This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
File:                     34352e3233382e342e302f32332d3233203d3e20323638333038.roa (raw, json)
Hash identifier:          jFKP6dWXPi8UGPZ5qNsdHfPacn1U/LvCjFICN5w7Cbo=
Subject key identifier:   A1:64:33:A0:B8:B5:22:EF:0F:BD:30:49:E9:09:1C:BD:30:03:12:C4
Certificate issuer:       /CN=8D04B01D1AC6E397E778A8BB24BF8A398E2E8187
Certificate serial:       583D410AEA8CDB299626E32972BA023C4D00AA4E
Authority key identifier: 8D:04:B0:1D:1A:C6:E3:97:E7:78:A8:BB:24:BF:8A:39:8E:2E:81:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
Signing time:             Fri 12 Sep 2025 19:44:50 +0000
ROA not before:           Fri 12 Sep 2025 19:39:50 +0000
ROA not after:            Fri 11 Sep 2026 19:44:50 +0000
asID:                     268308
IP address blocks:        45.238.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3d:41:0a:ea:8c:db:29:96:26:e3:29:72:ba:02:3c:4d:00:aa:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D04B01D1AC6E397E778A8BB24BF8A398E2E8187
        Validity
            Not Before: Sep 12 19:39:50 2025 GMT
            Not After : Sep 11 19:44:50 2026 GMT
        Subject: CN=A16433A0B8B522EF0FBD3049E9091CBD300312C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:2b:08:9a:db:4c:45:e7:e6:b4:f0:7d:e6:
                    49:c4:60:1d:bd:93:75:ed:31:be:d4:8e:5f:38:69:
                    4c:d1:e5:bd:16:d6:a6:52:e4:1c:27:0c:b4:cd:d7:
                    d8:a2:cf:99:d5:a3:fc:66:d3:75:6b:c1:9d:87:c6:
                    ec:ca:93:85:ae:eb:15:d3:af:55:3f:5f:63:4b:11:
                    99:db:01:da:a2:a2:de:be:d6:9e:33:35:28:a2:39:
                    36:b9:eb:5b:ec:b7:8c:fb:d3:48:cb:3f:3f:30:68:
                    19:4a:82:4d:b5:45:7a:7f:b5:b8:2e:de:92:a5:aa:
                    8a:83:8f:50:22:41:1e:ad:cc:cc:11:2e:76:52:72:
                    b2:e9:16:1a:c5:98:13:fe:a1:46:a3:23:c1:0c:4f:
                    dd:10:52:f7:0b:6c:d8:ac:d8:81:8c:90:2a:81:dd:
                    e8:cc:ed:c3:3d:5b:92:ba:9c:fb:c9:92:75:e8:50:
                    89:ff:f3:ac:4f:c6:e2:5f:f2:c9:55:4a:82:36:ae:
                    db:d4:22:f1:9a:7d:25:a6:9b:bb:9b:51:e3:c2:69:
                    96:11:13:7a:c2:81:b4:3c:5e:ef:fb:1e:72:8b:33:
                    b5:1b:69:2c:a1:15:24:0a:01:f7:a1:39:c7:e4:9c:
                    3f:52:07:5b:42:45:88:f3:25:68:f4:8b:dc:a8:1b:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:64:33:A0:B8:B5:22:EF:0F:BD:30:49:E9:09:1C:BD:30:03:12:C4
            X509v3 Authority Key Identifier:
                keyid:8D:04:B0:1D:1A:C6:E3:97:E7:78:A8:BB:24:BF:8A:39:8E:2E:81:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:91:10:e1:df:35:79:cc:e1:7e:50:a4:9c:b8:1e:98:c1:
         da:7e:b9:33:06:c3:13:11:55:fc:d1:32:29:57:d5:23:66:32:
         89:b0:7a:e1:b5:07:c2:19:d7:58:21:1f:ca:6c:01:a8:39:c3:
         33:88:d1:ee:22:c3:d2:88:c5:18:7f:c0:24:eb:33:64:41:4e:
         e0:df:76:6e:56:c0:57:2e:cd:ae:7e:bf:1a:36:e6:95:ab:94:
         c9:34:e5:24:9e:25:48:6e:1c:72:14:9b:2e:08:57:bd:cb:13:
         32:31:ac:b9:be:20:62:2d:fd:7c:6d:e8:60:b9:17:82:38:17:
         25:30:24:ab:a0:76:36:d6:62:24:24:1e:5e:6e:ff:ce:a3:fc:
         ba:6a:42:15:f7:3d:aa:0e:c1:cb:e2:21:66:b4:74:27:06:d8:
         76:7f:47:ab:22:b7:da:e3:51:c9:f6:f6:bf:dd:e7:91:9e:79:
         ea:2e:df:7f:26:cb:fa:8c:74:32:35:59:c3:bd:ce:8c:cd:48:
         72:bc:9c:0b:3c:21:e2:b1:e0:13:1c:61:a7:7b:7a:01:92:d3:
         15:0b:68:b6:e9:19:86:e1:a6:cc:d5:1b:15:ba:f5:cd:f4:30:
         a1:3c:67:76:1e:17:66:cc:cb:86:44:1b:e6:82:d2:e7:51:47:
         27:38:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----