This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa
File:                     3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa (raw, json)
Hash identifier:          ZZ9TDjD4xpwMJCCqDS3LdtprsphvtJ82Dl2tiDZsjzI=
Subject key identifier:   10:68:1D:55:6D:3B:A5:3B:6D:32:B3:84:84:D0:1D:DC:67:FA:05:1E
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       0F99B2A804720D6A4BFBFC2130336B51751EB0FA
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:03 +0000
ROA not before:           Tue 22 Jul 2025 15:04:03 +0000
ROA not after:            Tue 21 Jul 2026 15:09:03 +0000
asID:                     2716
IP address blocks:        168.228.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:99:b2:a8:04:72:0d:6a:4b:fb:fc:21:30:33:6b:51:75:1e:b0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:03 2025 GMT
            Not After : Jul 21 15:09:03 2026 GMT
        Subject: CN=10681D556D3BA53B6D32B38484D01DDC67FA051E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:49:c0:27:8e:0e:c3:96:00:f2:d2:32:58:
                    32:16:48:71:e4:da:f7:ba:ac:7f:f4:3b:f3:05:45:
                    31:44:d2:56:2a:9e:eb:ab:31:8d:ad:31:67:50:57:
                    89:6e:45:8c:5b:26:20:fe:00:58:99:ef:a5:62:c5:
                    d4:0b:fb:c2:84:b6:a8:ea:0f:fe:96:23:27:e9:91:
                    a5:0d:68:02:cd:5f:f1:47:84:8e:49:85:a7:28:ad:
                    23:a1:1f:71:07:e2:0a:7d:9e:a5:5d:bd:73:1a:ed:
                    6d:6e:a1:6e:b2:92:41:90:49:c5:fc:1f:1c:6a:9f:
                    66:c0:f4:4c:c3:e8:92:18:18:26:16:38:c5:d7:01:
                    72:a8:3a:3b:60:f6:06:44:59:bc:ff:f2:90:c2:7a:
                    ca:e5:b5:1e:2b:c1:be:93:a3:6c:50:c2:36:13:1f:
                    47:13:54:f6:5d:62:4f:3d:bd:d5:96:52:8c:cd:f9:
                    34:ef:76:19:a8:82:01:f7:55:83:09:44:da:a8:92:
                    1b:f6:b7:22:30:fd:bc:51:8e:50:9a:c7:83:e7:3a:
                    ea:cc:54:a9:73:39:c5:bb:9e:c5:df:7f:59:dc:51:
                    2b:18:ff:d0:54:b7:f2:17:d4:31:52:c5:ab:0d:46:
                    48:ba:86:7a:a5:35:32:b8:1f:95:cd:03:c6:79:fc:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:1D:55:6D:3B:A5:3B:6D:32:B3:84:84:D0:1D:DC:67:FA:05:1E
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:09:e4:d9:23:55:ab:5b:8e:47:7b:00:1e:39:16:0d:68:47:
         46:4b:b3:7f:26:65:9c:3a:95:46:f4:8e:05:2d:fa:c8:03:39:
         2c:0d:95:49:16:ce:4d:8b:02:b1:18:b7:6f:e0:f4:e9:0e:0e:
         54:40:37:05:48:17:28:04:1f:15:04:0a:e0:38:e6:27:56:bc:
         d0:c1:bb:9f:1b:41:8e:44:0a:e3:14:05:1e:ef:a3:d4:f3:38:
         0c:84:23:2a:09:88:66:70:c8:c8:89:54:d2:85:98:f0:64:03:
         b0:d8:e0:4b:78:dc:65:9c:57:2a:e7:19:be:08:0c:4f:2e:04:
         16:18:c1:67:b1:2d:c7:29:43:a8:67:27:84:97:5f:9d:f8:99:
         95:99:da:c6:88:fd:0b:4a:f9:df:bb:3c:09:24:06:ed:f0:ff:
         ac:1f:34:b6:a8:9d:58:d8:b1:4d:62:49:80:78:ce:18:94:e7:
         76:8d:93:1e:1b:c7:d8:f8:a2:09:b1:d3:f6:3c:1e:80:d0:ff:
         9e:1c:2e:6c:4c:72:7d:23:b3:f0:76:7c:f6:2f:c6:d2:36:4e:
         36:63:20:e0:5c:f7:0b:71:3f:e3:2b:d9:1e:b7:fe:53:a7:34:
         51:0d:2e:9d:3d:84:99:28:ea:53:52:5d:51:3f:8b:15:c3:67:
         98:4e:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----