This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/0/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
File:                     3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa (raw, json)
Hash identifier:          ZQIWEFrAMpo7OgW9veTzvS3VTHLBxFBZX/Pvq+/flEY=
Subject key identifier:   BC:F8:0F:2C:00:38:90:77:90:AF:C5:8B:C2:07:92:34:25:B0:E9:F1
Certificate issuer:       /CN=772203002A1E0B94E64E5A426711B81984048CD5
Certificate serial:       12227AD28ABF0903BC7ED6B22AF2DD1BB3F03857
Authority key identifier: 77:22:03:00:2A:1E:0B:94:E6:4E:5A:42:67:11:B8:19:84:04:8C:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/772203002A1E0B94E64E5A426711B81984048CD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/0/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
Signing time:             Fri 24 Jan 2025 17:24:10 +0000
ROA not before:           Fri 24 Jan 2025 17:19:10 +0000
ROA not after:            Fri 23 Jan 2026 17:24:10 +0000
asID:                     270797
IP address blocks:        177.131.140.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:22:7a:d2:8a:bf:09:03:bc:7e:d6:b2:2a:f2:dd:1b:b3:f0:38:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772203002A1E0B94E64E5A426711B81984048CD5
        Validity
            Not Before: Jan 24 17:19:10 2025 GMT
            Not After : Jan 23 17:24:10 2026 GMT
        Subject: CN=BCF80F2C0038907790AFC58BC207923425B0E9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:26:f8:06:87:55:c1:46:75:73:52:ef:a6:
                    66:d7:c8:12:5a:4e:fc:dd:9b:c5:f6:e2:28:58:cc:
                    79:a1:10:23:ec:f5:8d:61:e8:8f:ad:09:c1:aa:5d:
                    99:29:bf:6c:62:87:40:72:c1:61:fd:82:17:28:04:
                    f0:16:7d:87:a2:76:5e:b6:00:cc:63:23:f4:4f:01:
                    4a:60:41:41:b6:ce:33:96:ac:b8:fb:30:b5:28:a3:
                    6b:f9:f4:44:60:6f:a0:d8:c0:2c:ac:a9:90:9c:4e:
                    41:ff:84:20:71:f1:0c:65:6a:f3:38:f7:46:4a:47:
                    f7:84:d6:c3:b9:db:13:83:5e:dd:9f:a5:54:d0:c3:
                    19:f6:f2:24:f2:77:79:47:72:84:1c:ba:54:e1:ab:
                    38:9c:7a:b5:d5:86:8c:a7:29:eb:d6:55:5a:4e:ac:
                    01:e4:3d:f1:60:44:51:16:64:a4:2e:1a:67:3f:08:
                    32:9e:fd:20:23:5d:b6:b1:2a:78:29:00:8c:8c:e5:
                    c3:fa:29:69:e6:fd:93:d2:eb:f0:76:f1:f0:e2:a3:
                    bf:53:9a:0e:ee:a1:77:c6:d6:ed:04:55:81:a3:55:
                    b8:bd:b6:0e:a5:c0:25:9f:b2:5d:f6:e1:e3:e9:a5:
                    24:41:35:f5:03:2e:bd:e6:b0:73:cf:2a:50:c2:63:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:0F:2C:00:38:90:77:90:AF:C5:8B:C2:07:92:34:25:B0:E9:F1
            X509v3 Authority Key Identifier:
                keyid:77:22:03:00:2A:1E:0B:94:E6:4E:5A:42:67:11:B8:19:84:04:8C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/0/772203002A1E0B94E64E5A426711B81984048CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/772203002A1E0B94E64E5A426711B81984048CD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/0/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:b1:e5:98:e7:91:62:9d:e4:5d:af:04:bc:7f:79:71:84:
         76:4d:28:fc:69:68:7e:45:6b:2f:4a:d5:f0:0c:79:41:ba:7d:
         8b:fe:b4:da:0d:8b:03:42:b2:08:30:fc:ab:2b:a5:45:dc:76:
         42:e4:e0:8f:80:01:ca:6d:96:74:82:5f:70:68:db:de:6f:ae:
         c6:7b:f4:2c:2e:16:73:c7:bd:33:36:73:7e:b6:de:e1:f6:34:
         17:8b:d4:f6:13:5f:13:02:2a:8f:09:6f:c3:20:bd:c4:3e:b3:
         97:4b:3f:5f:80:0f:6d:e7:e2:a4:db:7a:70:19:ee:69:26:db:
         4e:3c:1a:b3:79:31:fe:14:05:13:b0:ea:3e:04:b8:6e:3e:76:
         4d:32:0a:22:d1:ae:f0:e8:a5:c1:f4:d9:6c:4a:13:77:d8:8b:
         c6:a9:75:b5:3f:b9:4f:1e:53:8a:93:44:76:b4:86:3e:76:bb:
         48:3a:42:79:e9:97:ea:27:58:f3:de:2e:64:52:a1:0d:3e:68:
         ab:ac:33:77:ec:5f:9f:e8:96:0b:74:01:04:a8:ec:c1:4f:a3:
         4b:6f:36:01:aa:3d:02:19:1b:fe:3e:43:e3:05:ca:8c:99:df:
         49:56:2c:d4:5f:15:99:c9:a1:49:cd:89:24:c8:f1:dc:0f:32:
         dc:8e:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----