BbeDjsRMOP+5mLVPLx4ZKT0=
Subject key identifier:   87:61:97:9B:EE:BC:83:05:C5:D9:6F:63:BD:0E:43:A9:C8:60:A5:F5
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       2F7D7CA734D56A3E9073DA8194148D98763D85E9
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa
Signing time:             Fri 29 Aug 2025 14:58:41 +0000
ROA not before:           Fri 29 Aug 2025 14:53:41 +0000
ROA not after:            Fri 28 Aug 2026 14:58:41 +0000
asID:                     264137
IP address blocks:        170.0.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:7c:a7:34:d5:6a:3e:90:73:da:81:94:14:8d:98:76:3d:85:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Aug 29 14:53:41 2025 GMT
            Not After : Aug 28 14:58:41 2026 GMT
        Subject: CN=8761979BEEBC8305C5D96F63BD0E43A9C860A5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:20:20:e8:a3:75:94:7b:d7:90:e9:dc:23:
                    e7:9a:ff:20:b1:2e:74:a2:14:bb:39:af:50:ca:f3:
                    93:62:74:ba:e9:95:07:ac:91:de:8c:83:8b:5e:73:
                    f0:6e:33:1c:a4:69:46:95:71:b6:63:eb:56:00:01:
                    ca:27:b4:09:d4:34:41:29:64:d7:ac:ec:0a:4e:70:
                    94:86:1e:b1:65:a5:8f:e5:5e:ab:ac:66:71:be:2b:
                    d8:57:33:6c:22:b7:bb:f1:d2:98:04:a5:8a:01:2b:
                    3d:92:19:51:fd:77:55:29:59:58:d8:ec:ed:34:9e:
                    7d:44:29:5e:3b:14:57:61:4a:cd:b7:c6:2d:5d:85:
                    19:cf:d5:40:e5:fc:96:ab:27:ee:12:78:86:62:d1:
                    59:52:91:56:62:25:bb:9b:50:b9:d0:6f:da:a9:ca:
                    08:94:92:41:9a:d2:e8:96:b3:a5:d4:b4:e8:39:45:
                    2b:5b:c7:3b:5c:d0:e3:19:b2:b9:13:55:2c:80:a0:
                    f0:b8:bd:c7:cc:ab:6d:79:ae:eb:cf:b4:06:bf:b9:
                    bc:32:f6:ae:76:69:b5:4f:24:58:55:ed:b3:c0:b2:
                    e0:9d:92:e2:27:1b:76:8b:ef:27:65:8e:f8:bd:1d:
                    77:35:fb:81:c8:a0:37:01:61:dc:01:62:38:9f:f5:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:97:9B:EE:BC:83:05:C5:D9:6F:63:BD:0E:43:A9:C8:60:A5:F5
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:17:18:53:40:16:d3:1c:a9:be:db:d4:b7:44:1b:f3:8c:
         71:b8:4f:74:2c:8d:23:2c:df:b2:82:b8:a0:2c:9f:ea:fa:fc:
         82:ec:1b:19:a6:60:50:2a:6f:d3:60:03:e8:b2:c3:5e:f0:bf:
         74:06:b8:7f:92:81:71:08:43:ed:a5:3c:4c:76:5c:66:e6:b2:
         91:ae:56:7b:79:a4:6f:6c:8c:01:f2:be:44:49:77:09:23:d9:
         5f:f1:ed:f9:79:2b:9f:3d:31:d9:b7:46:87:88:96:81:16:77:
         fd:b1:14:2e:0e:93:61:4a:fd:1f:e3:4e:ab:5d:b9:22:30:87:
         6f:1b:23:a9:50:fd:dd:c4:b6:8d:a3:3d:1f:e9:9e:3f:f0:ab:
         23:96:77:a3:60:27:e6:2f:69:9d:52:69:b5:92:15:e7:f7:d5:
         d3:22:e7:60:02:94:d7:20:ff:95:1a:8e:5b:b3:4d:d3:df:94:
         4b:2d:60:83:d2:9f:3a:c7:b8:69:5f:80:55:2d:62:62:a0:76:
         f8:87:c8:ba:a3:d6:9c:28:5b:83:e0:37:0e:31:b4:e9:c3:c6:
         96:86:10:f8:74:c4:73:49:db:82:b4:fd:e3:4f:8e:f5:10:76:
         b6:84:55:10:81:73:90:d0:d5:78:74:44:4b:2a:11:43:e5:8d:
         d7:7f:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----