This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32322d3332203d3e20323632383138.roa
File:                     3138362e3235302e3136302e302f32322d3332203d3e20323632383138.roa (raw, json)
Hash identifier:          MHnZ8mlvOU/jVler+NqCQij7yp4dQwW78BO5OjrasbI=
Subject key identifier:   08:1E:C1:60:1E:81:51:E0:4C:BC:2F:19:2B:12:FD:EE:6C:4E:E2:68
Certificate issuer:       /CN=D3237D5995E1D5C681CD7F512F69829F6DB60E6A
Certificate serial:       1CD3608B31779A34725F0B1EEB14B8F5F74EAD1B
Authority key identifier: D3:23:7D:59:95:E1:D5:C6:81:CD:7F:51:2F:69:82:9F:6D:B6:0E:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32322d3332203d3e20323632383138.roa
Signing time:             Wed 09 Apr 2025 14:09:25 +0000
ROA not before:           Wed 09 Apr 2025 14:04:25 +0000
ROA not after:            Wed 08 Apr 2026 14:09:25 +0000
asID:                     262818
IP address blocks:        186.250.160.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d3:60:8b:31:77:9a:34:72:5f:0b:1e:eb:14:b8:f5:f7:4e:ad:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3237D5995E1D5C681CD7F512F69829F6DB60E6A
        Validity
            Not Before: Apr  9 14:04:25 2025 GMT
            Not After : Apr  8 14:09:25 2026 GMT
        Subject: CN=081EC1601E8151E04CBC2F192B12FDEE6C4EE268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:d7:d8:63:a8:fb:58:a2:fc:45:7c:c6:fe:
                    11:60:c3:ac:94:59:42:dc:f7:75:ce:05:d1:8b:ed:
                    b1:4a:43:78:e6:58:5b:9a:84:f7:1b:bd:c4:b0:50:
                    6b:14:1f:97:f0:67:7b:51:f2:a5:c8:70:59:b6:50:
                    af:96:2d:af:8d:36:9e:24:59:22:ff:62:1a:03:29:
                    b9:46:aa:d5:e6:55:ce:51:e7:f0:ef:d2:a0:15:81:
                    86:fa:1b:02:3b:74:46:36:cd:74:88:cd:8e:7d:35:
                    f1:34:fc:b7:97:4c:c7:dd:29:7f:46:3d:bc:58:b9:
                    b6:79:c2:52:f4:df:ee:a9:88:fa:de:7a:5d:30:47:
                    01:22:ea:59:70:81:0c:fa:cc:1f:60:65:bd:37:64:
                    f7:e9:c2:a0:31:98:48:96:b1:05:6a:e5:e4:74:f0:
                    06:2b:4e:08:77:4c:8c:9c:0a:2a:f3:82:94:f7:2a:
                    ac:63:e5:39:0b:df:72:13:38:38:3a:c2:df:03:b8:
                    c2:41:b0:93:c5:0e:52:f9:83:bd:14:68:ac:ff:1d:
                    0f:57:0a:28:67:c9:71:59:af:d8:dd:8a:30:9a:f5:
                    32:e0:d9:f2:b5:10:14:3a:44:c9:61:04:95:2d:e2:
                    7c:05:d7:d4:75:9e:1e:db:91:46:a8:5a:5c:64:22:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1E:C1:60:1E:81:51:E0:4C:BC:2F:19:2B:12:FD:EE:6C:4E:E2:68
            X509v3 Authority Key Identifier:
                keyid:D3:23:7D:59:95:E1:D5:C6:81:CD:7F:51:2F:69:82:9F:6D:B6:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/3138362e3235302e3136302e302f32322d3332203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:51:2c:2e:a9:aa:e9:84:87:d8:8b:4b:36:2a:28:ec:13:
