This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3136382e3233322e3136302e302f32322d3234203d3e203532363133.roa
File:                     3136382e3233322e3136302e302f32322d3234203d3e203532363133.roa (raw, json)
Hash identifier:          zILjPlCyOAD9ejfw9a24PH0wvqwfkKSvd2cc46+8kJc=
Subject key identifier:   CA:BB:7E:C9:0E:70:41:8E:E4:9E:CA:5A:FC:AC:47:8B:E6:CB:03:B2
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       3FDD8E743CA12B30A45830AE505A4938CB1BBAC2
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3136382e3233322e3136302e302f32322d3234203d3e203532363133.roa
Signing time:             Thu 03 Apr 2025 12:47:50 +0000
ROA not before:           Thu 03 Apr 2025 12:42:50 +0000
ROA not after:            Thu 02 Apr 2026 12:47:50 +0000
asID:                     52613
IP address blocks:        168.232.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dd:8e:74:3c:a1:2b:30:a4:58:30:ae:50:5a:49:38:cb:1b:ba:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  3 12:42:50 2025 GMT
            Not After : Apr  2 12:47:50 2026 GMT
        Subject: CN=CABB7EC90E70418EE49ECA5AFCAC478BE6CB03B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:2c:c3:e4:21:bd:14:fa:fa:c6:b5:d7:51:
                    74:a8:af:94:d3:65:5b:04:5a:cb:5d:43:83:da:f0:
                    a0:b1:f3:4f:88:24:1a:24:8b:f6:dc:76:00:72:c8:
                    a3:ee:98:8f:1b:c0:41:8e:7b:d9:39:f0:e9:08:40:
                    ce:ff:fc:13:33:90:d8:6c:4e:24:d2:0f:a5:9b:7a:
                    ef:43:87:e1:f1:1e:78:c7:0f:1e:f5:ae:a4:00:d4:
                    bb:ac:a8:8b:46:4e:db:02:16:e0:eb:c8:c5:2c:56:
                    59:df:5e:72:e1:c5:92:1e:e6:d8:31:9c:84:64:20:
                    d5:66:f7:81:78:3a:a7:e8:ff:38:cf:67:3c:63:04:
                    56:b3:50:48:c3:7f:23:e5:fb:cb:58:f5:5d:0a:c4:
                    e2:a7:42:51:49:a7:e6:ed:49:9d:8a:f0:98:17:13:
                    18:42:a9:d4:6f:14:74:74:2d:41:97:2f:5d:d7:e8:
                    f7:cf:40:89:41:7a:ab:9d:8e:ca:9e:52:f2:80:85:
                    f3:19:40:d4:30:c4:73:e7:ab:31:24:0b:d7:58:ab:
                    1e:bc:cd:32:c7:89:72:f0:34:11:e0:86:a5:96:f6:
                    79:4f:66:e8:d8:51:1b:34:7f:56:ba:78:ec:d0:88:
                    f9:1e:bf:0f:20:07:87:55:ca:79:28:91:6a:d0:72:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:7E:C9:0E:70:41:8E:E4:9E:CA:5A:FC:AC:47:8B:E6:CB:03:B2
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3136382e3233322e3136302e302f32322d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:e4:a1:a2:80:20:4f:79:44:2f:88:83:6e:43:3f:85:e6:57:
         6f:19:d1:5d:c1:69:a8:ce:a0:a6:f3:27:d3:86:47:a1:e8:9b:
         6e:0e:9f:47:94:45:fd:95:16:2c:47:13:5c:4a:01:d4:fd:72:
         3b:5e:db:b5:75:c9:a3:db:46:ed:7d:5c:b2:f8:8c:ec:76:fa:
         f4:f0:52:88:8b:f9:d8:6a:96:e4:b0:80:6c:26:58:b3:b7:83:
         3e:45:5f:74:0a:0d:32:7e:72:08:99:ec:78:ba:e5:38:e2:89:
         6b:61:07:0b:01:76:29:13:a4:f5:45:b7:25:52:af:8c:39:26:
         49:ae:7c:ff:1a:cc:b2:61:ca:56:86:65:00:bf:f5:a8:25:a4:
         b0:06:e7:70:17:a5:48:79:eb:02:ad:54:8f:9f:d6:75:15:f8:
         42:7c:c0:f8:10:fa:72:22:c2:5f:86:98:27:a9:0b:20:af:b9:
         ca:c8:1b:bb:12:dc:da:a2:e1:a1:c9:7c:04:71:3c:e5:33:af:
         e0:10:9a:de:38:4f:10:43:97:50:41:f0:26:16:ac:9e:1c:b2:
         5e:39:ad:78:df:87:75:eb:57:2a:ee:3f:d7:ce:ce:3e:64:8c:
         36:f1:fa:b4:0c:d2:cc:c8:5f:ee:5e:b9:34:af:65:ba:ff:41:
         34:8b:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----