This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa
File:                     3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          R7CHeGZN/BBZCSinNS48vnI6hk19UmjtRPn5GE/dWGE=
Subject key identifier:   A0:97:44:69:9B:6E:C6:BC:F1:71:41:FA:F9:6B:44:38:4E:04:D8:75
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       192BB90AE22745968EA7C4723FFE0042FCAFAF1E
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:19 +0000
ROA not before:           Thu 06 Mar 2025 09:37:19 +0000
ROA not after:            Thu 05 Mar 2026 09:42:19 +0000
asID:                     52613
IP address blocks:        170.231.234.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2b:b9:0a:e2:27:45:96:8e:a7:c4:72:3f:fe:00:42:fc:af:af:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:19 2025 GMT
            Not After : Mar  5 09:42:19 2026 GMT
        Subject: CN=A09744699B6EC6BCF17141FAF96B44384E04D875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:15:10:99:f0:17:ce:4f:ee:ca:a1:55:2a:
                    96:e9:5b:4d:9a:a2:f2:56:6a:6b:a7:c8:c5:e9:ad:
                    a3:b9:d1:e7:89:58:0c:d1:da:fd:d6:de:e8:26:dc:
                    95:10:10:e4:a5:f3:63:f2:db:ba:1c:60:de:a5:b9:
                    17:ac:f2:1d:ca:5e:17:e4:c5:d8:97:d0:25:98:a6:
                    89:78:d4:b2:14:2e:42:34:b8:f8:f0:6a:c9:d7:2c:
                    3b:1b:0a:81:81:7d:b6:06:64:c3:57:b2:81:f4:01:
                    4d:17:38:2d:e4:06:d7:96:b9:19:12:77:51:13:56:
                    9d:12:d2:5a:9d:f5:54:cc:d5:78:2c:20:a8:e9:25:
                    0c:40:b6:37:1d:ae:9f:10:a2:63:5e:00:d5:69:ba:
                    41:86:4e:53:8d:1d:e9:6b:61:92:e4:d0:db:09:b8:
                    c9:1f:53:e9:ae:8f:b5:27:10:b7:ab:8e:ba:1d:38:
                    56:59:71:28:05:0f:9f:15:17:ad:60:2f:5f:2b:be:
                    c1:9c:07:4d:9a:e6:bb:48:a4:df:e3:7f:71:03:e3:
                    c8:c3:17:e7:0d:7c:23:e2:f6:14:fd:cd:eb:77:9f:
                    cb:e8:17:2f:33:5c:ae:b4:f4:df:ba:81:35:03:d2:
                    1f:de:7e:86:8e:1d:a7:ea:e6:d6:33:4e:bd:94:ef:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:97:44:69:9B:6E:C6:BC:F1:71:41:FA:F9:6B:44:38:4E:04:D8:75
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:63:70:d6:32:1d:a7:e4:78:5f:9c:d3:c0:8d:ef:8a:65:93:
         70:4b:51:c1:58:de:e7:e9:b9:d4:06:87:e2:0b:e0:42:df:80:
         94:2c:ef:f4:93:bf:fc:a3:10:b7:0a:46:fb:95:56:f3:13:12:
         fe:cb:cb:5e:55:e1:81:05:7a:59:2e:02:ef:34:d0:36:b7:fb:
         7a:7e:1d:d6:52:8b:95:d7:b5:2a:ba:93:e5:3d:a5:8d:c2:d6:
         69:68:4c:38:f2:61:2a:4d:30:2d:7a:bf:38:a8:be:66:40:84:
         f5:bc:59:03:98:e7:41:43:49:b3:95:f3:47:4e:f6:e3:c3:84:
         3f:af:db:70:06:4f:b3:d0:b8:0f:db:24:72:e4:37:34:f2:ef:
         0e:76:d1:b9:49:48:a9:5e:71:0c:27:7e:f2:c4:e8:71:06:63:
         7c:39:ba:a0:33:35:fc:f1:ed:a0:02:9f:06:c6:d3:2b:ca:07:
         2c:de:b8:22:0a:38:6c:a9:73:01:12:e4:e1:b1:fc:7d:00:f7:
         5e:33:a5:68:fa:08:f3:9f:02:5a:14:b0:b3:0d:80:55:1b:cf:
         58:70:cd:aa:f2:cc:0e:d8:0f:32:44:9a:5c:7f:3b:6a:03:90:
         eb:76:29:c0:1a:f3:4a:c0:54:e4:64:0a:de:ee:dc:c0:c2:7a:
         f2:86:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----