         67:fe:de:45:87:4a:93:74:15:c5:a8:cf:5d:c4:54:ee:d4:bb:
         82:3c:75:6d:12:39:64:55:e4:56:6f:97:7d:ef:bd:cc:5f:c9:
         f8:bb:b7:6f:e2:2e:b2:dc:aa:3b:fa:a1:8b:9b:08:57:52:27:
         f6:1c:2f:81:d6:be:2e:b7:37:0c:8c:47:6c:41:e8:f3:cc:77:
         ac:d4:c8:db:4d:09:55:ef:d8:ea:a3:5b:02:57:fc:f8:03:df:
         3e:95:1d:3a:d4:37:f6:13:d4:0e:ee:c8:c0:00:2b:bd:22:a3:
         6c:4d:18:7c:0b:29:fd:6b:bc:cb:7e:c9:b9:91:37:c8:d9:17:
         d3:61:13:2b:7d:53:4e:e0:7e:97:a0:88:ea:9d:de:88:ee:09:
         1b:1e:21:78:0a:9e:9d:b7:b6:0b:cc:3d:30:7e:89:d1:2a:88:
         66:0f:d4:5e:ec:92:49:9c:f0:d2:63:a6:4b:c9:2d:3e:45:15:
         73:f5:91:7f:17:9d:c4:de:7d:b6:a7:6b:37:8c:62:cf:a4:4e:
         df:21:e8:73:ed:1c:d4:5a:e2:fd:e6:ed:6f:94:3d:16:8f:67:
         9a:15:cd:d3:07:cd:c2:a6:44:42:ce:d0:66:4e:6e:b7:0b:7c:
         52:a4:20:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHNNgizF3mjRyXwse6xS49fdOrRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMzdENTk5NUUxRDVDNjgxQ0Q3RjUxMkY2OTgyOUY2
REI2MEU2QTAeFw0yNTA0MDkxNDA0MjVaFw0yNjA0MDgxNDA5MjVaMDMxMTAvBgNV
BAMTKDA4MUVDMTYwMUU4MTUxRTA0Q0JDMkYxOTJCMTJGREVFNkM0RUUyNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUdfYY6j7WKL8RXzG/hFgw6yU
WULc93XOBdGL7bFKQ3jmWFuahPcbvcSwUGsUH5fwZ3tR8qXIcFm2UK+WLa+NNp4k
WSL/YhoDKblGqtXmVc5R5/Dv0qAVgYb6GwI7dEY2zXSIzY59NfE0/LeXTMfdKX9G
PbxYubZ5wlL03+6piPreel0wRwEi6llwgQz6zB9gZb03ZPfpwqAxmEiWsQVq5eR0
8AYrTgh3TIycCirzgpT3Kqxj5TkL33ITODg6wt8DuMJBsJPFDlL5g70UaKz/HQ9X
CihnyXFZr9jdijCa9TLg2fK1EBQ6RMlhBJUt4nwF19R1nh7bkUaoWlxkIu6dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCB7BYB6BUeBMvC8ZKxL97mxO4mgwHwYDVR0j
BBgwFoAU0yN9WZXh1caBzX9RL2mCn222DmowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNyU3A4R3Q1YXhEVmZyeUZwTkV3MURONVRTOGV4WDZjc2o4RXRVZHVH
Zm0vMC9EMzIzN0Q1OTk1RTFENUM2ODFDRDdGNTEyRjY5ODI5RjZEQjYwRTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjM3RDU5OTVFMUQ1QzY4
MUNEN0Y1MTJGNjk4MjlGNkRCNjBFNkEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDclNwOEd0NWF4RFZmcnlGcE5FdzFETjVUUzhleFg2Y3NqOEV0VWR1R2ZtLzAv
MzEzODM2MmUzMjM1MzAyZTMxMzYzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjM4MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArr6oDANBgkqhkiG9w0BAQsFAAOCAQEAjIVR
LC6pqumEh9iLSzYqKOwTZ/7eRYdKk3QVxajPXcRU7tS7gjx1bRI5ZFXkVm+Xfe+9
zF/J+Lu3b+IustyqO/qhi5sIV1In9hwvgda+Lrc3DIxHbEHo88x3rNTI200JVe/Y
6qNbAlf8+APfPpUdOtQ39hPUDu7IwAArvSKjbE0YfAsp/Wu8y37JuZE3yNkX02ET
K31TTuB+l6CI6p3eiO4JGx4heAqenbe2C8w9MH6J0SqIZg/UXuySSZzw0mOmS8kt
PkUVc/WRfxedxN59tqdrN4xiz6RO3yHoc+0c1Fri/ebtb5Q9Fo9nmhXN0wfNwqZE
Qs7QZk5utwt8UqQgLA==
-----END CERTIFICATE-----