This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EaPVDaHYecXrCZiR9vtTomLC1ojabQND2jPZqKkN5hba/0/34352e3233332e3133362e302f32322d3234203d3e20323637333138.roa
File:                     34352e3233332e3133362e302f32322d3234203d3e20323637333138.roa (raw, json)
Hash identifier:          djA8FcqVZjIkh9UnHLK5p7FyR0Uatqq6PVmn7IQlXZg=
Subject key identifier:   D2:58:7E:36:A9:66:EA:29:53:1D:23:A8:F9:62:57:F9:D2:0D:A4:AB
Certificate issuer:       /CN=33716821EDF9DD68A491A81E943CA5D8C568CB5E
Certificate serial:       232D39CB37B281ED6AFD63CD72A36CBFCA59AB7F
Authority key identifier: 33:71:68:21:ED:F9:DD:68:A4:91:A8:1E:94:3C:A5:D8:C5:68:CB:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33716821EDF9DD68A491A81E943CA5D8C568CB5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EaPVDaHYecXrCZiR9vtTomLC1ojabQND2jPZqKkN5hba/0/34352e3233332e3133362e302f32322d3234203d3e20323637333138.roa
Signing time:             Mon 03 Feb 2025 18:28:12 +0000
ROA not before:           Mon 03 Feb 2025 18:23:12 +0000
ROA not after:            Mon 02 Feb 2026 18:28:12 +0000
asID:                     267318
IP address blocks:        45.233.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:39:cb:37:b2:81:ed:6a:fd:63:cd:72:a3:6c:bf:ca:59:ab:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33716821EDF9DD68A491A81E943CA5D8C568CB5E
        Validity
            Not Before: Feb  3 18:23:12 2025 GMT
            Not After : Feb  2 18:28:12 2026 GMT
        Subject: CN=D2587E36A966EA29531D23A8F96257F9D20DA4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:50:37:26:79:a6:ce:9d:2b:d0:e1:ff:fc:
                    f4:e4:15:3e:2d:22:d0:0c:76:74:de:78:74:e9:3c:
                    9f:37:5d:d2:e4:64:59:6c:77:b9:ff:88:cf:cd:5a:
                    80:79:a3:2f:31:8e:7a:04:52:8b:c6:0a:17:4d:2e:
                    eb:14:3f:e9:ed:d6:d6:11:fb:c2:1b:be:64:6c:a1:
                    4c:1a:c5:88:5c:23:4e:c4:61:c5:b8:63:f4:58:0e:
                    12:44:e0:f0:57:44:a0:35:7d:ad:c6:7b:d9:f0:2b:
                    8b:58:69:b1:91:2b:7b:ef:81:f0:97:85:fc:c7:d0:
                    59:37:d8:96:c9:ba:3d:82:12:a9:61:94:a8:c5:24:
                    dc:a6:c9:89:e7:ec:e2:c3:80:ce:4e:12:e1:5c:5e:
                    52:a6:ee:98:cb:f1:3d:ed:4e:a9:0a:e2:0a:d4:d2:
                    90:a7:14:96:51:45:a4:15:bf:97:0f:67:82:79:cb:
                    76:09:44:20:fc:8b:d5:5a:cb:93:4a:ad:8d:52:0d:
                    bd:02:68:a7:07:72:e0:12:a7:61:e6:90:f9:1f:6c:
                    2f:52:e7:70:b2:2b:82:87:ec:3a:13:39:4d:bf:87:
                    8f:f6:44:6d:4d:48:b6:d0:c1:55:e9:fb:4b:4a:ef:
                    9e:9e:3e:23:c9:f1:42:ce:a1:75:22:6c:44:4e:a8:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:58:7E:36:A9:66:EA:29:53:1D:23:A8:F9:62:57:F9:D2:0D:A4:AB
            X509v3 Authority Key Identifier:
