This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32332d3233203d3e20323632393838.roa
File:                     3136382e39302e38302e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          7200wVz3g5rIId2iVTjAaC+UhIkpueP4+uTkg70/JpA=
Subject key identifier:   AA:7B:96:4A:D5:C6:C1:0A:84:8C:6C:B7:F1:4F:59:2F:52:0C:8F:7C
Certificate issuer:       /CN=BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8
Certificate serial:       2C08D47FA42DC02EF950467191E64FE712529D8C
Authority key identifier: BA:1C:1C:5A:5B:AB:63:95:B0:65:91:60:39:4C:AF:12:B4:D8:E9:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32332d3233203d3e20323632393838.roa
Signing time:             Wed 16 Jul 2025 11:22:57 +0000
ROA not before:           Wed 16 Jul 2025 11:17:57 +0000
ROA not after:            Wed 15 Jul 2026 11:22:57 +0000
asID:                     262988
IP address blocks:        168.90.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:08:d4:7f:a4:2d:c0:2e:f9:50:46:71:91:e6:4f:e7:12:52:9d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8
        Validity
            Not Before: Jul 16 11:17:57 2025 GMT
            Not After : Jul 15 11:22:57 2026 GMT
        Subject: CN=AA7B964AD5C6C10A848C6CB7F14F592F520C8F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:cb:ee:df:2e:6c:f3:18:f3:53:cb:e7:5c:
                    90:8d:87:0c:bc:8a:be:b6:53:f6:b7:1a:79:1f:64:
                    23:aa:85:8b:f0:06:ec:30:35:f7:20:df:69:a6:dc:
                    56:66:2f:58:8f:9d:4f:b2:8c:0f:f1:f0:d0:69:50:
                    54:36:63:7f:48:6f:0b:c8:c4:9d:a5:c0:94:dc:38:
                    f8:cc:31:6d:ce:17:50:30:89:7b:cf:ad:2b:e9:dd:
                    b7:59:74:cb:b7:ee:27:1e:b9:f0:b1:a9:11:f1:61:
                    86:b0:2e:6b:df:03:0c:b9:1b:89:da:a4:72:d4:83:
                    3d:c7:70:56:c2:9d:09:22:17:bf:af:f4:66:24:5a:
                    76:92:15:98:ab:3a:7b:31:a5:bf:32:47:52:38:51:
                    e5:e7:91:a9:96:6c:12:ce:e8:54:4b:9e:d0:dc:7b:
                    ea:04:98:3c:c3:3a:3b:ff:b4:ba:fe:98:f9:f5:83:
                    f5:02:b9:92:c8:91:67:a7:b7:ab:81:88:c3:4f:16:
                    db:cd:9e:51:fa:01:c2:12:13:4d:9c:09:23:94:d4:
                    5c:91:ab:e2:ef:05:29:0d:a2:a9:98:9a:a2:e8:01:
                    f8:96:6c:66:2f:ae:f7:c9:d6:e0:cb:7d:7f:da:1c:
                    14:fd:d7:4d:8b:af:90:45:7a:71:30:44:c6:fb:43:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:96:4A:D5:C6:C1:0A:84:8C:6C:B7:F1:4F:59:2F:52:0C:8F:7C
            X509v3 Authority Key Identifier:
                keyid:BA:1C:1C:5A:5B:AB:63:95:B0:65:91:60:39:4C:AF:12:B4:D8:E9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:e3:ad:0e:6e:b8:a4:c8:ca:1e:66:67:42:df:c3:16:fd:1f:
         7a:c9:5b:96:7f:30:3d:5c:c8:69:95:f3:3e:cb:df:c9:37:48:
         70:ac:79:41:72:07:17:72:16:36:41:27:c1:f5:9d:c8:f2:bc:
         8b:e3:01:23:60:82:10:66:88:96:72:a0:86:76:53:27:2b:2f:
         70:af:7a:3d:bf:ca:df:f1:21:f8:d2:99:6f:b7:fe:44:b3:44:
         28:1e:48:d8:c1:e5:56:18:07:0f:ae:2c:a7:4a:82:0c:bf:8f:
         ff:04:bd:64:70:ae:52:f0:a0:be:6b:ed:4b:5b:9c:65:58:13:
         4c:23:54:5b:18:f0:ec:3a:d0:be:ea:2e:fb:56:83:c6:09:5d:
         cc:c5:07:33:73:f5:40:af:2e:aa:b0:12:fe:3b:5f:a4:c3:6d:
         30:2d:54:2f:75:30:87:c6:a2:bd:9e:7b:fa:b2:d3:99:54:94:
         d9:e5:53:93:5a:21:71:c6:f5:5c:b8:80:13:62:49:db:05:49:
         7c:03:e1:73:e9:9f:68:cf:5c:51:b3:1d:27:2e:06:61:d3:49:
         e2:bf:f1:c0:78:5d:b2:7b:62:24:08:e7:cd:a0:5b:bd:c5:94:
         5b:57:3e:cf:7d:26:23:8c:22:7b:f6:3b:60:97:74:29:07:0e:
         62:b0:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----