This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3234382e302f32332d3233203d3e20323637363130.roa
File:                     34352e37302e3234382e302f32332d3233203d3e20323637363130.roa (raw, json)
Hash identifier:          GGIt16FDhpjpibAD1BYSuaOJ/nCTYrRyPqLSBazgt2U=
Subject key identifier:   DD:8E:8E:33:0B:A3:B3:64:25:03:E7:86:F3:3A:D6:31:0A:A4:4E:F0
Certificate issuer:       /CN=202EC960E4D30720082CD719E1E72E6A76C5343A
Certificate serial:       34975EC01A8A8CB07EF847E8762C370D0F10F7FC
Authority key identifier: 20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3234382e302f32332d3233203d3e20323637363130.roa
Signing time:             Thu 18 Sep 2025 16:30:58 +0000
ROA not before:           Thu 18 Sep 2025 16:25:58 +0000
ROA not after:            Thu 17 Sep 2026 16:30:58 +0000
asID:                     267610
IP address blocks:        45.70.248.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:97:5e:c0:1a:8a:8c:b0:7e:f8:47:e8:76:2c:37:0d:0f:10:f7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202EC960E4D30720082CD719E1E72E6A76C5343A
        Validity
            Not Before: Sep 18 16:25:58 2025 GMT
            Not After : Sep 17 16:30:58 2026 GMT
        Subject: CN=DD8E8E330BA3B3642503E786F33AD6310AA44EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ee:11:3f:34:66:cb:98:23:7c:fd:ec:fa:02:
                    d9:fb:f2:72:48:6d:ba:5b:0e:fc:50:1a:f6:98:1c:
                    56:98:3d:7d:a8:d9:7d:a9:b3:dc:09:a3:50:16:40:
                    ae:df:43:42:6f:64:ac:e3:f6:0f:a0:77:aa:24:03:
                    1b:47:7f:32:d9:5a:85:d3:bc:67:1c:ad:b7:4b:78:
                    1c:ad:d8:57:3c:02:dc:90:cf:a9:62:4e:37:79:4c:
                    52:4d:93:0f:d0:86:4c:aa:c2:61:18:7d:15:9a:d4:
                    84:40:3a:eb:9b:a8:9e:ee:43:1b:a3:6f:93:c4:73:
                    18:31:91:e2:d6:48:73:a1:7a:e9:b8:8a:a7:77:29:
                    06:c5:83:3c:d5:24:94:02:93:ee:e2:16:d7:98:5f:
                    1a:40:5a:eb:e2:e3:a4:f5:88:95:19:1b:04:c8:0f:
                    de:ae:40:88:42:e6:9e:38:c4:51:87:cc:43:f3:5c:
                    09:9b:08:84:ff:7a:0c:65:25:e0:9d:9b:8d:f5:15:
                    a2:b5:8c:2d:76:4e:1d:44:4f:2c:34:fa:4a:3d:98:
                    03:c5:cb:45:b1:8d:e1:03:d1:22:e1:d3:81:9f:29:
                    df:74:d4:31:cf:37:44:33:52:41:ba:af:74:74:0a:
                    9a:66:88:c4:51:65:82:c4:ae:a1:9e:31:4d:ad:b9:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:8E:33:0B:A3:B3:64:25:03:E7:86:F3:3A:D6:31:0A:A4:4E:F0
            X509v3 Authority Key Identifier:
                keyid:20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/202EC960E4D30720082CD719E1E72E6A76C5343A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3234382e302f32332d3233203d3e20323637363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ef:ee:18:1d:c7:d9:20:49:2f:12:d0:b3:6a:6b:ef:37:b3:87:
         0a:9c:2c:4c:58:e1:81:2c:9a:cd:86:d1:81:6e:84:d5:e8:22:
         fb:91:d1:f2:38:74:30:48:e2:91:0a:41:04:56:6d:88:1c:24:
         f8:c1:25:65:13:41:6e:c8:7c:e3:0d:3c:7c:31:57:d0:ce:11:
         31:5a:04:75:48:3c:f5:1c:71:56:1d:59:b4:83:ae:65:44:95:
         da:e6:c1:0a:b1:10:a1:0d:36:80:b3:04:9b:3f:ca:1e:6f:1a:
         02:f6:1b:66:3d:8f:78:76:94:27:11:4b:db:fd:80:ad:ba:7b:
         ba:74:07:58:f7:b7:97:52:e6:b5:74:27:0e:42:b5:f0:cc:d5:
         f5:c3:86:b5:a2:81:9a:12:b7:12:83:45:a9:28:cb:f8:6e:5c:
         3b:f9:95:87:b5:e1:d7:73:64:86:9e:e6:e4:12:5e:15:52:c1:
         d0:27:39:2b:94:35:5f:f1:78:5e:fb:9a:ce:fc:7c:53:cf:49:
         0f:97:8c:6f:60:e3:13:70:94:09:38:ee:ae:b6:f0:cf:38:fd:
         47:30:80:f3:de:41:4a:c2:55:60:1a:12:9b:9a:44:85:36:88:
         60:3e:32:0c:08:22:1b:7a:df:36:1d:93:5f:c9:3c:e1:82:55:
         4e:ec:3d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----