This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32332d3233203d3e20323731313034.roa
File:                     3137392e34322e342e302f32332d3233203d3e20323731313034.roa (raw, json)
Hash identifier:          W9IxyklchBMCZ5pANdmvzjjvtiV1r7nXM6/y4bT7dSk=
Subject key identifier:   79:D3:CD:EA:F0:4F:69:F4:D1:2D:88:17:94:77:45:92:D6:DD:9B:B6
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       1AB3E4F1E9326972370861CADD0FAA9A513F79A2
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32332d3233203d3e20323731313034.roa
Signing time:             Wed 16 Jul 2025 14:40:59 +0000
ROA not before:           Wed 16 Jul 2025 14:35:59 +0000
ROA not after:            Wed 15 Jul 2026 14:40:59 +0000
asID:                     271104
IP address blocks:        179.42.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b3:e4:f1:e9:32:69:72:37:08:61:ca:dd:0f:aa:9a:51:3f:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Jul 16 14:35:59 2025 GMT
            Not After : Jul 15 14:40:59 2026 GMT
        Subject: CN=79D3CDEAF04F69F4D12D881794774592D6DD9BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:2c:ba:85:c6:50:6a:c2:f3:4a:c8:76:94:
                    e9:35:a8:35:2f:75:24:00:c2:48:55:67:cb:d7:d9:
                    00:dc:2b:76:8c:19:46:b6:0f:d9:cd:84:14:ca:19:
                    69:77:e8:a0:c5:78:27:71:ab:71:fa:15:ce:0d:17:
                    c4:f6:e3:0d:30:0a:25:f6:c8:29:94:1d:36:f3:ef:
                    85:8f:7c:fb:82:a5:24:c7:a9:5d:56:15:f1:76:65:
                    77:b9:33:dd:e7:df:07:2c:ed:62:c8:f8:3c:de:2b:
                    a7:a4:26:58:01:fd:14:40:af:ce:40:d7:17:68:55:
                    e7:74:74:9c:69:4c:e8:16:e0:4d:cb:e5:58:a8:66:
                    b4:ae:bd:a9:4c:e2:49:3c:38:7a:e7:13:58:75:83:
                    c2:3d:46:e8:d2:a1:f6:17:1c:9a:40:c3:aa:24:a3:
                    35:e6:e4:d9:fe:4c:33:0d:77:84:ed:86:85:19:c4:
                    2d:8b:c5:3b:93:35:71:0f:35:a8:3d:bf:68:7b:29:
                    e8:15:e4:56:9b:bd:85:a8:bc:eb:8f:e3:ad:4b:08:
                    e3:d0:f7:5c:d1:72:c3:fc:4d:d9:f4:00:ff:d9:37:
                    48:3d:52:47:8f:1d:47:12:69:a9:6d:d4:9a:7e:64:
                    43:56:50:c3:2f:08:d7:55:2e:d8:9b:2d:fc:78:80:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D3:CD:EA:F0:4F:69:F4:D1:2D:88:17:94:77:45:92:D6:DD:9B:B6
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32332d3233203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:dd:53:44:df:62:cf:1d:f4:27:47:38:a5:d8:6a:d9:dd:
         31:a1:57:ce:b3:f6:42:af:60:18:ab:9b:43:80:89:b9:e6:a4:
         43:7f:36:eb:cc:f3:c1:9a:53:aa:09:8a:0d:04:cf:bc:3c:2b:
         3d:b6:7c:8a:a7:da:1d:be:93:c0:97:1b:79:2a:af:0a:0c:49:
         44:e4:eb:1a:57:76:35:8d:4b:d1:d4:1d:aa:00:57:19:4e:b0:
         40:50:7a:65:68:f7:10:9c:9e:6a:93:27:aa:cb:2e:ea:4e:a4:
         39:98:7c:d9:0a:fc:de:a3:f1:d3:d1:8b:46:e9:10:a7:38:0d:
         56:4b:46:92:f1:eb:64:1f:24:42:04:82:8f:01:42:a1:11:e5:
         ad:c2:c9:1d:e9:e1:81:ee:02:42:db:4f:4f:7f:fb:d5:ea:0b:
         8c:9a:51:d7:ef:db:b1:b3:c7:0c:8d:b8:54:82:d7:1e:3b:eb:
         8b:82:8c:7d:7d:a8:65:a7:ee:83:96:94:47:80:c1:63:e5:2b:
         b5:4c:09:da:57:f4:91:1e:e3:78:61:d9:73:29:f9:4f:90:bb:
         28:ae:0a:4c:5e:53:cc:00:15:ba:fe:d3:20:ae:3a:86:29:22:
         76:b6:0e:f6:28:2d:cb:fb:7f:cb:de:bc:f6:a8:f6:99:0f:b1:
         b7:58:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----