This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32322d3232203d3e203532363133.roa
File:                     3137372e3132352e3137322e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          iKHuXo9Nwd44tabFrPkQc/eAy6n5EtQm9QW8NkSbVF8=
Subject key identifier:   3E:44:A3:C8:02:55:4A:55:F6:0F:2F:C8:FB:D1:6C:89:66:13:7A:CF
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       09052A5324543F28C0CA743FC86EB6FEEA1EC85B
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32322d3232203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:20 +0000
ROA not before:           Thu 06 Mar 2025 09:37:20 +0000
ROA not after:            Thu 05 Mar 2026 09:42:20 +0000
asID:                     52613
IP address blocks:        177.125.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:05:2a:53:24:54:3f:28:c0:ca:74:3f:c8:6e:b6:fe:ea:1e:c8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:20 2025 GMT
            Not After : Mar  5 09:42:20 2026 GMT
        Subject: CN=3E44A3C802554A55F60F2FC8FBD16C8966137ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:8a:03:0c:84:b5:14:9c:70:4b:07:f0:9c:
                    31:f0:05:43:65:b0:c2:e9:35:65:d2:bd:81:09:6d:
                    78:c9:37:f7:d5:6a:73:f6:0b:91:43:a5:8a:76:50:
                    de:d5:c5:73:37:50:18:5f:a5:b5:5e:1c:11:7b:f9:
                    ac:ba:8a:c9:ab:15:fc:08:07:eb:30:f4:55:00:dc:
                    d1:4d:c8:c2:6c:d1:61:80:08:68:02:3d:9a:15:bf:
                    ec:d0:f6:1e:e7:a1:09:42:13:66:29:2f:c6:9f:2e:
                    1a:51:a5:a6:39:96:00:a1:48:58:ad:42:5a:15:21:
                    53:03:0f:10:12:1c:32:82:97:20:9f:00:af:93:f4:
                    02:61:2d:9f:ce:2c:5e:a2:18:1b:94:d5:5d:ae:4e:
                    4c:af:a7:f7:ff:30:5c:49:a8:b2:0e:aa:85:18:73:
                    8f:91:01:c7:81:6a:0a:27:c5:5b:6a:e4:ba:c3:16:
                    2e:fe:68:62:87:7f:73:36:cc:07:7f:b9:50:59:9e:
                    44:11:3b:d0:6c:a3:f0:91:dc:d8:32:a9:c6:9d:aa:
                    a8:12:8e:98:98:45:83:5c:c6:c0:36:8d:e8:fe:b5:
                    94:82:be:09:2f:fa:60:4e:0c:57:f0:17:13:b8:7c:
                    b3:e9:65:a7:ba:5c:a1:d0:a0:10:1a:ed:a8:9e:4d:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:44:A3:C8:02:55:4A:55:F6:0F:2F:C8:FB:D1:6C:89:66:13:7A:CF
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:75:7d:1a:e2:de:ff:0a:06:ca:d4:a6:2b:60:b5:02:d1:43:
         d6:64:53:7f:f7:d2:e2:e6:21:a3:07:ad:03:71:43:39:fb:ac:
         c0:d2:e7:00:5f:ca:86:60:0e:73:9b:57:da:e6:c4:39:ae:56:
         89:39:5c:7c:4b:af:10:da:0e:df:8a:e9:26:4b:25:f9:a4:b7:
         2f:84:57:fa:2b:98:6b:c5:b9:ae:4b:7c:1f:f7:59:63:8b:7d:
         ae:11:2c:64:53:e8:f5:2e:ab:bf:a2:37:56:2a:7c:41:e7:d5:
         03:33:53:79:44:11:82:d9:09:ed:4a:c8:7e:80:a4:82:b3:43:
         ae:ca:6b:0e:d3:d5:83:f2:9a:e4:a9:6a:7e:f9:34:7f:f0:4b:
         1d:4e:2b:da:d0:12:54:f5:a3:9d:94:55:4c:c4:34:c1:a9:30:
         7e:d5:6c:50:bc:67:55:d2:da:5e:e2:06:38:4a:9a:e2:7d:7b:
         de:74:61:91:b7:c5:09:8f:be:13:29:4d:91:7e:54:50:d0:99:
         74:8b:36:6a:0d:73:bd:16:c2:42:68:67:22:65:4c:7a:1c:2c:
         86:b1:57:54:23:f1:22:65:4f:d4:be:54:6c:f2:f2:be:aa:8f:
         26:50:86:ef:7e:70:a1:0b:46:49:87:9d:0e:fc:af:7d:09:47:
         3d:f4:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----