This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e352e302f32342d3234203d3e20323731313034.roa
File:                     3137392e34322e352e302f32342d3234203d3e20323731313034.roa (raw, json)
Hash identifier:          P1+KsKI87yl+8k8cOlnyJIamz8tUBGAL/1xQ394uRzA=
Subject key identifier:   BD:0E:22:61:6A:A5:62:EB:CF:77:58:4B:06:A6:C5:49:FA:82:8C:F2
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       01AE9CC5C6C6DFD0EC3C28F4D01355AB7BCCD67A
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e352e302f32342d3234203d3e20323731313034.roa
Signing time:             Mon 22 Sep 2025 21:38:42 +0000
ROA not before:           Mon 22 Sep 2025 21:33:42 +0000
ROA not after:            Mon 21 Sep 2026 21:38:42 +0000
asID:                     271104
IP address blocks:        179.42.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ae:9c:c5:c6:c6:df:d0:ec:3c:28:f4:d0:13:55:ab:7b:cc:d6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Sep 22 21:33:42 2025 GMT
            Not After : Sep 21 21:38:42 2026 GMT
        Subject: CN=BD0E22616AA562EBCF77584B06A6C549FA828CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:02:78:36:19:a3:f1:03:84:66:67:10:59:
                    2a:c3:94:77:d6:a3:84:e9:90:b2:1c:5f:2e:0c:ff:
                    10:46:21:3c:0c:c7:21:2b:d4:9c:af:ee:4f:af:9b:
                    43:7f:cf:ee:53:3e:2b:e0:68:b3:cd:26:ba:d2:00:
                    de:53:68:12:ee:a7:09:72:4c:bc:4a:b3:3c:6f:af:
                    0c:87:97:1c:55:60:5e:c1:36:32:b2:95:e2:97:1f:
                    47:c6:bd:f3:aa:40:45:e3:31:a5:b4:a6:2e:10:fd:
                    d5:32:59:9f:85:c8:65:f7:97:6c:ae:c6:52:be:26:
                    e4:46:f8:43:5e:d3:a8:c1:9a:d5:36:00:32:59:67:
                    dd:7d:fd:02:ef:76:e7:b7:9d:9c:a0:d9:21:70:72:
                    f8:5f:66:66:d4:e3:eb:a8:19:08:2c:f3:83:54:36:
                    a9:0b:63:d9:4e:75:ec:58:7b:99:8a:33:db:4a:d5:
                    61:f4:97:60:64:85:7b:e1:85:83:22:5b:a2:ee:c7:
                    1b:6e:70:9d:4a:e5:3f:72:32:04:20:0c:ca:92:ee:
                    41:b2:78:ec:14:85:bd:d9:61:59:79:1b:c4:04:af:
                    cb:84:d8:0a:4a:b2:21:de:63:cd:16:3e:4d:4c:0c:
                    ed:f1:d0:a8:12:de:e2:e1:4d:f9:96:39:1c:9f:45:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:22:61:6A:A5:62:EB:CF:77:58:4B:06:A6:C5:49:FA:82:8C:F2
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e352e302f32342d3234203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:57:77:0e:5f:b1:10:73:cc:be:4e:19:eb:5e:a5:cf:7e:cb:
         c3:87:88:d8:f3:c3:2d:5b:88:82:e0:36:a1:58:99:74:c3:01:
         a0:a3:b6:4e:07:46:19:50:25:15:cb:00:ec:7b:a9:3e:1c:3e:
         a8:a7:ad:5c:55:5f:4a:d0:61:0f:91:e8:bf:27:09:bd:b6:c3:
         c9:a0:c4:a6:5c:16:91:30:06:b7:cd:6c:1f:e3:fb:ab:28:bd:
         a8:af:35:c7:1e:5e:91:0e:17:05:1e:6c:25:19:9f:39:e0:ce:
         b2:b2:45:4d:7a:f1:ac:f1:31:e5:4c:07:4e:03:15:55:43:54:
         63:f9:15:3c:77:74:f5:37:27:22:42:6b:2c:99:f0:bc:6e:f6:
         c1:91:fd:ce:2d:93:93:cf:c8:60:2f:71:ef:d7:b4:5a:f5:f5:
         54:5e:10:75:b4:e5:8b:87:9e:93:a4:e5:59:8b:d9:9d:9a:57:
         5b:90:7c:24:23:84:1e:57:df:8d:f4:32:e1:87:ab:7a:57:cb:
         ec:0a:d7:43:70:12:de:d1:43:d0:f8:48:f9:ba:ae:6c:34:f6:
         91:f4:f5:4c:8d:42:91:d0:4f:6c:da:42:31:8d:8f:8e:76:fd:
         56:f9:77:2a:d6:43:c2:69:a4:32:59:6c:66:0f:be:12:05:24:
         59:1c:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----