This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32342d3234203d3e20323731313034.roa
File:                     3137392e34322e342e302f32342d3234203d3e20323731313034.roa (raw, json)
Hash identifier:          a44CUycqI+wIR+kBqmJe91mZmvGdCQIl97L7vghN+/8=
Subject key identifier:   FC:20:A6:44:D7:7E:9E:CC:44:E5:CD:24:A5:1D:98:29:53:EA:84:3C
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       06807F6899930D97AECB1708AA03AE597D40B4ED
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32342d3234203d3e20323731313034.roa
Signing time:             Mon 22 Sep 2025 21:38:34 +0000
ROA not before:           Mon 22 Sep 2025 21:33:34 +0000
ROA not after:            Mon 21 Sep 2026 21:38:34 +0000
asID:                     271104
IP address blocks:        179.42.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:80:7f:68:99:93:0d:97:ae:cb:17:08:aa:03:ae:59:7d:40:b4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Sep 22 21:33:34 2025 GMT
            Not After : Sep 21 21:38:34 2026 GMT
        Subject: CN=FC20A644D77E9ECC44E5CD24A51D982953EA843C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:bd:7b:0c:7b:21:21:bc:6d:d4:32:51:28:
                    0c:8c:9c:5f:a8:0f:e1:d6:bf:ff:97:2d:ec:38:0b:
                    af:e5:a9:70:88:f7:bd:d2:3a:4b:b9:79:5c:c5:09:
                    f6:78:90:3a:2b:5f:4c:70:24:a2:91:5c:b7:07:a4:
                    d7:d5:0f:dd:f6:b3:ad:b0:ec:29:fb:74:32:1a:04:
                    7f:46:71:cc:66:9f:43:a3:7a:39:33:cf:b4:f2:7b:
                    41:9e:e5:f9:2a:6d:98:de:5f:59:ef:8b:ab:dc:b0:
                    04:f0:41:92:22:64:36:41:6b:d8:58:83:86:1f:be:
                    df:a5:07:33:57:05:ed:59:88:07:22:c4:66:92:b9:
                    c6:31:53:a2:42:3c:04:f2:2a:eb:cc:6d:01:b6:44:
                    c5:5b:c2:e5:e8:4a:f9:22:9f:35:4a:ee:d1:40:28:
                    25:05:74:f3:1c:df:68:0f:c0:89:1c:53:f2:39:1c:
                    2b:3e:ed:bf:fc:2a:e2:a6:59:fc:fb:f5:b0:f2:d6:
                    23:89:74:b4:54:a7:c6:0c:2a:2c:91:6a:ec:19:ed:
                    e4:a5:26:79:46:11:ee:09:1f:a2:1c:42:9e:4d:c6:
                    3e:c7:b7:74:eb:52:33:18:6b:5b:bf:d3:19:07:68:
                    1b:53:03:45:e3:c8:21:6c:d3:e4:43:49:21:78:5f:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:20:A6:44:D7:7E:9E:CC:44:E5:CD:24:A5:1D:98:29:53:EA:84:3C
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32342d3234203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:fb:62:69:32:22:1d:fd:1b:1f:d4:cd:2a:ff:c6:30:9d:
         8e:fe:89:a1:76:9e:25:56:33:8e:a2:36:57:b4:97:b1:0b:a5:
         ab:04:9e:e7:15:4b:b3:ea:8b:f7:c9:7a:85:cb:1b:e4:b1:5c:
         cb:62:08:21:1e:48:df:ea:5b:7a:76:18:66:17:db:91:92:ef:
         f0:1d:c1:f5:bd:b9:54:40:1a:ec:be:ff:e0:b0:df:85:5f:ea:
         e6:88:2c:d6:71:8f:e7:0b:a0:b9:b2:fc:2f:ba:3c:6a:5f:04:
         49:2f:18:3b:de:0d:42:33:11:86:d4:91:fb:82:e7:f4:78:c6:
         b4:8f:6a:17:95:50:88:59:d8:ae:a3:f2:da:ad:90:ad:f5:d9:
         b9:21:74:e2:fb:07:77:e8:1f:a1:30:98:8b:21:b1:b7:af:ea:
         04:18:85:af:5e:6c:4a:7c:64:ba:1b:a5:9d:9b:06:cb:f8:2d:
         fe:e3:51:f2:1d:38:0b:af:c0:e4:cf:18:4a:48:92:86:f6:3e:
         74:16:cb:97:4e:71:5a:9e:1b:1d:cf:d2:49:64:9b:13:04:f2:
         f7:e0:a9:bf:29:ca:ff:eb:ca:d7:59:53:d4:92:23:8d:9f:39:
         e3:c2:b7:97:7e:5c:e3:2d:8e:12:ae:72:90:c1:ac:88:5d:af:
         11:3f:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:55:23 2025 by rpki-client