This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          lClBtfYM92uXyXK/GybPlj/qsX2ohVNNV0OjpzOgcKs=
Subject key identifier:   2A:F5:36:22:3A:B2:1D:6E:6E:06:35:9B:EB:1F:53:47:A3:79:2F:BD
Certificate issuer:       /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
Certificate serial:       72A706F32985517E3BF687C7A506F3A380E69B14
Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
Signing time:             Wed 04 Jun 2025 14:55:30 +0000
ROA not before:           Wed 04 Jun 2025 14:50:30 +0000
ROA not after:            Wed 03 Jun 2026 14:55:30 +0000
asID:                     268063
IP address blocks:        45.168.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a7:06:f3:29:85:51:7e:3b:f6:87:c7:a5:06:f3:a3:80:e6:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
        Validity
            Not Before: Jun  4 14:50:30 2025 GMT
            Not After : Jun  3 14:55:30 2026 GMT
        Subject: CN=2AF536223AB21D6E6E06359BEB1F5347A3792FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:5f:f4:15:a5:2f:0b:ed:44:ca:4b:5c:88:
                    3e:54:89:d9:a9:b8:ca:12:f1:cf:be:1d:83:15:69:
                    65:4f:6a:3c:7b:e1:85:13:54:64:7a:a0:ab:28:7e:
                    8e:7d:cf:76:28:e0:73:a9:8f:fd:16:58:5b:85:5e:
                    48:56:f8:42:39:8e:e9:2b:82:30:b8:83:5d:32:4c:
                    4f:6a:c3:26:f3:c6:36:f1:d9:6d:87:48:17:d1:e6:
                    cb:54:30:f0:db:81:35:25:a8:5d:f7:79:d8:f4:5a:
                    08:b7:85:74:4a:f7:9d:84:d5:21:94:67:67:2b:30:
                    49:de:77:41:1b:bf:1b:a9:1b:cf:7d:e1:33:43:60:
                    89:33:63:f3:e5:f5:75:94:e0:a8:5f:21:5c:ec:c2:
                    01:50:c6:38:3c:18:66:fd:f7:fa:24:f1:80:3b:3b:
                    2d:27:08:c8:a8:c6:cf:e0:01:c7:5e:cd:01:a6:67:
                    65:6f:ee:05:ae:b6:db:51:93:0b:a2:df:90:93:23:
                    91:6d:cc:ef:29:6a:d6:02:fe:5b:e2:35:c1:9a:c9:
                    6f:b7:8d:30:67:23:92:c6:10:c7:7d:06:72:3f:4e:
                    cf:11:16:00:57:50:08:87:4c:84:78:25:74:28:a5:
                    d5:83:45:f8:3f:a8:1c:31:81:19:b8:d6:a1:56:b0:
                    40:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F5:36:22:3A:B2:1D:6E:6E:06:35:9B:EB:1F:53:47:A3:79:2F:BD
            X509v3 Authority Key Identifier:
                keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:94:19:5b:2f:32:83:a3:39:5a:8f:f6:a9:09:87:98:c6:72:
         e8:39:52:6d:48:09:90:ea:98:82:57:99:3f:c1:49:c0:90:63:
         c8:39:b0:12:b9:4a:08:01:7f:9a:f2:94:c9:e7:83:c4:0d:13:
         eb:58:1c:ab:6e:6e:87:a6:16:ba:30:10:29:11:be:d0:c9:34:
         2b:a9:1b:03:68:fc:9e:3a:68:0b:35:4a:a8:5b:91:2e:74:51:
         f7:bc:ec:4d:30:8d:aa:b1:58:ab:e7:50:fa:8b:6f:2a:67:02:
         bc:ab:5a:37:f3:ed:f8:a9:d7:ff:e0:4f:b0:31:9d:ea:05:c4:
         12:6d:eb:fd:7f:ec:f9:c7:47:a7:81:0d:68:60:7a:c0:2e:0f:
         01:39:e6:62:f6:d7:99:d9:50:b7:b9:ce:54:f3:91:91:c4:af:
         23:96:e4:b1:65:35:73:53:c1:9a:82:76:90:94:e0:7f:13:75:
         0f:f8:11:5d:de:27:04:e1:50:8d:ec:9e:1a:88:ee:b6:5b:dd:
         7d:94:ce:94:d6:83:eb:8f:83:49:05:47:b9:39:66:ce:df:7a:
         51:35:51:f9:0f:ff:1b:9d:bf:58:8c:63:ee:a5:b2:b1:90:2d:
         49:b5:be:93:5b:2d:42:73:04:6e:63:18:f9:a3:62:e8:d3:f6:
         f6:fd:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----