This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/3133312e3130382e3234382e302f32322d3234203d3e20323634333536.roa
File:                     3133312e3130382e3234382e302f32322d3234203d3e20323634333536.roa (raw, json)
Hash identifier:          hO2uTQRG3XaP9mgPZitAyPg86+h7ZDdetCzj7qUmWW4=
Subject key identifier:   E2:1D:5A:C2:DC:93:81:CE:E5:8E:3A:0D:1B:97:DA:6E:43:04:4E:4A
Certificate issuer:       /CN=5577374B70385DA5B5D77B657F561AFFAE6F8FCA
Certificate serial:       5C95D4F76176EC7F681AC0CA486112A419695F30
Authority key identifier: 55:77:37:4B:70:38:5D:A5:B5:D7:7B:65:7F:56:1A:FF:AE:6F:8F:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/3133312e3130382e3234382e302f32322d3234203d3e20323634333536.roa
Signing time:             Tue 11 Mar 2025 20:12:01 +0000
ROA not before:           Tue 11 Mar 2025 20:07:01 +0000
ROA not after:            Tue 10 Mar 2026 20:12:01 +0000
asID:                     264356
IP address blocks:        131.108.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:95:d4:f7:61:76:ec:7f:68:1a:c0:ca:48:61:12:a4:19:69:5f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5577374B70385DA5B5D77B657F561AFFAE6F8FCA
        Validity
            Not Before: Mar 11 20:07:01 2025 GMT
            Not After : Mar 10 20:12:01 2026 GMT
        Subject: CN=E21D5AC2DC9381CEE58E3A0D1B97DA6E43044E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:69:ee:d2:d6:42:b1:e9:62:8b:f0:a2:fc:29:
                    85:f6:cb:ea:31:8f:50:8c:36:c4:8b:84:b5:39:cd:
                    0d:ca:29:88:c1:e8:a5:30:86:59:3f:84:10:0f:82:
                    c8:c0:55:fa:a1:16:9e:3e:53:02:50:e7:4a:cd:76:
                    a5:a5:4a:64:36:75:c3:2d:1c:6d:c7:ed:72:3a:bf:
                    28:7d:b5:5d:45:69:23:dd:42:a5:71:ad:1a:03:1d:
                    ce:65:52:b5:11:98:b5:69:02:c5:56:ff:e1:b9:f9:
                    c8:fc:8b:63:56:e4:dd:56:7e:f5:a2:06:80:71:8d:
                    79:b2:4f:1c:d0:53:eb:49:41:bc:d4:dd:75:9b:ac:
                    a4:1d:8e:7d:4a:aa:53:35:85:85:ad:3e:16:6a:6b:
                    44:23:bd:c6:05:5d:1c:d9:af:72:31:67:eb:8b:1d:
                    cb:71:33:fd:e4:e8:2b:c5:db:ea:e3:2d:41:f3:0a:
                    4f:c2:e6:7c:f5:f7:01:de:61:77:0a:d2:37:ae:27:
                    41:e8:39:e5:8e:4b:3b:c5:b2:69:60:d9:d6:a8:cc:
                    a9:40:16:d4:cc:29:78:9f:14:cd:b7:9f:c4:22:55:
                    46:1d:32:d7:b2:1e:b4:75:3c:80:5d:f9:2d:db:e8:
                    0a:74:66:19:57:95:f1:0f:08:38:e6:93:3b:45:db:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1D:5A:C2:DC:93:81:CE:E5:8E:3A:0D:1B:97:DA:6E:43:04:4E:4A
            X509v3 Authority Key Identifier:
