This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa
File:                     34352e3137342e32382e302f32322d3234203d3e20323638383336.roa (raw, json)
Hash identifier:          ZoiIYAJ2+WzL5ff+3Z4CBbCvonSFzPpercgneLjIpYM=
Subject key identifier:   74:AB:D3:B8:7B:5F:3B:56:01:C5:E5:2F:1C:EF:1B:AD:A1:C5:9E:B8
Certificate issuer:       /CN=60F3BCFB765685597657D6F6D44B454867570BEC
Certificate serial:       3EDA79E83DE9C303DD8DC20208DEA7868E948A91
Authority key identifier: 60:F3:BC:FB:76:56:85:59:76:57:D6:F6:D4:4B:45:48:67:57:0B:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F3BCFB765685597657D6F6D44B454867570BEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa
Signing time:             Thu 17 Jul 2025 21:03:10 +0000
ROA not before:           Thu 17 Jul 2025 20:58:10 +0000
ROA not after:            Thu 16 Jul 2026 21:03:10 +0000
asID:                     268836
IP address blocks:        45.174.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:da:79:e8:3d:e9:c3:03:dd:8d:c2:02:08:de:a7:86:8e:94:8a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60F3BCFB765685597657D6F6D44B454867570BEC
        Validity
            Not Before: Jul 17 20:58:10 2025 GMT
            Not After : Jul 16 21:03:10 2026 GMT
        Subject: CN=74ABD3B87B5F3B5601C5E52F1CEF1BADA1C59EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:74:bc:f0:dc:ae:ed:07:40:f9:65:e5:c8:ab:
                    39:7f:9e:a1:ea:01:e4:22:32:34:6c:6a:76:1e:80:
                    4c:4e:e3:52:e9:0c:cb:ef:71:c2:85:62:3b:43:d2:
                    24:c5:d6:63:85:2d:3c:7f:69:05:58:8d:64:27:b0:
                    63:64:26:77:36:e8:2e:6c:e5:b8:75:ee:d2:87:27:
                    a2:3c:c1:ac:12:20:ac:c5:c2:8e:e5:40:81:21:34:
                    82:a5:6b:17:0d:c4:81:fc:09:f2:d5:60:52:6b:f3:
                    3a:b6:86:78:fa:44:2c:62:53:47:a0:45:1c:71:d1:
                    6e:c0:2b:1d:d2:69:cd:ee:98:e3:9e:c2:3f:9c:3d:
                    0e:e4:76:a2:6a:f2:91:92:6e:41:be:c9:66:a6:b7:
                    9d:15:0d:a4:04:a7:99:1f:7d:30:d8:e3:08:50:73:
                    c8:96:9c:af:18:a0:60:18:26:a3:5d:f1:83:fd:26:
                    b2:3d:10:54:95:4c:63:1d:e4:7f:e2:dc:e1:68:54:
                    3f:c0:02:fc:a3:b8:00:45:96:b4:e5:f5:2f:30:07:
                    15:0a:28:a3:c6:25:fd:e4:b1:24:7e:89:74:ff:2f:
                    69:95:45:92:c1:de:8c:f6:c5:82:16:7e:93:9d:6d:
                    0f:bd:58:c9:4e:8e:6c:6c:7e:16:b1:4f:c2:eb:13:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:D3:B8:7B:5F:3B:56:01:C5:E5:2F:1C:EF:1B:AD:A1:C5:9E:B8
            X509v3 Authority Key Identifier:
                keyid:60:F3:BC:FB:76:56:85:59:76:57:D6:F6:D4:4B:45:48:67:57:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60F3BCFB765685597657D6F6D44B454867570BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F3BCFB765685597657D6F6D44B454867570BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:68:74:4e:27:e1:a3:52:55:e4:d3:fb:19:0f:0a:a1:fa:
         8e:3c:86:17:ec:b8:48:02:de:68:f8:a2:44:89:7e:7a:04:a8:
         dd:92:3f:66:56:ea:92:96:60:70:c9:cb:3f:1f:2f:4e:0b:10:
         fd:8e:af:2d:f9:bb:48:72:b4:61:04:b7:8d:f8:f8:3a:a2:58:
         cb:1a:d1:c5:e5:77:0f:44:88:46:85:6b:ee:50:24:bd:40:73:
         b2:f7:1a:63:23:88:ac:43:3f:1f:99:3a:06:f4:a4:9e:ec:0b:
         84:53:4e:17:9d:c9:e7:0e:f4:e9:61:d7:99:86:b8:e9:23:a4:
         73:aa:e9:17:46:c1:2b:9f:10:d9:bb:1f:2d:7d:7b:7d:2f:94:
         c5:ff:2f:b5:cb:a0:6f:85:a5:6c:b4:45:3e:1d:57:b0:95:32:
         ab:af:1a:57:2e:b5:d6:8f:78:5f:33:99:38:7b:cc:66:d3:71:
         82:39:3f:6c:42:f7:d7:c0:b9:15:da:7a:02:b4:80:ce:00:83:
         03:88:79:d4:d9:ec:41:70:d6:c5:fd:b3:13:ce:f9:ff:29:d2:
         fc:7f:b7:3f:38:af:09:5c:65:3a:aa:62:a6:77:ee:51:63:5d:
         f4:40:6c:b3:f9:3f:c0:ca:43:d8:1c:77:46:c3:6c:50:42:4d:
         d6:66:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----