This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/34352e3233312e3132312e302f32342d3234203d3e20323637323131.roa
File:                     34352e3233312e3132312e302f32342d3234203d3e20323637323131.roa (raw, json)
Hash identifier:          iFjWGW2wsuTHYcVZKi4BmaWBAxygP+CD2RJuxvyFXXA=
Subject key identifier:   8E:0C:08:1F:07:71:56:5A:0C:ED:4B:D3:D9:45:AE:16:30:2F:C0:B1
Certificate issuer:       /CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
Certificate serial:       6930542DC21E9A584E5002FB2F0071C6AC956A10
Authority key identifier: 92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/34352e3233312e3132312e302f32342d3234203d3e20323637323131.roa
Signing time:             Sat 26 Apr 2025 17:51:55 +0000
ROA not before:           Sat 26 Apr 2025 17:46:55 +0000
ROA not after:            Sat 25 Apr 2026 17:51:55 +0000
asID:                     267211
IP address blocks:        45.231.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:30:54:2d:c2:1e:9a:58:4e:50:02:fb:2f:00:71:c6:ac:95:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
        Validity
            Not Before: Apr 26 17:46:55 2025 GMT
            Not After : Apr 25 17:51:55 2026 GMT
        Subject: CN=8E0C081F0771565A0CED4BD3D945AE16302FC0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:17:b6:67:e5:6c:c3:1c:1b:e6:f8:7b:ce:
                    fb:30:06:7e:d7:1c:5d:03:65:74:6e:3d:4c:f6:4f:
                    d2:ea:0d:1e:91:97:b5:a8:c2:2a:1a:d5:cb:36:31:
                    1b:1d:c6:0b:75:b0:ed:f5:5e:36:85:e9:f2:dc:a4:
                    73:cf:ea:e0:78:f5:21:7b:bc:c2:11:ce:32:bd:61:
                    db:4f:9f:7a:18:e2:7b:cb:91:e5:fb:58:56:7f:42:
                    30:35:da:65:53:6d:ea:57:61:99:29:76:e7:b4:10:
                    9f:eb:a3:1c:3d:0e:e0:61:bc:d1:04:c6:ab:4a:da:
                    c6:7e:86:78:ae:4b:ca:e0:a8:d1:fa:dd:4f:d1:1d:
                    78:21:77:48:e4:dd:90:36:34:46:10:e8:ae:54:9f:
                    05:27:41:ac:06:5d:33:b1:f7:50:ec:32:1b:7f:95:
                    5c:8a:72:bb:62:4d:24:ab:c1:51:c7:12:f3:df:75:
                    43:94:97:dc:bf:e1:07:8e:d9:3c:ed:22:81:79:b9:
                    bf:db:1e:46:36:b6:7e:7b:e8:a6:c8:f7:74:b8:61:
                    1a:9b:73:98:21:82:85:8d:9f:95:1b:eb:d0:8a:0e:
                    58:39:5c:a2:78:4f:18:b1:cc:6f:b6:b4:f4:73:95:
                    15:fd:2a:27:e6:39:a0:1c:64:c5:4c:c5:12:11:29:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:08:1F:07:71:56:5A:0C:ED:4B:D3:D9:45:AE:16:30:2F:C0:B1
            X509v3 Authority Key Identifier:
                keyid:92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/34352e3233312e3132312e302f32342d3234203d3e20323637323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:7e:b0:6d:01:cb:31:91:3d:39:da:25:1a:51:7a:a9:40:
         97:90:c8:ea:fb:d2:03:22:49:e8:33:ea:95:3d:dd:b7:fc:e3:
         5d:73:54:da:dc:f8:92:3a:4a:f1:6e:37:ad:1b:f9:b7:fe:2d:
         47:2d:9e:7d:b7:11:55:62:c1:6c:32:3d:33:3e:3a:04:ad:67:
         08:db:0a:5f:05:33:70:04:84:43:c7:ec:7c:c9:17:41:6b:22:
         74:4e:bc:8d:50:9b:9a:3e:c0:d3:71:7f:3a:11:33:53:51:1e:
         0e:d5:0e:b7:a6:92:c8:ec:f9:5a:86:72:32:e0:f0:d3:cd:14:
         1c:f0:09:7e:9c:46:3d:3c:28:fd:43:2e:16:3c:62:f1:d6:62:
         bc:cf:ac:9a:ab:70:9b:e5:6b:4d:23:dd:f4:24:24:e0:d2:3a:
         e2:85:9b:2a:21:dd:45:e4:be:5e:e2:d9:34:bf:ff:61:ec:3d:
         ef:51:65:11:7f:1b:c5:89:82:c0:1b:e1:20:ec:9e:63:ff:c9:
         7d:8e:00:db:9f:7c:e4:4f:f6:4b:7e:c9:d4:4b:7b:cd:a7:da:
         f1:5f:c7:d8:04:4a:29:e2:8d:82:32:cf:7d:38:ef:b2:ed:5e:
         9c:0b:4f:82:fe:53:bf:2b:2f:09:11:9c:12:4e:54:9e:ad:15:
         ac:95:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----