This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32322d3332203d3e20323733343734.roa
File:                     3133312e37322e35322e302f32322d3332203d3e20323733343734.roa (raw, json)
Hash identifier:          c/nA5mMST5+ilQ3L8fHTxUFisptM+SbLJhRCpRPcbHw=
Subject key identifier:   AC:3E:5A:6F:53:2B:16:45:2E:7F:1C:00:67:3E:C3:5D:2C:6A:9B:12
Certificate issuer:       /CN=4BF41E282365D362432C934CFF11E10D841AA067
Certificate serial:       6D09E48368C2998782AB21D7085EABBCA22E4D52
Authority key identifier: 4B:F4:1E:28:23:65:D3:62:43:2C:93:4C:FF:11:E1:0D:84:1A:A0:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF41E282365D362432C934CFF11E10D841AA067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32322d3332203d3e20323733343734.roa
Signing time:             Fri 21 Mar 2025 20:48:42 +0000
ROA not before:           Fri 21 Mar 2025 20:43:42 +0000
ROA not after:            Fri 20 Mar 2026 20:48:42 +0000
asID:                     273474
IP address blocks:        131.72.52.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:09:e4:83:68:c2:99:87:82:ab:21:d7:08:5e:ab:bc:a2:2e:4d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF41E282365D362432C934CFF11E10D841AA067
        Validity
            Not Before: Mar 21 20:43:42 2025 GMT
            Not After : Mar 20 20:48:42 2026 GMT
        Subject: CN=AC3E5A6F532B16452E7F1C00673EC35D2C6A9B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:e1:1c:2b:77:0c:dc:19:87:05:90:49:b2:
                    d7:10:84:cc:d4:8e:ab:de:6f:9d:ef:17:44:38:21:
                    e2:e1:17:cd:44:e6:52:d2:83:96:5a:f7:74:bd:91:
                    43:eb:ef:d6:1f:65:b6:23:dd:52:9f:76:b9:22:1f:
                    0c:40:e1:e5:1a:46:3f:8c:16:43:1b:2c:64:2c:73:
                    ae:05:85:b5:8d:9a:91:86:a3:ce:94:9c:9a:44:bb:
                    b0:ab:c0:e7:49:94:58:4b:ff:34:8f:c6:4f:18:42:
                    41:93:4c:3f:6e:27:22:2c:73:1f:74:4b:3a:64:f8:
                    64:2a:5d:e4:86:f3:eb:d0:8f:a0:e7:86:04:c3:9c:
                    3c:a3:e1:1c:59:8f:9a:e8:f1:63:b3:9a:13:55:d6:
                    54:75:be:6e:61:cb:65:05:85:f1:da:79:6b:60:35:
                    93:49:9f:a3:25:df:fb:b1:0a:28:2b:75:e9:73:4c:
                    f6:b1:8b:f5:52:a3:3d:bf:28:52:b6:48:57:95:a5:
                    69:21:45:4a:2c:53:59:13:7c:44:3c:c1:40:3c:4d:
                    4a:85:9f:00:7e:fc:fd:53:98:e6:c9:60:10:ee:c7:
                    54:c1:45:cd:88:4f:39:72:63:09:7e:a0:f9:54:67:
                    4a:70:e3:d0:12:9c:6d:a2:16:9b:43:f2:a1:b7:0a:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3E:5A:6F:53:2B:16:45:2E:7F:1C:00:67:3E:C3:5D:2C:6A:9B:12
            X509v3 Authority Key Identifier:
