This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32322d3232203d3e20323637353936.roa
File:                     34352e37312e32302e302f32322d3232203d3e20323637353936.roa (raw, json)
Hash identifier:          0QXSTautiCyMFupNZxOXq4YJInWZvXr4WcMR6zNjHRg=
Subject key identifier:   46:75:DB:30:8A:A1:C6:F9:E7:0B:F1:73:5C:42:2A:E6:6A:39:34:61
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       275881D43ECAD5CE1FCA6D3962B300327AEEB095
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32322d3232203d3e20323637353936.roa
Signing time:             Tue 21 Jan 2025 13:50:38 +0000
ROA not before:           Tue 21 Jan 2025 13:45:38 +0000
ROA not after:            Tue 20 Jan 2026 13:50:38 +0000
asID:                     267596
IP address blocks:        45.71.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:58:81:d4:3e:ca:d5:ce:1f:ca:6d:39:62:b3:00:32:7a:ee:b0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Jan 21 13:45:38 2025 GMT
            Not After : Jan 20 13:50:38 2026 GMT
        Subject: CN=4675DB308AA1C6F9E70BF1735C422AE66A393461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:44:50:92:79:f9:a0:57:d0:a6:e2:70:a7:
                    2d:76:06:f8:e4:fc:63:92:66:c5:cb:6f:08:55:cd:
                    81:54:0b:1f:e1:f1:c2:e4:aa:d6:71:d4:f9:15:e0:
                    dd:c3:03:e8:06:7f:be:e9:7e:f5:f4:2d:87:3d:e2:
                    62:92:78:69:80:4b:c0:9d:82:86:4a:f9:7c:cd:de:
                    d5:5f:f7:cd:d1:69:6b:04:57:13:98:d8:3d:6f:94:
                    4c:49:4a:5d:9e:35:71:28:48:78:c3:1e:73:53:e9:
                    f4:30:51:14:e7:4e:95:aa:f7:c3:30:e0:43:64:03:
                    e3:9a:f2:f0:bc:e7:6f:b3:54:43:d0:26:e4:df:3a:
                    0c:e6:a1:5d:7f:48:b6:b5:75:ea:f6:0a:ed:8d:47:
                    a4:ef:58:05:99:0a:3b:e3:f3:b9:76:7d:03:25:69:
                    f6:f3:87:8d:ab:8d:97:8a:27:36:d7:d9:08:21:55:
                    13:51:06:bf:43:10:12:e1:f9:99:62:04:e0:a1:d5:
                    70:5d:3b:70:96:0f:7c:48:10:d3:20:c2:af:40:af:
                    52:dd:98:e5:ee:42:1d:d2:4a:f1:41:7c:41:40:ba:
                    6d:25:c5:a3:ec:f6:b4:22:29:02:ce:45:db:b1:47:
                    4d:06:b4:55:fc:80:5b:06:21:66:9a:ad:c8:20:99:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:DB:30:8A:A1:C6:F9:E7:0B:F1:73:5C:42:2A:E6:6A:39:34:61
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32322d3232203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:29:0b:91:26:0a:2f:3f:9a:70:ce:0f:cb:7e:4e:ea:ee:
         e1:9c:91:5e:5b:0c:25:a5:91:b4:fc:f9:9e:b0:f1:3e:c2:17:
