This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
File:                     3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (raw, json)
Hash identifier:          9BoeCVg5vcg0/gLeGBtgYnvonPaqfp1IXhF41+TABUc=
Subject key identifier:   97:33:0D:2C:96:BD:72:BC:DF:F0:53:D5:E6:42:AD:A5:4C:49:69:15
Certificate issuer:       /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
Certificate serial:       7ECA2149CCBA1F956E7D3EDD7A03697D97FBD498
Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
Signing time:             Wed 16 Apr 2025 21:03:07 +0000
ROA not before:           Wed 16 Apr 2025 20:58:07 +0000
ROA not after:            Wed 15 Apr 2026 21:03:07 +0000
asID:                     52855
IP address blocks:        177.105.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ca:21:49:cc:ba:1f:95:6e:7d:3e:dd:7a:03:69:7d:97:fb:d4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
        Validity
            Not Before: Apr 16 20:58:07 2025 GMT
            Not After : Apr 15 21:03:07 2026 GMT
        Subject: CN=97330D2C96BD72BCDFF053D5E642ADA54C496915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:c1:e1:96:25:86:50:e6:c3:40:38:da:73:
                    c7:17:3b:ee:73:fc:a7:a4:45:51:fc:3a:73:2d:3f:
                    ae:64:29:98:38:41:b7:d6:db:f0:c4:f7:e7:60:30:
                    2e:f7:55:7c:5f:77:25:8e:e2:16:1e:57:b7:ab:d0:
                    f4:42:39:43:80:79:38:c4:61:69:9c:a1:31:90:15:
                    34:9a:2b:90:3a:03:a6:00:57:b0:85:82:a7:ad:9f:
                    65:17:45:66:33:b0:49:15:de:98:de:fc:90:68:0e:
                    3e:7f:8a:09:f8:a7:39:df:6f:d8:d8:c7:e3:c1:dc:
                    59:73:a6:ab:7f:88:8d:3a:1c:b0:46:69:8e:5e:d1:
                    b8:ce:e7:6f:05:c0:1a:a8:fc:f0:6c:d5:19:0e:20:
                    1c:0a:7c:90:02:b3:63:34:ef:46:34:42:63:2a:2b:
                    27:1f:b7:23:be:ff:c4:68:be:9b:2b:c5:10:58:50:
                    9d:5e:35:d5:20:e4:05:06:1c:50:d0:fe:90:ff:a4:
                    cb:4d:34:d8:06:31:24:0b:29:e2:1a:06:b7:64:b9:
                    6d:97:f6:c1:1b:e2:7c:1a:93:72:63:3f:62:eb:fe:
                    08:9d:81:a3:7b:b4:7b:ef:46:e3:cc:e6:d6:ff:72:
                    77:a6:09:66:52:05:3d:7e:82:da:96:06:7b:6a:04:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:33:0D:2C:96:BD:72:BC:DF:F0:53:D5:E6:42:AD:A5:4C:49:69:15
            X509v3 Authority Key Identifier:
                keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:34:44:f4:16:7a:c3:8f:c6:45:2f:2f:b2:25:04:58:54:
         e7:24:e5:26:ec:0c:fe:10:05:5c:87:1e:02:98:f7:24:4b:a5:
         21:7e:b0:57:94:c2:70:b5:9c:d8:96:b9:48:91:cb:d8:69:5a:
         c4:b6:af:8b:40:aa:cf:7e:3a:ac:e0:a5:99:82:e7:98:35:80:
         ce:39:cb:f9:bb:95:35:1b:52:7b:ec:fd:91:87:02:da:22:ff:
         31:79:8c:54:9d:c3:32:b3:39:d8:fa:0f:ef:b8:52:6f:b9:e2:
         0d:8f:df:86:7e:5a:a2:2e:3c:60:e5:db:5c:79:dd:b0:5b:3e:
         09:4e:4d:25:be:9a:19:72:f6:92:ec:a8:15:ea:10:10:98:9a:
         a7:15:f0:5c:e8:3d:7c:48:76:5e:92:8e:34:14:91:c1:51:c1:
         24:55:0d:0b:cf:df:3e:7b:75:0c:1e:20:8d:2c:ff:18:78:c1:
         8a:8e:f5:c3:da:a1:e8:ea:a0:75:db:36:a6:c1:20:84:96:69:
         df:14:26:da:45:43:96:14:d9:c7:d5:2d:3a:1f:05:05:ec:72:
         b9:6c:57:55:06:a1:29:9b:66:23:ec:d6:14:be:9f:3e:1f:29:
         d4:f7:6c:fe:14:51:11:d0:4b:65:6f:02:67:12:1f:92:f0:85:
         7d:59:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----