                keyid:55:77:37:4B:70:38:5D:A5:B5:D7:7B:65:7F:56:1A:FF:AE:6F:8F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/3133312e3130382e3234382e302f32322d3234203d3e20323634333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:05:8e:31:47:46:cb:a8:50:0d:a6:67:e0:45:3f:35:c2:
         a4:7a:ed:86:68:18:a9:aa:f5:c7:f0:d9:a3:31:73:c6:f7:32:
         71:1b:df:1e:cf:40:17:db:7c:09:59:a2:78:11:4f:70:52:5e:
         ff:2b:b1:7e:99:d4:b2:32:4e:ff:c8:af:12:be:92:ae:62:72:
         41:b7:50:42:a2:82:83:ea:27:4f:b6:59:77:17:8b:01:0c:40:
         56:e7:c3:9e:53:36:0c:bd:78:9f:f5:b1:2b:b4:ab:18:dc:74:
         4a:99:b4:b2:50:63:1f:9a:1c:53:61:88:7a:0a:4c:0c:8b:39:
         28:a5:ac:51:17:99:78:3f:42:3d:d7:8c:8c:fd:2a:3a:34:d8:
         2c:be:dc:97:30:ab:ed:d4:4e:15:57:90:6c:b5:81:63:7c:e4:
         2e:c3:bc:66:41:dd:aa:73:06:05:28:c3:e2:6e:a5:41:4a:35:
         51:fe:b2:a7:87:67:22:06:40:4c:c9:ec:31:73:81:c8:0b:c1:
         85:13:04:c3:4a:3a:bc:db:d9:f1:01:5c:e0:8e:89:c8:6c:97:
         da:1b:15:d0:a3:3a:4f:62:ec:24:70:e0:6b:09:da:a2:3d:7c:
         d1:15:ba:58:6d:b3:2e:7f:05:4b:94:95:ab:a8:8d:71:e2:98:
         95:ee:ff:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXJXU92F27H9oGsDKSGESpBlpXzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3NzM3NEI3MDM4NURBNUI1RDc3QjY1N0Y1NjFBRkZB
RTZGOEZDQTAeFw0yNTAzMTEyMDA3MDFaFw0yNjAzMTAyMDEyMDFaMDMxMTAvBgNV
BAMTKEUyMUQ1QUMyREM5MzgxQ0VFNThFM0EwRDFCOTdEQTZFNDMwNDRFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpae7S1kKx6WKL8KL8KYX2y+ox
j1CMNsSLhLU5zQ3KKYjB6KUwhlk/hBAPgsjAVfqhFp4+UwJQ50rNdqWlSmQ2dcMt
HG3H7XI6vyh9tV1FaSPdQqVxrRoDHc5lUrURmLVpAsVW/+G5+cj8i2NW5N1WfvWi
BoBxjXmyTxzQU+tJQbzU3XWbrKQdjn1KqlM1hYWtPhZqa0QjvcYFXRzZr3IxZ+uL
HctxM/3k6CvF2+rjLUHzCk/C5nz19wHeYXcK0jeuJ0HoOeWOSzvFsmlg2daozKlA
FtTMKXifFM23n8QiVUYdMteyHrR1PIBd+S3b6Ap0ZhlXlfEPCDjmkztF2zOVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4h1awtyTgc7ljjoNG5fabkMETkowHwYDVR0j
BBgwFoAUVXc3S3A4XaW113tlf1Ya/65vj8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDc4Tk1HR1RzeUFleUY4R0tqVFhzcE03NGY5TG1BR29ISENNdkhxWjdC
TlUvMC81NTc3Mzc0QjcwMzg1REE1QjVENzdCNjU3RjU2MUFGRkFFNkY4RkNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1NzczNzRCNzAzODVEQTVC
NUQ3N0I2NTdGNTYxQUZGQUU2RjhGQ0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3OE5NR0dUc3lBZXlGOEdLalRYc3BNNzRmOUxtQUdvSEhDTXZIcVo3Qk5VLzAv
MzEzMzMxMmUzMTMwMzgyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNs+DANBgkqhkiG9w0BAQsFAAOCAQEAPOEF
jjFHRsuoUA2mZ+BFPzXCpHrthmgYqar1x/DZozFzxvcycRvfHs9AF9t8CVmieBFP
cFJe/yuxfpnUsjJO/8ivEr6SrmJyQbdQQqKCg+onT7ZZdxeLAQxAVufDnlM2DL14
n/WxK7SrGNx0Spm0slBjH5ocU2GIegpMDIs5KKWsUReZeD9CPdeMjP0qOjTYLL7c
lzCr7dROFVeQbLWBY3zkLsO8ZkHdqnMGBSjD4m6lQUo1Uf6yp4dnIgZATMnsMXOB
yAvBhRMEw0o6vNvZ8QFc4I6JyGyX2hsV0KM6T2LsJHDgawnaoj180RW6WG2zLn8F
S5SVq6iNceKYle7/YA==
-----END CERTIFICATE-----