         09:a1:30:fb:dd:48:b7:d8:27:f2:5c:61:f2:5d:f6:d1:8c:ff:
         7e:4c:b8:86:48:a1:b3:89:84:0a:5d:da:af:70:e1:67:6b:1e:
         28:a4:d1:ff:c9:be:c8:bb:c2:9b:2c:ac:7f:3d:2c:4e:33:3d:
         c1:d0:1e:fb:92:bf:62:d6:70:cd:7b:2b:41:84:0e:68:e1:59:
         95:5b:4e:27:1c:62:5d:cf:7e:d7:08:2b:16:5b:91:c1:7e:d5:
         47:e3:c1:dd:ff:76:a0:81:54:48:5e:eb:6c:06:7a:13:a9:ca:
         33:12:73:fa:dd:ee:13:e1:a7:f0:fb:99:39:68:a0:73:4b:9b:
         8f:9e:ff:61:a2:c0:25:df:43:63:7b:9b:b4:da:04:9f:70:a1:
         0f:8f:92:23:41:c6:c3:2b:8d:a7:c8:94:81:4d:d2:f9:84:34:
         50:36:0f:bf:89:23:1a:36:a3:de:ce:00:2f:4c:ce:d0:c9:17:
         c5:34:50:5a:e9:bc:21:d1:8d:2c:19:2b:db:d3:8a:da:2f:c2:
         79:54:94:ca:42:37:a1:ff:17:18:20:e8:4d:6c:5d:bd:e9:ff:
         d9:2a:07:4e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJ1iB1D7K1c4fym05YrMAMnrusJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMzQkQ2Mzk4OTIwQTU3M0QxMEEyMzJFRjRGNDNGOEFC
RjVCNDE1MzAeFw0yNTAxMjExMzQ1MzhaFw0yNjAxMjAxMzUwMzhaMDMxMTAvBgNV
BAMTKDQ2NzVEQjMwOEFBMUM2RjlFNzBCRjE3MzVDNDIyQUU2NkEzOTM0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdR0RQknn5oFfQpuJwpy12Bvjk
/GOSZsXLbwhVzYFUCx/h8cLkqtZx1PkV4N3DA+gGf77pfvX0LYc94mKSeGmAS8Cd
goZK+XzN3tVf983RaWsEVxOY2D1vlExJSl2eNXEoSHjDHnNT6fQwURTnTpWq98Mw
4ENkA+Oa8vC852+zVEPQJuTfOgzmoV1/SLa1der2Cu2NR6TvWAWZCjvj87l2fQMl
afbzh42rjZeKJzbX2QghVRNRBr9DEBLh+ZliBOCh1XBdO3CWD3xIENMgwq9Ar1Ld
mOXuQh3SSvFBfEFAum0lxaPs9rQiKQLORduxR00GtFX8gFsGIWaarcggmeTDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQURnXbMIqhxvnnC/FzXEIq5mo5NGEwHwYDVR0j
BBgwFoAUjDvWOYkgpXPRCiMu9PQ/ir9bQVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkE1YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3
c3ovMC84QzNCRDYzOTg5MjBBNTczRDEwQTIzMkVGNEY0M0Y4QUJGNUI0MTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDM0JENjM5ODkyMEE1NzNE
MTBBMjMyRUY0RjQzRjhBQkY1QjQxNTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pBNWFHZlBTNVhoMkR6VGJYb000aE02ekYxdVl5NnFmVlhUTFVqRlU2N3N6LzAv
MzQzNTJlMzczMTJlMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNzM1
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1HFDANBgkqhkiG9w0BAQsFAAOCAQEAYfMpC5EmCi8/
mnDOD8t+Turu4ZyRXlsMJaWRtPz5nrDxPsIXCaEw+91It9gn8lxh8l320Yz/fky4
hkihs4mECl3ar3DhZ2seKKTR/8m+yLvCmyysfz0sTjM9wdAe+5K/YtZwzXsrQYQO
aOFZlVtOJxxiXc9+1wgrFluRwX7VR+PB3f92oIFUSF7rbAZ6E6nKMxJz+t3uE+Gn
8PuZOWigc0ubj57/YaLAJd9DY3ubtNoEn3ChD4+SI0HGwyuNp8iUgU3S+YQ0UDYP
v4kjGjaj3s4AL0zO0MkXxTRQWum8IdGNLBkr29OK2i/CeVSUykI3of8XGCDoTWxd
ven/2SoHTg==
-----END CERTIFICATE-----