This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3235302e302f32332d3233203d3e20323637363130.roa
File:                     34352e37302e3235302e302f32332d3233203d3e20323637363130.roa (raw, json)
Hash identifier:          6+YTPsluIfDSjzPrlVWO6RVZmBIPmvqdKw/4psEEM1I=
Subject key identifier:   BF:79:16:61:9D:65:71:DC:DF:2B:C2:D8:3D:40:50:F4:F9:30:E3:62
Certificate issuer:       /CN=202EC960E4D30720082CD719E1E72E6A76C5343A
Certificate serial:       7C976C94E3CDCB905EDA5E4EC7186408041162B2
Authority key identifier: 20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3235302e302f32332d3233203d3e20323637363130.roa
Signing time:             Thu 18 Sep 2025 16:30:58 +0000
ROA not before:           Thu 18 Sep 2025 16:25:58 +0000
ROA not after:            Thu 17 Sep 2026 16:30:58 +0000
asID:                     267610
IP address blocks:        45.70.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:97:6c:94:e3:cd:cb:90:5e:da:5e:4e:c7:18:64:08:04:11:62:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202EC960E4D30720082CD719E1E72E6A76C5343A
        Validity
            Not Before: Sep 18 16:25:58 2025 GMT
            Not After : Sep 17 16:30:58 2026 GMT
        Subject: CN=BF7916619D6571DCDF2BC2D83D4050F4F930E362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:f4:17:b0:2e:42:40:6d:b9:7c:84:84:be:
                    38:dc:32:89:e6:45:d9:d0:23:86:5c:e2:88:63:2a:
                    f3:6e:27:30:2f:29:a9:7a:c4:15:55:3b:ea:c2:c9:
                    a3:61:64:19:d4:49:d6:da:1b:61:af:8f:f6:eb:d9:
                    26:b5:10:11:a7:85:0b:19:42:28:d6:d1:15:a9:86:
                    3a:6a:0d:e0:00:39:08:f5:06:10:b3:1e:4a:dc:ae:
                    96:73:c1:8d:bb:2c:fe:37:b5:29:66:21:f7:37:40:
                    6f:e0:8d:4d:96:7b:cd:b6:62:a8:73:5c:45:80:d8:
                    89:11:b0:eb:30:ec:71:48:f1:a0:ee:ae:8c:04:df:
                    d7:87:43:e3:70:4b:bd:41:b6:c5:ee:68:81:6c:e5:
                    ca:97:b6:e6:ac:9c:95:b2:71:30:21:0d:d3:f5:56:
                    40:d0:0e:76:2a:6d:e2:59:8c:88:54:c9:d2:b2:bd:
                    ab:66:f3:d6:ff:54:72:ab:ab:7c:7b:9c:d5:2e:ed:
                    92:31:87:6e:da:d4:51:1d:da:02:d1:c7:02:64:7d:
                    08:8f:cc:f6:f9:f6:da:2f:05:4e:f9:51:c7:bc:6c:
                    f2:12:7c:8d:95:e7:ef:3e:ed:2e:b1:bf:3f:b6:e8:
                    d5:d3:d0:06:82:2a:e1:67:e5:da:c6:01:5e:90:3f:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:79:16:61:9D:65:71:DC:DF:2B:C2:D8:3D:40:50:F4:F9:30:E3:62
            X509v3 Authority Key Identifier:
                keyid:20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/202EC960E4D30720082CD719E1E72E6A76C5343A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/34352e37302e3235302e302f32332d3233203d3e20323637363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:c5:fc:c8:35:11:8b:ad:28:0b:b5:3b:56:fb:4f:5c:f2:
         6b:77:e7:ce:53:ce:2c:a4:23:fa:34:cb:82:1f:c6:e8:94:d0:
         06:2f:fb:09:54:01:d7:0e:60:88:4f:c6:58:5a:76:b9:2a:9a:
         d4:df:9d:80:a8:8a:69:68:1e:c1:e5:63:5b:3a:ed:f0:88:fd:
         a8:ec:00:b3:0d:b4:0c:9b:fa:10:f5:df:69:72:c3:bf:29:77:
         47:95:53:d2:6b:fb:87:a5:e7:59:92:1c:a1:ca:66:62:47:55:
         cc:93:ab:d0:13:48:2a:27:2c:c1:2e:eb:92:85:c8:5d:9e:06:
         0d:10:60:dc:ea:8f:65:a6:b7:d0:12:1b:3d:c2:74:a7:50:97:
         b4:72:e7:de:46:c0:23:a9:82:96:93:13:6b:26:b7:cd:83:e8:
         51:ef:41:2c:8e:c9:b6:5e:fe:ff:40:e5:06:39:52:a3:f0:f1:
         9a:d6:8e:a6:22:fc:fb:df:38:89:c2:7b:55:35:6d:32:23:26:
         b0:3c:d0:75:99:61:7d:3f:42:92:15:38:83:74:ff:1e:df:87:
         34:18:ad:97:ce:3c:e3:6d:84:7b:d8:a8:01:45:65:e5:6b:c5:
         2d:78:ac:48:bf:f3:09:3d:f5:6b:30:9c:f4:cc:30:b6:67:b2:
         77:6a:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----