This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          iklcuoNIa74a9v+vnGbALu2PVhhOSHroYjM3mB52Vnw=
Subject key identifier:   AB:24:ED:A2:75:A0:DF:23:40:AC:FF:28:1A:66:34:E1:12:66:81:FF
Certificate issuer:       /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
Certificate serial:       24957CCFEBDC75A1435112BC6266ED3D8036518F
Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa
Signing time:             Wed 04 Jun 2025 14:55:30 +0000
ROA not before:           Wed 04 Jun 2025 14:50:30 +0000
ROA not after:            Wed 03 Jun 2026 14:55:30 +0000
asID:                     268063
IP address blocks:        45.168.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:95:7c:cf:eb:dc:75:a1:43:51:12:bc:62:66:ed:3d:80:36:51:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
        Validity
            Not Before: Jun  4 14:50:30 2025 GMT
            Not After : Jun  3 14:55:30 2026 GMT
        Subject: CN=AB24EDA275A0DF2340ACFF281A6634E1126681FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:ff:d1:c0:12:68:81:c1:4a:97:a2:44:67:
                    77:1d:98:9d:7e:39:31:65:3b:5a:6c:1c:30:eb:bc:
                    ec:e6:ff:d5:d7:f3:96:ed:5a:84:58:3c:8a:d6:d9:
                    29:8d:be:16:f5:c2:f9:e7:db:e7:d8:a5:03:ea:63:
                    9b:4f:07:18:ec:7d:bd:8d:9c:6f:bf:35:a2:85:31:
                    ea:5d:e1:fb:bc:2e:de:78:a1:56:19:2f:da:39:3c:
                    ac:67:76:22:38:16:22:ad:07:ec:eb:7b:c7:3c:55:
                    d6:cb:1f:43:2a:66:ee:fb:3f:92:52:84:af:6d:12:
                    7c:d0:fc:05:d0:3f:29:4d:1b:af:44:48:00:fa:64:
                    6a:35:c0:19:45:c4:1b:b1:f8:d4:b0:5a:bd:ae:96:
                    cb:a6:eb:3c:c6:52:ff:57:bb:3e:52:07:43:47:be:
                    e3:ab:5d:d4:03:3b:bb:02:a3:26:7a:11:6a:c5:52:
                    ed:64:78:d6:10:e6:e0:e3:be:5c:9b:7c:e3:85:4c:
                    ca:e1:df:f7:f4:5f:82:51:d5:8e:14:b9:94:9f:ff:
                    f3:94:5d:4a:f8:90:e1:e4:ed:31:de:1c:bb:25:38:
                    6d:46:9b:6b:9a:bd:06:16:51:0c:87:8f:f2:45:a6:
                    1e:8e:9a:52:e1:45:02:bc:69:cd:53:7f:c0:32:4e:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:24:ED:A2:75:A0:DF:23:40:AC:FF:28:1A:66:34:E1:12:66:81:FF
            X509v3 Authority Key Identifier:
                keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:52:18:02:69:dd:b6:2d:87:cc:37:e2:47:ba:e3:ac:41:
         1c:78:cd:0b:d7:36:d8:f2:8d:5e:a1:d7:30:73:72:8c:10:91:
         5c:c7:52:a6:14:34:5f:7e:42:ee:d2:29:4d:cb:14:29:18:f0:
         98:a2:c6:43:c4:86:b2:ee:df:45:7e:a3:98:f1:6e:3e:56:ad:
         2b:9d:04:b3:ec:e0:f7:7c:5f:ea:8d:ef:f5:69:68:71:39:83:
         1b:d3:b6:30:c5:a4:13:f9:92:f4:96:e7:7e:54:75:35:36:96:
         92:22:73:22:36:91:a2:47:36:9d:9d:0e:fc:6b:fe:e8:37:f5:
         01:3f:c2:ce:63:95:42:3d:03:1c:b9:e9:95:61:c4:27:c4:3f:
         65:3f:a3:03:0c:29:6a:25:f4:7e:d6:35:d1:65:c4:28:01:cc:
         6b:88:5d:83:ff:82:68:e8:7d:30:43:b3:ec:43:8d:dd:72:03:
         2c:f6:bf:3d:77:32:eb:27:c6:29:44:9c:61:a0:a9:87:e1:1e:
         44:cb:03:c9:03:1a:cb:ea:35:30:fc:0a:a9:80:35:cb:34:f9:
         79:97:59:6b:ea:a8:7f:b0:ec:03:84:1d:26:31:72:d2:64:c2:
         13:37:b8:2a:94:16:66:06:ed:6f:88:a2:0e:60:8d:4d:fe:49:
         e1:31:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----