This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38312e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e38312e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          1xg8sMtKg2oTvnFwxEmfWpprd5qLzeu5JaYLkxxMioM=
Subject key identifier:   59:EB:E9:84:05:6E:C6:07:C2:A3:49:45:92:59:0F:30:E9:6D:09:3A
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       6546AFAC00CA10A6AAEBCBE56778483CF41D80E4
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38312e302f32342d3234203d3e203233303734.roa
Signing time:             Wed 23 Jul 2025 03:13:02 +0000
ROA not before:           Wed 23 Jul 2025 03:08:02 +0000
ROA not after:            Wed 22 Jul 2026 03:13:02 +0000
asID:                     23074
IP address blocks:        164.85.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:af:ac:00:ca:10:a6:aa:eb:cb:e5:67:78:48:3c:f4:1d:80:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 23 03:08:02 2025 GMT
            Not After : Jul 22 03:13:02 2026 GMT
        Subject: CN=59EBE984056EC607C2A3494592590F30E96D093A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:e7:5d:98:fe:1f:22:ea:70:dd:9a:28:0b:
                    b8:2f:c0:86:9d:5e:2f:9e:04:33:c4:3b:b4:cc:6c:
                    32:8f:ab:1d:3d:16:2f:08:db:cf:c3:6d:cb:05:2a:
                    7a:a9:32:e4:cb:9e:b8:14:f0:70:37:c2:9a:d6:66:
                    fc:fc:47:63:c1:d4:36:60:6f:53:a8:73:08:91:77:
                    ec:39:38:fa:c0:47:d4:b4:b3:80:45:f9:37:33:09:
                    ff:ed:ca:06:83:f5:e8:1e:bd:c9:4e:c1:ee:cc:6e:
                    96:73:b2:8e:cd:d4:92:fa:16:14:1b:3d:8e:1b:87:
                    25:1b:82:8b:50:86:dc:ed:8a:5c:f5:b1:30:72:0d:
                    61:92:d9:7f:ca:b3:71:76:1c:12:57:2d:a0:89:56:
                    47:42:92:0a:e4:7b:bb:86:3f:bc:95:43:89:b1:45:
                    67:cf:df:e8:cf:e2:a2:39:06:26:bf:95:0e:58:c5:
                    c2:78:0a:d5:c4:7e:d4:69:40:e3:5a:fb:f6:86:cf:
                    2e:da:1f:21:9a:ff:f6:d2:e0:d3:73:bc:2e:57:6c:
                    a7:f1:3f:97:c2:35:29:db:a4:2b:80:97:03:11:21:
                    05:f7:18:44:9e:45:6d:3b:27:bd:60:42:cc:0e:fe:
                    cd:cd:13:b4:47:73:e1:c7:f6:41:7a:56:19:df:f7:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EB:E9:84:05:6E:C6:07:C2:A3:49:45:92:59:0F:30:E9:6D:09:3A
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38312e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:3b:3e:1e:fc:29:ab:89:f3:9e:52:79:40:b6:6f:b4:50:
         86:a5:a4:93:56:4c:cc:84:f4:c3:95:c1:45:d7:6e:ac:5f:35:
         f0:8d:4c:c2:b6:14:ff:72:8d:d5:81:dc:d0:9f:ec:86:05:71:
         d7:2d:4e:c6:1c:8e:8a:91:31:a7:4b:a1:ee:e5:91:84:7b:3a:
         2d:5d:41:ff:38:2d:d2:53:be:6f:aa:b8:28:6e:7c:69:b9:ad:
         ab:f1:cc:97:1c:39:12:92:9f:1b:b2:64:13:10:b8:42:ef:d0:
         b8:9e:4c:1e:d5:75:31:d6:d2:41:20:d2:00:f3:16:52:82:82:
         6f:08:e4:e3:34:c9:9b:ed:ef:ea:db:9a:7e:a1:0f:10:3f:f7:
         99:bd:08:c4:d9:44:ae:70:72:ba:01:85:34:29:64:0e:44:75:
         54:c5:7d:b8:8a:58:70:96:64:1a:59:cc:f9:a6:fe:f9:a5:81:
         b4:e8:cb:e2:1b:1b:fd:ff:ef:c2:a5:3c:82:19:62:bb:d2:60:
         80:29:a3:1b:62:f4:23:d3:b1:04:7e:ae:76:1d:21:31:75:2e:
         09:b4:a3:77:83:dc:7d:55:fc:8a:2b:8b:0e:0f:b4:74:e1:3a:
         cd:a3:98:d4:77:1f:d4:cd:07:58:74:39:05:b4:a6:0c:0b:2d:
         ef:9a:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----