This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa
File:                     34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa (raw, json)
Hash identifier:          IE6+PC02Z3lpsierznU3Q0QAfPfXk3+rPz91wRHPmlg=
Subject key identifier:   7F:8D:A9:25:57:39:79:98:6E:6A:53:74:BC:30:6D:09:D3:1D:0F:F1
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       70E56A31577FD345B66DAA679552A7F8F944CB65
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa
Signing time:             Thu 10 Apr 2025 02:20:26 +0000
ROA not before:           Thu 10 Apr 2025 02:15:26 +0000
ROA not after:            Thu 09 Apr 2026 02:20:26 +0000
asID:                     268178
IP address blocks:        45.170.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e5:6a:31:57:7f:d3:45:b6:6d:aa:67:95:52:a7:f8:f9:44:cb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr 10 02:15:26 2025 GMT
            Not After : Apr  9 02:20:26 2026 GMT
        Subject: CN=7F8DA925573979986E6A5374BC306D09D31D0FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:88:fb:2e:2f:72:c9:31:ea:52:11:98:ec:
                    26:11:e8:ce:aa:eb:b1:29:87:2a:0a:b7:4b:e4:0f:
                    75:03:a0:dd:3e:73:c7:b8:40:84:26:7a:81:6d:d4:
                    1d:30:ad:14:bb:e5:43:a6:bb:14:80:1a:48:c9:f9:
                    64:46:0a:79:4d:a6:b1:df:9d:e1:30:40:6a:7e:f6:
                    88:bf:0a:aa:11:39:50:d8:bd:28:0d:1b:35:eb:33:
                    33:3d:a8:62:09:f3:96:fa:2d:02:d6:b2:e7:6c:8b:
                    bc:56:e9:87:3f:1a:58:d6:e2:37:f1:76:77:75:b0:
                    24:92:62:89:2e:bf:21:b1:bc:77:ea:07:5d:0f:4e:
                    13:40:66:22:f2:76:7f:bb:c4:9f:87:83:bf:39:db:
                    7f:5c:ae:c1:6b:17:b7:59:60:30:eb:13:70:9a:6e:
                    31:71:13:6f:b8:0c:64:a0:c8:c4:eb:fa:89:7b:66:
                    38:7a:ff:bb:81:32:1b:c6:48:39:ec:70:c8:e3:68:
                    31:e0:1e:62:f0:43:fb:af:30:88:e9:3b:56:97:d2:
                    25:54:37:95:70:80:67:46:59:7d:78:88:61:ff:d9:
                    57:7d:f1:fb:0f:c7:af:76:ca:c9:8d:78:36:1d:0d:
                    75:59:d9:19:94:8e:e8:a8:c9:5b:69:11:ae:69:05:
                    52:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:A9:25:57:39:79:98:6E:6A:53:74:BC:30:6D:09:D3:1D:0F:F1
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:20:05:c9:61:6f:fb:db:39:f4:a1:18:18:67:b0:c2:48:e6:
         f9:83:22:29:fb:2b:d1:b0:96:f7:73:e7:9d:d2:5f:5b:0e:b1:
         68:42:69:24:fc:3b:9b:0c:f5:98:aa:6f:34:03:96:96:07:e7:
         99:79:73:60:1e:24:9b:41:08:3f:c6:9d:1d:bb:05:ab:cb:bc:
         52:af:04:58:61:28:6f:0e:00:fb:c8:e1:60:b9:0f:34:76:f1:
         06:b4:3a:37:cf:ea:c7:77:89:0f:01:be:53:2b:27:84:90:d0:
         f9:fd:30:a7:46:6c:be:b8:27:7b:de:ee:e5:2e:e6:4b:2f:9b:
         ee:34:e1:e8:2e:39:bf:d6:f0:06:a3:e4:23:59:96:26:7f:86:
         e4:f6:2b:92:2d:13:8f:b8:c3:51:35:63:b8:93:c6:50:b1:6a:
         4c:93:d6:4e:57:85:75:39:d5:59:d5:5d:89:ff:0a:79:19:fa:
         10:6e:cb:09:8a:4e:38:1b:b8:be:4a:c4:32:69:22:44:d5:2e:
         05:af:e4:dd:61:0f:c6:57:f0:92:fa:bf:80:fe:44:0d:5e:88:
         54:30:56:db:2f:f0:2e:5a:a5:fb:f6:17:82:bf:9c:fe:e5:74:
         00:8f:ff:70:27:30:12:a1:75:53:cb:7e:09:dc:6a:ca:77:cd:
         61:44:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----