This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa
File:                     34352e37312e32302e302f32332d3233203d3e20323637353936.roa (raw, json)
Hash identifier:          zO4I0qndWmCmnKcO/HqSBUXpHWY4VpaAjJ0Hv1qBqn8=
Subject key identifier:   A2:EC:9D:61:94:BB:59:8F:02:3D:14:86:8F:F0:DE:10:20:5A:A7:6E
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       4ADE13D678EB5F3FE90BC5DF7A3777D363CE27AB
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa
Signing time:             Tue 21 Jan 2025 13:50:40 +0000
ROA not before:           Tue 21 Jan 2025 13:45:40 +0000
ROA not after:            Tue 20 Jan 2026 13:50:40 +0000
asID:                     267596
IP address blocks:        45.71.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:13:d6:78:eb:5f:3f:e9:0b:c5:df:7a:37:77:d3:63:ce:27:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Jan 21 13:45:40 2025 GMT
            Not After : Jan 20 13:50:40 2026 GMT
        Subject: CN=A2EC9D6194BB598F023D14868FF0DE10205AA76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:02:88:e6:ba:1d:a8:9a:c3:f6:e0:2b:fc:
                    45:07:4c:ca:9c:38:39:1b:63:f9:35:a7:df:05:2b:
                    cc:54:eb:16:2a:9a:83:74:bd:19:9f:8e:2f:8a:b0:
                    60:85:f7:b0:d5:3f:f7:42:33:87:d2:45:6f:f5:b2:
                    0b:f6:c0:95:79:3f:14:80:a7:bb:6e:ab:d6:0b:51:
                    87:89:00:d8:5e:c6:6b:4c:f3:46:69:dc:98:4b:ee:
                    4f:ef:34:d0:17:5f:6d:92:5f:5a:24:57:a8:3d:1c:
                    85:ad:c0:5f:52:a1:f1:59:c2:bd:a5:28:59:6a:e1:
                    e3:18:93:4f:df:ef:52:f7:71:0f:f3:c9:b5:80:b4:
                    b4:1c:a9:36:6f:ca:25:29:32:a7:3f:02:8c:4e:81:
                    8f:b2:81:ba:21:9b:c3:ca:7d:6e:6b:b1:18:cd:99:
                    3c:3a:7a:a9:85:ca:f0:72:75:d7:89:a2:bd:8b:08:
                    77:b7:82:3a:40:22:26:da:7c:4c:09:d3:13:ce:f7:
                    37:39:00:9f:6d:41:9d:28:b6:ba:1f:2e:39:d8:e1:
                    70:fd:b9:a7:08:e7:3d:04:98:c1:21:14:a5:7e:5a:
                    db:1c:dc:a8:0d:9d:33:d9:6e:cc:80:19:9c:65:5a:
                    4f:92:18:af:c3:43:2b:9e:1f:78:eb:2d:84:f9:de:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EC:9D:61:94:BB:59:8F:02:3D:14:86:8F:F0:DE:10:20:5A:A7:6E
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:b6:4b:67:65:c9:25:8c:2b:9c:4f:4b:12:41:bd:c5:56:
         38:44:a4:d1:49:54:89:3b:15:a5:5b:4a:1e:48:4d:4d:bd:6b:
         6a:66:35:7f:ad:d1:f7:42:14:e2:2a:4e:8d:43:c8:2a:29:0b:
         d3:29:d4:e1:7b:c3:d7:c7:4d:e7:65:20:e5:67:0d:40:f2:7c:
         3c:82:62:fe:d8:a7:1d:61:f4:5e:c6:18:fe:cc:68:b7:33:f8:
         2d:7f:a2:1f:86:45:cb:c8:48:d2:6f:80:90:e4:fa:11:7a:de:
         bd:62:8d:ca:99:30:a9:80:8a:b4:06:ff:b0:20:10:27:78:83:
         05:e8:c6:29:55:9b:39:5e:a5:8d:91:28:50:9c:28:a0:ce:87:
         dc:38:e9:b0:8d:95:c8:d6:74:31:66:9a:5e:e5:74:8a:41:63:
         b1:73:fd:9f:c0:72:50:1d:dc:39:5b:d7:ab:8f:c8:88:2d:af:
         8a:8c:5b:aa:fa:f9:29:fb:93:64:e4:d9:ee:04:bf:d7:44:25:
         b0:52:63:20:93:e5:c4:1a:62:a6:38:03:27:8b:9a:29:05:c5:
         e9:97:89:75:30:24:9a:cb:61:af:dd:f4:50:f2:01:40:da:2e:
         46:a6:c1:c6:d0:22:54:43:67:0d:05:14:57:b4:dd:c0:f8:16:
         43:84:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----