                keyid:4B:F4:1E:28:23:65:D3:62:43:2C:93:4C:FF:11:E1:0D:84:1A:A0:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4BF41E282365D362432C934CFF11E10D841AA067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF41E282365D362432C934CFF11E10D841AA067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32322d3332203d3e20323733343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:fc:b2:1b:c4:40:ca:2e:8f:ec:29:df:1b:fa:cd:43:1d:cb:
         5a:54:86:c4:ea:b1:43:b0:d5:1c:6b:70:0a:40:d9:28:3e:b2:
         5f:32:b4:2b:94:d6:5d:a9:ae:e7:57:77:38:d8:f9:c5:0b:06:
         06:8a:6e:fd:85:07:6b:a9:75:e4:e9:25:12:6d:b6:d3:c5:4b:
         9d:cf:57:52:2f:c5:f9:56:2f:17:ca:d9:76:7d:7c:40:4e:ec:
         47:ee:04:f4:a6:f9:4e:90:32:13:c2:80:46:5b:d1:35:81:0b:
         86:29:7b:b3:eb:0b:f9:ce:9a:fc:7b:75:88:6e:83:22:c8:00:
         cf:9a:8d:ca:1c:16:31:6e:77:d0:c0:1d:0b:a5:87:ea:25:72:
         66:0b:29:59:ec:b3:b5:68:e3:9f:af:38:b2:2b:11:74:6a:88:
         ae:0c:34:f6:0e:d1:f5:e2:04:58:1d:29:1a:45:69:b5:43:53:
         2c:42:9a:44:0d:74:f6:83:b8:55:cc:73:dc:43:d9:95:a2:9a:
         ae:89:e1:e2:81:e5:da:68:e0:6b:c1:a8:43:06:98:d5:dc:b1:
         41:46:b7:79:a3:18:d9:5b:e6:af:ea:53:d4:70:03:1d:6e:3f:
         e0:d6:6d:6f:8a:80:39:09:c5:cd:a1:80:14:14:9f:51:0a:e7:
         d7:b3:d1:56
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbQnkg2jCmYeCqyHXCF6rvKIuTVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGNDFFMjgyMzY1RDM2MjQzMkM5MzRDRkYxMUUxMEQ4
NDFBQTA2NzAeFw0yNTAzMjEyMDQzNDJaFw0yNjAzMjAyMDQ4NDJaMDMxMTAvBgNV
BAMTKEFDM0U1QTZGNTMyQjE2NDUyRTdGMUMwMDY3M0VDMzVEMkM2QTlCMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPOEcK3cM3BmHBZBJstcQhMzU
jqveb53vF0Q4IeLhF81E5lLSg5Za93S9kUPr79YfZbYj3VKfdrkiHwxA4eUaRj+M
FkMbLGQsc64FhbWNmpGGo86UnJpEu7CrwOdJlFhL/zSPxk8YQkGTTD9uJyIscx90
Szpk+GQqXeSG8+vQj6DnhgTDnDyj4RxZj5ro8WOzmhNV1lR1vm5hy2UFhfHaeWtg
NZNJn6Ml3/uxCigrdelzTPaxi/VSoz2/KFK2SFeVpWkhRUosU1kTfEQ8wUA8TUqF
nwB+/P1TmObJYBDux1TBRc2ITzlyYwl+oPlUZ0pw49ASnG2iFptD8qG3CvdJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrD5ab1MrFkUufxwAZz7DXSxqmxIwHwYDVR0j
BBgwFoAUS/QeKCNl02JDLJNM/xHhDYQaoGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtiWVlMZ3FXR2oxOUZwMXVnNWZBS2pCYXk5OWRHVDZxTnlRMlV0M3h1
akMvMC80QkY0MUUyODIzNjVEMzYyNDMyQzkzNENGRjExRTEwRDg0MUFBMDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRjQxRTI4MjM2NUQzNjI0
MzJDOTM0Q0ZGMTFFMTBEODQxQUEwNjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrYllZTGdxV0dqMTlGcDF1ZzVmQUtqQmF5OTlkR1Q2cU55UTJVdDN4dWpDLzAv
MzEzMzMxMmUzNzMyMmUzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzQzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg0g0MA0GCSqGSIb3DQEBCwUAA4IBAQAF/LIbxEDK
Lo/sKd8b+s1DHctaVIbE6rFDsNUca3AKQNkoPrJfMrQrlNZdqa7nV3c42PnFCwYG
im79hQdrqXXk6SUSbbbTxUudz1dSL8X5Vi8Xytl2fXxATuxH7gT0pvlOkDITwoBG
W9E1gQuGKXuz6wv5zpr8e3WIboMiyADPmo3KHBYxbnfQwB0LpYfqJXJmCylZ7LO1
aOOfrziyKxF0aoiuDDT2DtH14gRYHSkaRWm1Q1MsQppEDXT2g7hVzHPcQ9mVopqu
ieHigeXaaOBrwahDBpjV3LFBRrd5oxjZW+av6lPUcAMdbj/g1m1vioA5CcXNoYAU
FJ9RCufXs9FW
-----END CERTIFICATE-----