This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32322d3232203d3e20323635343139.roa
File:                     3136382e3139352e32302e302f32322d3232203d3e20323635343139.roa (raw, json)
Hash identifier:          zbYnWST4I81bsTeNaej6YNDzu0gLkkdxd9D7JU1kzNc=
Subject key identifier:   FC:60:5E:22:79:37:33:55:53:0C:AA:39:A4:37:90:40:48:CA:FC:91
Certificate issuer:       /CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
Certificate serial:       4EC623CFC14EEDDC0D269A730C5B5C9B649DBE33
Authority key identifier: D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32322d3232203d3e20323635343139.roa
Signing time:             Thu 21 Aug 2025 17:41:51 +0000
ROA not before:           Thu 21 Aug 2025 17:36:51 +0000
ROA not after:            Thu 20 Aug 2026 17:41:51 +0000
asID:                     265419
IP address blocks:        168.195.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c6:23:cf:c1:4e:ed:dc:0d:26:9a:73:0c:5b:5c:9b:64:9d:be:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
        Validity
            Not Before: Aug 21 17:36:51 2025 GMT
            Not After : Aug 20 17:41:51 2026 GMT
        Subject: CN=FC605E2279373355530CAA39A437904048CAFC91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:54:9d:58:46:27:c0:87:5f:8f:fa:39:af:
                    04:61:04:42:5f:1d:e6:ce:72:f7:95:bb:a8:98:2e:
                    89:46:92:f3:1f:47:d4:20:bc:c5:75:1d:2e:54:ed:
                    3b:39:13:5c:10:93:5a:74:72:25:19:d2:4b:c0:c3:
                    12:bd:36:56:d4:0b:e9:91:09:c7:c3:1c:6b:4f:7f:
                    95:cf:2e:32:91:ea:30:b3:d0:ac:ae:63:3a:ce:e3:
                    ee:06:d1:ff:19:3f:93:f0:83:50:f6:4c:5c:c9:de:
                    b6:49:d0:9c:df:5b:ce:e7:1d:16:9d:5e:cf:01:95:
                    c6:30:cb:5b:70:fe:b3:bc:f5:42:95:9c:8f:a7:4a:
                    df:80:5f:64:b1:8c:83:b4:f0:06:b7:2c:d5:da:45:
                    c0:7e:5d:f3:5e:30:6f:57:40:24:83:65:ed:81:a4:
                    6e:0d:63:47:87:2a:90:1d:d4:d2:da:4e:b6:65:0f:
                    ed:be:28:92:56:d5:09:f8:ff:1b:bc:b6:c6:0f:eb:
                    d0:e6:99:14:13:db:45:0b:ae:c3:fc:78:c3:7c:4c:
                    08:7a:f0:d9:f6:7c:c1:68:4d:96:99:ad:91:cb:2e:
                    fc:4d:c6:1e:e1:f5:d0:2b:c4:a3:5e:41:fa:51:4e:
                    6c:cc:59:f2:bf:39:31:45:13:fd:fc:75:38:ea:b9:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:5E:22:79:37:33:55:53:0C:AA:39:A4:37:90:40:48:CA:FC:91
            X509v3 Authority Key Identifier:
                keyid:D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32322d3232203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:e5:ea:37:a8:0e:b9:b2:72:ae:04:10:c2:9c:16:10:42:
         0a:1a:8e:67:04:37:fe:ac:1a:54:63:b1:2a:9b:86:ca:5d:9e:
         8e:7b:cb:bc:75:9a:08:37:9a:db:86:f0:0e:2d:46:d2:fd:9e:
         80:69:86:60:44:b7:3f:1b:e7:d4:be:f8:df:32:26:53:fb:6b:
         fc:09:cc:d2:a1:3d:1e:2c:38:fc:a1:20:6e:67:53:f0:bf:6c:
         3d:e2:79:47:08:54:01:a6:d1:61:b5:85:b6:a0:a1:ec:c3:2e:
         d3:eb:d4:ee:d7:13:05:2d:fa:aa:fc:08:a2:8c:a3:fa:62:64:
         8a:61:69:4e:d1:1b:2b:db:7d:13:4c:44:04:4e:08:17:9c:f6:
         e1:8d:75:99:4d:ba:4a:26:53:ec:9b:7a:da:1a:32:a9:83:2f:
         f1:17:00:67:6d:12:53:b4:04:6b:27:5b:3c:e5:58:37:21:44:
         b9:4b:10:eb:63:be:a6:14:0b:0f:68:e0:fc:7d:03:b1:68:e5:
         62:cb:63:70:87:4a:fe:2f:92:22:4d:fe:f9:9d:10:2b:3b:ce:
         2c:77:84:78:f0:ca:a6:9e:95:5e:eb:b2:46:61:50:b1:4d:27:
         bc:08:1b:09:55:28:97:1f:9d:b1:ae:45:ba:b9:2d:45:87:bf:
         74:f0:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----