This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa
File:                     3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa (raw, json)
Hash identifier:          Vl9WZLmcsyIRzT4kTSoepvjiPeGWEcZKiW4ihNm5c8A=
Subject key identifier:   A5:BF:06:BA:E3:95:52:A2:7D:3F:B4:42:95:2A:13:DA:47:AE:49:37
Certificate issuer:       /CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
Certificate serial:       540D018E0E81A7BC04375D86528C61F7B62E1EDB
Authority key identifier: 26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa
Signing time:             Thu 06 Mar 2025 03:42:07 +0000
ROA not before:           Thu 06 Mar 2025 03:37:07 +0000
ROA not after:            Thu 05 Mar 2026 03:42:07 +0000
asID:                     264524
IP address blocks:        170.247.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0d:01:8e:0e:81:a7:bc:04:37:5d:86:52:8c:61:f7:b6:2e:1e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
        Validity
            Not Before: Mar  6 03:37:07 2025 GMT
            Not After : Mar  5 03:42:07 2026 GMT
        Subject: CN=A5BF06BAE39552A27D3FB442952A13DA47AE4937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:1c:ad:1c:9b:7e:c4:a1:1e:95:7b:19:a8:
                    6c:19:66:75:74:e5:49:46:6e:50:c2:9b:3d:56:d2:
                    ce:94:ad:89:c4:25:1b:6f:4a:64:87:69:1c:10:35:
                    91:b2:3f:8c:fb:92:bc:7f:58:77:cc:d3:e6:bb:68:
                    0b:60:4d:28:69:38:3f:31:95:1d:ba:21:44:77:2d:
                    75:dd:17:d5:0d:73:27:89:a4:58:11:fb:81:4a:ca:
                    03:af:11:12:0f:82:22:d4:fc:4e:51:06:96:f5:fd:
                    c2:07:8d:60:3d:62:60:94:08:04:05:c5:f7:33:39:
                    e6:2d:89:35:c9:44:bd:78:24:c0:f6:a2:6e:6d:f4:
                    41:76:d0:50:d5:99:09:55:6f:66:56:27:2e:99:35:
                    97:92:c5:a6:54:a6:25:c6:b0:20:31:3b:e8:53:97:
                    e6:d0:c7:47:d3:23:5c:33:c5:9f:8d:ca:f0:4a:d1:
                    ea:93:0c:53:80:2d:36:72:f0:1f:36:e5:7c:50:56:
                    cf:04:56:c8:07:78:a4:ec:80:cb:8d:51:36:ff:4b:
                    24:be:6c:4f:d6:25:90:11:b8:b7:f9:c2:94:05:f6:
                    9d:05:41:85:8a:5e:10:b4:ed:95:ae:fb:4f:5c:fd:
                    fa:9a:3e:a6:de:86:89:a9:0a:57:fc:dc:27:10:0f:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:06:BA:E3:95:52:A2:7D:3F:B4:42:95:2A:13:DA:47:AE:49:37
            X509v3 Authority Key Identifier:
                keyid:26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3137302e3234372e33362e302f32322d3232203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:43:66:16:f9:23:ac:48:d4:73:f4:59:7c:5d:96:e7:b5:88:
         25:23:b4:4e:93:14:07:27:69:87:12:a9:fa:af:4a:2a:0d:0e:
         94:19:dc:37:10:de:bb:86:6d:f4:f8:65:c5:64:a3:16:27:20:
         f0:13:40:b9:b2:d3:35:b1:88:ea:80:1d:41:11:fa:48:43:9c:
         e2:12:65:ec:28:8c:f6:2d:d5:90:69:c3:f6:16:50:27:86:0f:
         c2:57:b3:79:3f:b9:cb:3b:fb:67:e7:2f:dd:7b:5e:c1:4f:25:
         1e:f2:a7:03:fa:8b:f4:25:cd:94:23:0a:e0:48:a1:96:2b:bb:
         f5:0a:57:05:55:1b:1e:78:86:a8:3e:f1:31:be:58:fe:3e:9b:
         2f:34:eb:d4:eb:7f:ca:44:f2:0b:90:cb:b2:c0:9a:71:8b:c3:
         69:97:e5:7c:88:03:f5:72:bc:1f:5a:70:d4:73:08:d3:da:ae:
         05:cb:19:25:6f:ed:6e:78:e9:bb:dd:40:16:35:8c:b5:f0:82:
         34:37:45:50:86:00:e4:8e:43:c6:46:e7:82:98:3a:8a:1f:c1:
         39:a5:b7:5a:d1:1a:b5:c1:65:b0:e4:a8:e3:85:f6:7e:d7:f2:
         a4:ac:34:9b:1f:09:92:51:b4:c4:41:67:f8:9b:fa:b1:ac:5b:
         71:77:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----