This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa
File:                     3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          J5o6m9dTEviOzBDWfoCt4Qt4jSFmBPy1ToO5Wb2kNDc=
Subject key identifier:   B8:58:32:1A:DE:BA:20:A2:64:A4:68:0D:CD:F6:28:66:23:74:C0:E1
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       134F7CF37E033DB6AE03283D4EEE22B03580CDFD
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa
Signing time:             Fri 24 Oct 2025 11:17:53 +0000
ROA not before:           Fri 24 Oct 2025 11:12:53 +0000
ROA not after:            Fri 23 Oct 2026 11:17:53 +0000
asID:                     266440
IP address blocks:        170.82.20.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4f:7c:f3:7e:03:3d:b6:ae:03:28:3d:4e:ee:22:b0:35:80:cd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Oct 24 11:12:53 2025 GMT
            Not After : Oct 23 11:17:53 2026 GMT
        Subject: CN=B858321ADEBA20A264A4680DCDF628662374C0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:5f:66:a5:34:aa:40:62:f6:cf:a6:99:5d:
                    94:64:e6:da:1e:e9:ad:7b:1e:73:64:41:46:4d:92:
                    27:ad:46:c6:46:fe:ef:e5:30:d3:19:6a:38:88:3f:
                    72:98:f5:78:19:21:87:10:e7:f6:c1:35:39:25:f6:
                    b2:88:6c:7b:f0:8e:f5:1b:5d:42:6a:64:6e:a1:34:
                    ab:bf:60:7e:34:e4:91:78:75:73:23:c5:50:f6:4b:
                    78:91:5f:c4:dd:f7:d8:64:8e:ea:87:42:9c:17:ca:
                    cd:3e:ce:7a:d8:36:90:4f:72:79:10:bf:22:c6:9f:
                    3f:6d:85:5b:f9:1f:11:f1:03:79:1a:df:ae:82:87:
                    10:c6:69:eb:41:9f:1c:49:8e:1b:4d:7f:fb:25:ed:
                    68:ff:56:e0:be:45:37:80:a9:64:ce:72:3f:ea:57:
                    53:de:e7:a8:dc:17:18:3d:c2:9b:f2:52:9e:49:9f:
                    01:aa:63:51:63:2d:a5:cf:27:ff:ab:56:b5:0b:47:
                    45:12:d4:cd:a1:c3:62:88:50:c6:4e:85:59:7f:51:
                    38:41:e4:9d:1d:8f:94:f9:8f:89:c1:01:1d:55:6b:
                    f8:4d:f0:2f:e6:33:55:1a:76:c2:b7:6e:9d:7b:9d:
                    72:64:51:d6:d0:1d:5a:28:f6:82:b0:61:ad:af:2a:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:58:32:1A:DE:BA:20:A2:64:A4:68:0D:CD:F6:28:66:23:74:C0:E1
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:35:1e:6b:9e:05:77:40:bc:6b:ff:32:ee:7f:0d:e6:44:c0:
         c0:29:55:c2:39:52:48:66:ca:9b:a1:9e:f1:a4:dc:1c:9f:56:
         1d:39:1b:e1:88:26:99:37:9d:be:89:13:1c:0f:91:02:e1:01:
         42:60:77:43:ca:3c:55:e0:8f:ec:f6:21:99:13:81:25:fd:d1:
         05:95:f1:e0:33:c7:93:0a:0d:2e:7a:29:54:1d:68:1c:b2:f1:
         d0:6f:4d:10:72:26:bf:6b:86:7f:0b:0d:93:9b:1e:11:38:b0:
         03:8d:bc:6a:b2:8c:34:b1:aa:35:04:19:d2:d1:71:26:fa:fe:
         1d:83:de:7e:41:0a:4c:18:68:0a:b7:ec:56:b6:e5:24:82:17:
         77:0c:23:33:8e:21:dc:d9:10:ea:88:fa:ab:6c:72:fd:fe:24:
         75:8f:9b:fe:6c:07:3c:ba:a8:52:ad:d1:24:d4:70:e1:60:8f:
         60:31:da:1f:89:32:09:38:08:fb:46:24:cf:2c:66:d1:ff:ae:
         6b:c1:0c:c9:47:d6:9e:e4:ac:0a:da:7a:83:1a:21:df:09:fb:
         5e:39:bb:a5:a8:48:38:58:1a:68:0a:df:99:bd:25:09:7f:c7:
         05:10:b5:50:45:73:df:96:33:6b:be:f2:3a:65:53:07:d4:7f:
         e3:41:44:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE098834DPbauAyg9Tu4isDWAzf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBEMEYxQ0UzMEEyQkMwRjNBREI2NkZEODI0Mjc1MDI1
ODk3NUUxRDAeFw0yNTEwMjQxMTEyNTNaFw0yNjEwMjMxMTE3NTNaMDMxMTAvBgNV
BAMTKEI4NTgzMjFBREVCQTIwQTI2NEE0NjgwRENERjYyODY2MjM3NEMwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/F9mpTSqQGL2z6aZXZRk5toe
6a17HnNkQUZNkietRsZG/u/lMNMZajiIP3KY9XgZIYcQ5/bBNTkl9rKIbHvwjvUb
XUJqZG6hNKu/YH405JF4dXMjxVD2S3iRX8Td99hkjuqHQpwXys0+znrYNpBPcnkQ
vyLGnz9thVv5HxHxA3ka366ChxDGaetBnxxJjhtNf/sl7Wj/VuC+RTeAqWTOcj/q
V1Pe56jcFxg9wpvyUp5JnwGqY1FjLaXPJ/+rVrULR0US1M2hw2KIUMZOhVl/UThB
5J0dj5T5j4nBAR1Va/hN8C/mM1UadsK3bp17nXJkUdbQHVoo9oKwYa2vKrU/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuFgyGt66IKJkpGgNzfYoZiN0wOEwHwYDVR0j
BBgwFoAUsNDxzjCivA8622b9gkJ1AliXXh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r
WTQvMC9CMEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRDBGMUNFMzBBMkJDMEYz
QURCNjZGRDgyNDI3NTAyNTg5NzVFMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvV1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAv
MzEzNzMwMmUzODMyMmUzMjMwMmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlIUMA0GCSqGSIb3DQEBCwUAA4IBAQAoNR5rngV3
QLxr/zLufw3mRMDAKVXCOVJIZsqboZ7xpNwcn1YdORvhiCaZN52+iRMcD5EC4QFC
YHdDyjxV4I/s9iGZE4El/dEFlfHgM8eTCg0ueilUHWgcsvHQb00Qcia/a4Z/Cw2T
mx4ROLADjbxqsow0sao1BBnS0XEm+v4dg95+QQpMGGgKt+xWtuUkghd3DCMzjiHc
2RDqiPqrbHL9/iR1j5v+bAc8uqhSrdEk1HDhYI9gMdofiTIJOAj7RiTPLGbR/65r
wQzJR9ae5KwK2nqDGiHfCfteObulqEg4WBpoCt+ZvSUJf8cFELVQRXPfljNrvvI6
ZVMH1H/jQURi
-----END CERTIFICATE-----