This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/34352e3233312e3132332e302f32342d3234203d3e20323637323131.roa
File:                     34352e3233312e3132332e302f32342d3234203d3e20323637323131.roa (raw, json)
Hash identifier:          y4PAY1WdI9s0IpVA+5L9Wk1gUhm4EjMzYQVHzhs28Mg=
Subject key identifier:   71:6D:AD:95:41:6A:C1:5D:41:77:B3:18:11:90:55:E4:CE:79:9C:8B
Certificate issuer:       /CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
Certificate serial:       3582A8959E2D0187B95CD8965391527C6F6CAFCE
Authority key identifier: 92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/34352e3233312e3132332e302f32342d3234203d3e20323637323131.roa
Signing time:             Sat 26 Apr 2025 17:51:56 +0000
ROA not before:           Sat 26 Apr 2025 17:46:56 +0000
ROA not after:            Sat 25 Apr 2026 17:51:56 +0000
asID:                     267211
IP address blocks:        45.231.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:82:a8:95:9e:2d:01:87:b9:5c:d8:96:53:91:52:7c:6f:6c:af:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
        Validity
            Not Before: Apr 26 17:46:56 2025 GMT
            Not After : Apr 25 17:51:56 2026 GMT
        Subject: CN=716DAD95416AC15D4177B318119055E4CE799C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:26:b9:f3:02:0c:44:21:79:2a:98:85:01:
                    b3:3f:a7:44:c1:bf:55:b7:b2:c8:ae:53:d9:4c:3a:
                    82:94:e5:d8:b4:72:60:48:ff:dd:bc:72:cb:db:35:
                    33:32:13:1a:1a:d7:0a:9b:af:70:e2:38:ca:8e:9a:
                    24:a1:55:48:db:6b:ec:55:5b:63:54:c9:ef:02:3d:
                    d2:05:cc:49:3f:26:60:cf:c9:ba:c6:23:3f:21:53:
                    85:95:dd:cb:e3:b2:de:c7:4b:7c:3c:19:fa:1f:dc:
                    a8:23:6f:c0:75:9d:c4:f7:9d:3d:74:e2:62:96:02:
                    5c:66:b4:3f:45:12:6d:9a:8f:51:48:b1:98:8c:7e:
                    95:e6:aa:ab:c0:24:89:ff:8b:93:68:77:ae:01:94:
                    38:29:58:c4:81:b0:b1:2e:4e:c5:5f:ab:6e:ed:d2:
                    03:26:a1:aa:61:cd:73:c2:df:79:a9:73:22:23:ae:
                    51:24:38:c4:ad:03:e0:dc:d7:30:14:79:c9:4c:91:
                    cf:fe:b6:99:5d:ff:12:1d:be:be:3a:9c:ab:b3:c6:
                    27:36:ca:ea:cd:8a:5d:ab:db:c8:22:b9:53:b5:68:
                    81:a9:0f:3c:fc:12:96:30:a4:52:8d:fc:61:a4:9d:
                    dc:8c:e2:e1:cb:00:73:7a:a0:c6:d1:02:b4:2c:e6:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:AD:95:41:6A:C1:5D:41:77:B3:18:11:90:55:E4:CE:79:9C:8B
            X509v3 Authority Key Identifier:
                keyid:92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/34352e3233312e3132332e302f32342d3234203d3e20323637323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:77:99:cd:99:59:7c:9f:30:dd:29:46:9c:5d:d0:0b:9b:c7:
         5b:b1:39:96:66:89:70:00:c1:90:d1:50:fc:b0:24:8f:e4:4e:
         93:ab:ca:0f:43:ed:81:ed:86:dd:47:76:af:8b:9f:a1:1c:85:
         35:d5:c2:55:5e:0f:a1:9e:66:92:26:98:a0:fe:4b:88:eb:25:
         d4:0f:ff:92:2f:1b:5c:b7:29:23:f2:40:2e:47:26:37:88:e3:
         96:8b:b1:6a:1e:6b:06:7b:49:0d:9c:24:5f:44:c2:4c:a2:4c:
         24:21:51:00:33:a2:8e:54:2c:9c:98:c1:eb:da:95:23:07:d6:
         23:e0:2c:d7:5c:9b:56:39:53:04:d8:ed:55:d0:4b:f3:3b:72:
         1c:45:6b:57:53:03:f8:fd:29:e8:aa:5b:0e:a0:51:23:6f:fd:
         6e:2c:76:7b:75:47:b1:a6:d8:4e:c4:46:0e:a6:05:ba:e6:9f:
         fb:30:f0:19:cc:f2:32:c1:c9:dd:c9:46:71:54:35:59:81:3b:
         8c:69:cd:3d:7f:97:18:78:91:94:39:ee:52:fe:81:59:26:00:
         6b:ac:e2:04:47:2e:04:27:da:72:80:43:1d:64:bd:2b:85:ec:
         9b:42:c6:bf:4d:67:54:dd:de:fa:a4:c7:ef:7f:10:fa:bc:07:
         4d:8d:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----