This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa
File:                     3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          DXacyEbFVg4IqKK0v4ACGlB3Fum9pT9AizzWdyW9pqg=
Subject key identifier:   6D:41:16:51:B3:AB:78:6C:BE:4F:C0:FD:E9:89:B0:F8:A9:AD:02:B7
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       239DA448EB45D0F95CCD1372284D4A79A605DEEA
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:20 +0000
ROA not before:           Thu 06 Mar 2025 09:37:20 +0000
ROA not after:            Thu 05 Mar 2026 09:42:20 +0000
asID:                     52613
IP address blocks:        170.231.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9d:a4:48:eb:45:d0:f9:5c:cd:13:72:28:4d:4a:79:a6:05:de:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:20 2025 GMT
            Not After : Mar  5 09:42:20 2026 GMT
        Subject: CN=6D411651B3AB786CBE4FC0FDE989B0F8A9AD02B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:01:d8:24:ef:06:3e:af:ba:bf:0e:f2:a7:
                    36:e9:0f:ac:37:a1:2b:5d:29:61:88:52:95:82:a4:
                    7e:a0:c5:70:8d:89:0f:e7:f1:cd:b8:03:9b:58:54:
                    b6:da:9b:43:c7:78:05:16:06:eb:16:80:23:a2:96:
                    cc:96:89:be:bd:92:3e:4b:97:dc:75:2a:ea:48:16:
                    09:2b:5d:2c:6a:29:8d:29:fe:a6:7c:46:66:14:4d:
                    b6:37:89:ae:64:f7:84:34:51:59:0e:fd:39:6c:76:
                    5c:4a:fb:2a:ad:90:b0:3b:6d:ee:69:5a:8b:35:d9:
                    7b:97:51:71:54:cb:ee:49:79:56:57:cf:c7:7e:7b:
                    5b:3a:08:a5:c5:5b:89:1b:43:39:78:60:3c:07:36:
                    1e:24:14:ba:e5:63:a2:36:a4:fb:37:3e:08:a3:83:
                    a8:9e:9d:3e:54:7e:6d:c6:df:25:e5:6c:82:1e:77:
                    ae:cc:da:fc:fd:d0:86:de:61:34:0b:86:8f:da:58:
                    c2:00:22:03:44:09:04:f3:87:70:f8:93:61:62:ea:
                    c8:0d:2f:8f:52:d6:d1:5c:72:3a:8d:ba:05:36:c0:
                    57:ca:26:ac:7b:2b:12:4d:23:1e:d4:3d:01:08:16:
                    14:27:cd:a1:cb:72:e7:ec:78:dc:2c:69:81:1b:df:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:41:16:51:B3:AB:78:6C:BE:4F:C0:FD:E9:89:B0:F8:A9:AD:02:B7
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:2d:b7:5a:ca:ba:24:8a:88:d1:81:77:b7:d2:58:6e:dc:d8:
         60:be:10:cb:86:ba:e7:ed:69:c5:8c:d2:78:12:1a:98:be:2c:
         5a:98:92:52:9a:89:d1:fa:21:0d:6a:8e:2e:79:5d:e4:ba:d3:
         8c:9e:4c:a8:be:2e:6e:4e:85:81:81:3f:3e:52:4b:ab:a4:c6:
         b5:7e:c5:96:05:6e:3e:0f:22:fb:cf:3c:7b:79:ab:ca:72:8c:
         67:6a:33:57:fa:9d:15:5b:12:b5:60:a7:32:49:d3:bc:23:83:
         b7:38:67:02:83:8a:e6:4b:1e:7a:d9:63:9f:68:64:c5:64:25:
         56:71:87:22:d4:ec:74:85:52:bd:9d:e6:f3:1f:5c:27:47:67:
         4d:ea:b9:b8:78:d5:f7:fa:6e:77:63:45:bb:d6:bf:7d:08:e5:
         dd:37:74:e8:a5:ac:35:a6:47:15:a4:e0:6b:27:38:1e:ff:3e:
         0c:f9:58:d3:d6:ac:3e:14:45:c6:6e:82:81:82:3a:f2:d3:20:
         4f:89:19:7c:88:09:e2:45:99:37:5e:67:5f:ad:11:16:b1:dc:
         ce:35:3c:92:39:5f:76:0d:97:97:9d:d8:52:85:e4:65:c8:a3:
         ec:52:e1:fb:7d:cb:43:9e:85:89:55:9e:51:b6:7f:9f:b5:0d:
         01:e7:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----