                keyid:33:71:68:21:ED:F9:DD:68:A4:91:A8:1E:94:3C:A5:D8:C5:68:CB:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EaPVDaHYecXrCZiR9vtTomLC1ojabQND2jPZqKkN5hba/0/33716821EDF9DD68A491A81E943CA5D8C568CB5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33716821EDF9DD68A491A81E943CA5D8C568CB5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EaPVDaHYecXrCZiR9vtTomLC1ojabQND2jPZqKkN5hba/0/34352e3233332e3133362e302f32322d3234203d3e20323637333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:f7:65:73:bb:55:30:6a:41:20:af:5d:e5:a6:fb:58:cd:
         6a:5c:c1:89:41:2e:a9:6f:11:31:a2:51:75:81:07:23:86:ac:
         05:65:86:14:e8:55:e1:20:7d:d2:f4:5a:43:b3:85:96:55:9d:
         14:9e:ca:3d:99:f6:e3:2f:65:59:33:32:12:e8:e9:9d:4b:0c:
         a2:72:3b:ee:ec:2f:61:89:0d:b7:7e:b2:96:ee:4a:8d:03:38:
         89:1b:ab:2f:03:fb:cb:b1:0a:d1:e5:c4:5b:e3:6c:8c:9d:83:
         85:a0:bf:23:af:36:03:fa:d2:5d:ed:f0:95:b3:7f:52:0b:12:
         cd:02:e4:70:9d:a0:26:5a:df:c9:54:e7:65:85:b1:f2:37:d6:
         54:d9:04:5a:4c:29:7a:34:eb:88:2c:92:f7:88:c7:b0:2b:5c:
         18:99:e6:09:d7:e8:f9:b8:f7:2d:6b:fc:c5:8e:d7:17:38:69:
         e2:55:e1:0d:4a:40:ba:e6:c5:60:f0:e5:f4:7c:db:4d:7d:b9:
         6f:b9:cc:55:e6:9e:bc:38:91:eb:70:75:02:91:24:c6:d8:05:
         8c:16:2d:50:12:db:bb:a8:03:97:0d:3a:05:29:b6:2b:bb:8b:
         8b:75:20:1c:8d:76:0d:9e:ba:b5:35:8b:14:15:4c:56:ca:90:
         3f:c7:de:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIy05yzeyge1q/WPNcqNsv8pZq38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3MTY4MjFFREY5REQ2OEE0OTFBODFFOTQzQ0E1RDhD
NTY4Q0I1RTAeFw0yNTAyMDMxODIzMTJaFw0yNjAyMDIxODI4MTJaMDMxMTAvBgNV
BAMTKEQyNTg3RTM2QTk2NkVBMjk1MzFEMjNBOEY5NjI1N0Y5RDIwREE0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVCVA3Jnmmzp0r0OH//PTkFT4t
ItAMdnTeeHTpPJ83XdLkZFlsd7n/iM/NWoB5oy8xjnoEUovGChdNLusUP+nt1tYR
+8IbvmRsoUwaxYhcI07EYcW4Y/RYDhJE4PBXRKA1fa3Ge9nwK4tYabGRK3vvgfCX
hfzH0Fk32JbJuj2CEqlhlKjFJNymyYnn7OLDgM5OEuFcXlKm7pjL8T3tTqkK4grU
0pCnFJZRRaQVv5cPZ4J5y3YJRCD8i9Vay5NKrY1SDb0CaKcHcuASp2HmkPkfbC9S
53CyK4KH7DoTOU2/h4/2RG1NSLbQwVXp+0tK756ePiPJ8ULOoXUibEROqFplAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0lh+Nqlm6ilTHSOo+WJX+dINpKswHwYDVR0j
BBgwFoAUM3FoIe353WikkagelDyl2MVoy14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFQVkRhSFllY1hyQ1ppUjl2dFRvbUxDMW9qYWJRTkQyalBacUtrTjVo
YmEvMC8zMzcxNjgyMUVERjlERDY4QTQ5MUE4MUU5NDNDQTVEOEM1NjhDQjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzE2ODIxRURGOURENjhB
NDkxQTgxRTk0M0NBNUQ4QzU2OENCNUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhUFZEYUhZZWNYckNaaVI5dnRUb21MQzFvamFiUU5EMmpQWnFLa041aGJhLzAv
MzQzNTJlMzIzMzMzMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6YgwDQYJKoZIhvcNAQELBQADggEBAGDI92Vz
u1UwakEgr13lpvtYzWpcwYlBLqlvETGiUXWBByOGrAVlhhToVeEgfdL0WkOzhZZV
nRSeyj2Z9uMvZVkzMhLo6Z1LDKJyO+7sL2GJDbd+spbuSo0DOIkbqy8D+8uxCtHl
xFvjbIydg4WgvyOvNgP60l3t8JWzf1ILEs0C5HCdoCZa38lU52WFsfI31lTZBFpM
KXo064gskveIx7ArXBiZ5gnX6Pm49y1r/MWO1xc4aeJV4Q1KQLrmxWDw5fR82019
uW+5zFXmnrw4ketwdQKRJMbYBYwWLVAS27uoA5cNOgUptiu7i4t1IByNdg2eurU1
ixQVTFbKkD/H3qM=
-----END CERTIFICATE-----