This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa
File:                     3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          qBdanNuPYXPgYD/cg7S5VDJlasuVX5HGEGOqMJ8FlHQ=
Subject key identifier:   BA:FD:5A:6C:73:B9:B3:E8:7C:CC:E1:63:7E:D9:27:62:96:5B:C0:83
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       22DFA2E16A89EE9D2A84D64D3DEAA110714ABC6F
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:19 +0000
ROA not before:           Thu 06 Mar 2025 09:37:19 +0000
ROA not after:            Thu 05 Mar 2026 09:42:19 +0000
asID:                     52613
IP address blocks:        170.231.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:df:a2:e1:6a:89:ee:9d:2a:84:d6:4d:3d:ea:a1:10:71:4a:bc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:19 2025 GMT
            Not After : Mar  5 09:42:19 2026 GMT
        Subject: CN=BAFD5A6C73B9B3E87CCCE1637ED92762965BC083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:50:0f:0a:65:21:de:59:e6:92:1b:3f:2e:
                    91:43:c8:90:51:20:87:3f:b1:8b:fc:12:8e:6a:20:
                    ab:00:88:74:b9:38:64:d0:3b:79:5e:42:d0:ac:1f:
                    32:a1:1e:f1:3d:eb:d3:44:09:9c:3e:f6:f7:74:63:
                    b4:38:0b:96:da:2a:9a:16:bb:ab:f0:37:9d:f6:88:
                    f6:4b:d1:4c:67:95:55:34:ed:38:e5:3d:90:66:32:
                    88:9a:1d:4b:d9:83:04:dd:3b:86:a6:63:d1:54:c4:
                    f1:31:fc:d4:be:ef:0a:a0:fe:34:cf:d7:70:08:be:
                    5b:9d:88:db:c7:c7:92:07:19:c0:fe:9e:46:30:d8:
                    c0:f8:de:94:df:d1:10:0d:45:ae:0d:05:a0:22:d7:
                    c2:bd:7b:06:3e:1d:a6:8e:87:cc:50:57:85:47:d9:
                    04:bd:5b:34:0d:0f:85:aa:ea:cb:35:6d:7f:8e:cf:
                    10:06:7a:f1:b9:f2:0b:a3:d4:73:25:46:f7:60:f8:
                    6c:1c:f5:5f:d4:26:73:87:8c:a7:28:e6:12:8d:64:
                    3f:c2:b7:5b:a0:9e:c1:f8:93:57:62:80:34:37:e4:
                    2e:77:a2:91:0b:b4:9f:d4:df:c3:c9:1b:40:f2:76:
                    82:0f:ef:ae:fc:f4:8d:56:90:d6:80:ac:f4:ce:2e:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FD:5A:6C:73:B9:B3:E8:7C:CC:E1:63:7E:D9:27:62:96:5B:C0:83
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:99:93:4c:70:6c:14:1a:6b:82:28:03:b8:22:79:18:ec:df:
         a3:31:36:18:fd:cd:8a:a9:b6:82:f8:aa:ad:54:f3:d6:b4:45:
         8d:a8:e9:1e:2d:ba:d1:66:57:04:34:16:aa:ab:7d:d5:a9:6c:
         4d:cd:3f:32:e3:36:7f:0e:28:38:ea:c6:c8:86:e6:ea:ef:c3:
         ba:25:1e:72:ce:cd:15:85:f8:ad:9d:ac:8b:9a:83:a0:21:5f:
         54:d7:da:ac:77:ee:90:a4:09:21:25:83:1f:de:4f:b4:23:1d:
         87:bd:26:87:f6:80:6c:2a:6b:eb:2d:85:13:85:b1:35:a3:0c:
         62:43:9d:0f:5d:df:9e:e7:7f:0f:cc:24:3f:26:1e:f1:0a:d7:
         3a:9a:82:3d:e0:6e:7a:32:94:50:75:ec:5a:e9:ae:a9:52:9e:
         1f:74:6f:5b:5d:88:3c:ad:28:4b:5d:0e:59:c4:07:a6:27:94:
         91:3f:8b:cb:c4:36:b0:5f:00:80:a2:56:bc:1d:33:2e:63:5a:
         c7:a2:47:e9:1f:ce:12:72:b6:0c:26:c5:dc:c2:b8:dd:98:65:
         ec:55:77:51:b5:9d:04:21:6b:ac:96:5b:ff:07:0d:08:79:18:
         44:cb:70:33:63:10:90:09:2f:47:70:e1:4d:b5:69:b0:54:1d:
         72:cb:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----