This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3332203d3e20323730333230.roa
File:                     3139302e38332e342e302f32322d3332203d3e20323730333230.roa (raw, json)
Hash identifier:          APJNdRubcHZf3+k95GGfTCPkXyDHmTbEUAQscV4slcY=
Subject key identifier:   42:5D:4E:04:15:D8:9D:E1:80:1F:66:D4:C1:0A:8B:E3:CA:DD:20:E8
Certificate issuer:       /CN=A055A2B3A35289307B404B8D8A7DC03C7B4605A4
Certificate serial:       656859FE08208B96B40E80A9FD55F36AAD4EF571
Authority key identifier: A0:55:A2:B3:A3:52:89:30:7B:40:4B:8D:8A:7D:C0:3C:7B:46:05:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A055A2B3A35289307B404B8D8A7DC03C7B4605A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3332203d3e20323730333230.roa
Signing time:             Mon 23 Jun 2025 13:43:25 +0000
ROA not before:           Mon 23 Jun 2025 13:38:25 +0000
ROA not after:            Mon 22 Jun 2026 13:43:25 +0000
asID:                     270320
IP address blocks:        190.83.4.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:68:59:fe:08:20:8b:96:b4:0e:80:a9:fd:55:f3:6a:ad:4e:f5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A055A2B3A35289307B404B8D8A7DC03C7B4605A4
        Validity
            Not Before: Jun 23 13:38:25 2025 GMT
            Not After : Jun 22 13:43:25 2026 GMT
        Subject: CN=425D4E0415D89DE1801F66D4C10A8BE3CADD20E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:8f:31:81:1a:70:fb:63:ad:d8:52:ce:b5:
                    bf:33:70:73:5d:e0:3d:52:75:c5:fb:9d:2d:b8:d6:
                    ca:72:66:a0:e1:02:01:1a:cd:99:57:33:dd:78:90:
                    87:ea:6b:f6:20:65:a6:28:83:3e:6e:15:67:70:70:
                    54:3f:ea:17:c9:50:d9:a9:5c:32:bd:26:7a:8a:a7:
                    77:ac:97:62:bb:3a:9a:ae:d6:e4:43:55:14:8b:a6:
                    99:a2:6a:02:13:ce:48:63:84:25:13:a4:31:d5:e1:
                    75:2f:db:1b:68:e9:2f:8e:7f:a4:41:15:45:2e:90:
                    73:6b:14:83:9b:6a:ca:1e:b0:10:fc:30:09:69:10:
                    01:41:b8:a0:ad:7c:c9:66:a3:8e:c9:89:eb:c1:2d:
                    75:53:34:79:b9:73:91:d9:f3:17:00:90:46:34:8f:
                    d3:4f:fc:00:92:8e:83:64:e9:5f:1c:f1:13:48:d0:
                    6d:12:bf:9a:19:51:30:95:d3:f3:bc:a5:46:c4:1b:
                    b7:54:8f:ad:b8:30:25:ad:21:62:a1:cb:d7:2f:72:
                    e6:39:38:1b:c9:13:48:03:db:fc:35:37:ca:ff:f3:
                    91:b5:5c:0b:42:17:82:5a:c6:7d:48:f6:80:f5:d6:
                    63:2e:21:f0:8a:bd:f5:23:0e:f1:06:35:14:14:65:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5D:4E:04:15:D8:9D:E1:80:1F:66:D4:C1:0A:8B:E3:CA:DD:20:E8
            X509v3 Authority Key Identifier:
                keyid:A0:55:A2:B3:A3:52:89:30:7B:40:4B:8D:8A:7D:C0:3C:7B:46:05:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/A055A2B3A35289307B404B8D8A7DC03C7B4605A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A055A2B3A35289307B404B8D8A7DC03C7B4605A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3332203d3e20323730333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:7c:db:29:ee:e4:e3:5d:0e:f0:cf:6a:0e:b4:57:ef:2c:25:
         a9:9a:e7:ec:7a:55:f5:fc:c7:9c:cd:ea:2e:fb:66:28:40:64:
         7c:21:49:31:19:57:6a:16:3b:ab:25:ad:b2:62:95:19:94:fd:
         69:d2:2f:9f:be:00:4b:c7:a1:10:d7:22:b1:e8:08:10:fd:a5:
         fa:71:ac:1a:5e:88:90:12:76:78:06:86:84:7c:b2:de:39:a6:
         57:0e:1e:9e:84:05:9c:46:9f:aa:77:0d:db:0f:be:38:68:4c:
         bf:69:70:90:37:e6:e7:aa:a5:89:3b:7e:7f:36:bd:04:c6:d1:
         6d:92:7f:b7:da:75:68:ae:b2:9e:cc:bf:b6:b7:ad:26:48:f2:
         5c:4f:8f:9a:cf:ab:ac:e2:21:6b:93:c7:90:33:02:d6:3e:e7:
         4d:98:53:63:ee:2d:36:40:2d:42:d6:6a:e4:92:ff:e9:0b:21:
         1b:bc:c0:f5:9d:56:f2:76:e4:b3:01:bd:30:67:3b:45:2b:3f:
         e9:50:74:39:76:86:ea:26:e5:d2:56:9e:7f:67:40:ba:9b:39:
         98:8b:f0:d3:b0:19:a3:ab:a8:80:76:f0:66:4d:51:87:59:9f:
         dc:70:62:f4:d4:0a:79:53:55:27:9c:c1:62:d0:60:43:5d:ab:
         63:3b:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----