This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135362e302f32322d3232203d3e20323638363332.roa
File:                     34352e3136342e3135362e302f32322d3232203d3e20323638363332.roa (raw, json)
Hash identifier:          9Lyo6Yy6AB/Tkg2Kw9TQy9EvjAPrOqynJH1OsG90lCg=
Subject key identifier:   A9:E4:14:25:80:C4:17:AB:4A:30:36:6E:97:29:EA:F5:93:CA:71:F8
Certificate issuer:       /CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Certificate serial:       560EFF49806D118C566B90792310B3623F2BF3E5
Authority key identifier: 4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135362e302f32322d3232203d3e20323638363332.roa
Signing time:             Mon 30 Jun 2025 14:10:31 +0000
ROA not before:           Mon 30 Jun 2025 14:05:31 +0000
ROA not after:            Mon 29 Jun 2026 14:10:31 +0000
asID:                     268632
IP address blocks:        45.164.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0e:ff:49:80:6d:11:8c:56:6b:90:79:23:10:b3:62:3f:2b:f3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F9A7B1115D45ADCE7E844980106788B7969390B
        Validity
            Not Before: Jun 30 14:05:31 2025 GMT
            Not After : Jun 29 14:10:31 2026 GMT
        Subject: CN=A9E4142580C417AB4A30366E9729EAF593CA71F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:33:d0:1a:c6:ed:3e:6a:6e:95:d5:d6:11:
                    61:33:a5:c1:9a:8a:75:bf:e2:8c:cc:a0:16:9e:37:
                    3f:e8:f5:6f:20:1c:70:d7:1b:4e:6a:82:bf:e9:6f:
                    9a:29:e1:e9:56:79:83:cb:34:a8:f2:b3:f0:16:c4:
                    bc:c7:0d:0b:5a:70:17:e1:e8:ee:29:9f:25:70:45:
                    a2:b8:bf:cf:f0:d2:f6:b1:7e:39:6b:79:9d:c2:96:
                    c1:f1:f3:f2:b6:bc:7a:ba:3d:cf:82:75:5e:2d:1a:
                    d0:79:ab:d4:d4:42:fe:ae:b5:a0:cb:e7:f4:77:c7:
                    33:6c:af:b8:a4:97:3e:bb:2a:21:2a:70:f1:fd:84:
                    2f:f7:3b:24:0c:06:83:16:aa:56:e4:8b:2e:9e:97:
                    ed:bf:59:b6:26:e2:40:cd:04:22:3d:32:1b:5c:92:
                    5d:06:e2:58:18:4f:97:8f:fd:f3:1e:31:45:7b:62:
                    6e:3b:79:d0:58:a8:b1:43:bf:26:4b:c4:c7:51:83:
                    92:c5:89:35:a2:c1:ff:f2:ad:22:54:0d:9e:43:46:
                    db:0e:b7:54:92:74:c9:76:30:1c:f1:6a:28:8e:1f:
                    f5:d1:14:60:e5:6a:ad:30:11:f5:19:4b:b6:0a:d1:
                    b1:e5:ba:b9:7b:22:c3:8e:20:00:b0:53:63:38:e0:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E4:14:25:80:C4:17:AB:4A:30:36:6E:97:29:EA:F5:93:CA:71:F8
            X509v3 Authority Key Identifier:
                keyid:4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/4F9A7B1115D45ADCE7E844980106788B7969390B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135362e302f32322d3232203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:4d:d6:62:0a:4b:ba:9d:cb:fd:a8:6d:9e:69:d4:0e:3e:
         c8:9e:33:92:af:99:a6:5b:7d:81:2c:a1:43:e7:19:cf:cd:34:
         a6:71:21:57:c0:9c:80:26:12:55:1f:dc:5f:14:0f:78:00:56:
         0c:cd:5c:d3:9e:27:da:c8:6b:3c:f0:70:bf:94:29:23:47:c1:
         aa:2e:f2:04:59:40:4d:d6:31:92:bd:09:7e:dd:8b:a6:8f:16:
         05:8c:7a:8f:a6:5c:03:7b:da:13:df:d3:9b:89:c0:01:87:43:
         ac:a4:44:19:9e:ea:92:23:5e:18:0f:08:57:e5:c8:db:7a:ee:
         3a:7f:9f:ef:d1:1b:3a:5d:20:d1:13:c2:e4:38:8e:22:1e:b2:
         c6:67:f6:7f:fb:fc:cf:a3:9d:d9:c8:9f:3d:d2:fc:c0:eb:13:
         53:77:8e:a8:f6:ba:b1:ad:dd:2e:1c:0f:0c:0a:96:ba:4f:a8:
         c8:4d:70:85:06:07:20:a4:8d:df:87:19:2e:d9:ae:45:a6:71:
         2d:6e:56:82:76:2a:a2:03:75:35:33:47:30:3e:3d:ef:78:f3:
         5a:06:f8:e2:f6:4f:03:21:41:54:e5:65:ac:a1:90:85:c6:c7:
         9a:51:38:35:ce:3b:0d:35:ae:60:a8:5a:78:76:e5:3e:df:46:
         1c:4f:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----