This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39382e302f32332d3233203d3e20323730323531.roa
File:                     3230302e3131302e39382e302f32332d3233203d3e20323730323531.roa (raw, json)
Hash identifier:          9hGbE/pMX2vGnuLcQ3T+p9Zti3lhBolaSi6AI08lGEA=
Subject key identifier:   22:5F:1F:FF:32:F0:22:C0:66:89:F5:B8:80:A9:BF:3A:F3:E3:BB:86
Certificate issuer:       /CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
Certificate serial:       1A66BB07D1D1E894924E8EA0352EB720EE889688
Authority key identifier: 07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39382e302f32332d3233203d3e20323730323531.roa
Signing time:             Mon 18 Aug 2025 22:53:38 +0000
ROA not before:           Mon 18 Aug 2025 22:48:38 +0000
ROA not after:            Mon 17 Aug 2026 22:53:38 +0000
asID:                     270251
IP address blocks:        200.110.98.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:66:bb:07:d1:d1:e8:94:92:4e:8e:a0:35:2e:b7:20:ee:88:96:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
        Validity
            Not Before: Aug 18 22:48:38 2025 GMT
            Not After : Aug 17 22:53:38 2026 GMT
        Subject: CN=225F1FFF32F022C06689F5B880A9BF3AF3E3BB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:8b:c1:e6:44:61:ea:f0:16:d8:86:24:a1:
                    b2:ad:f4:36:cf:c9:1a:bd:f3:13:7f:de:04:85:1c:
                    05:0f:7c:f5:86:98:a5:e6:8e:f3:52:4e:fc:98:b3:
                    79:94:5f:71:ca:40:80:33:16:6e:0f:e2:7e:4b:91:
                    f8:c5:4e:f7:9b:c3:a6:c4:df:45:5e:68:ee:e8:20:
                    21:83:e8:93:63:01:de:51:f5:3a:2d:f0:8b:d4:6b:
                    4c:14:0e:99:53:62:eb:fb:bf:83:ee:5b:c8:58:ef:
                    9f:88:74:05:e8:dc:76:cb:52:a0:73:e6:6e:d7:f6:
                    32:b1:f2:cd:de:19:ff:70:5d:6a:15:14:ef:01:1d:
                    0f:a8:76:11:b9:2f:82:39:12:d1:12:b7:ec:d5:03:
                    17:e9:a3:87:e4:c8:58:37:eb:41:b3:46:25:5c:7b:
                    be:e9:15:81:34:8d:89:a9:e0:40:c9:a5:3c:cb:43:
                    be:b6:4e:3b:e0:23:ac:d2:e6:55:9f:85:cb:d3:54:
                    b4:83:90:38:df:b5:80:0f:ae:cd:4c:7a:b5:06:ad:
                    2a:94:d3:75:39:56:59:79:c9:c6:49:a6:f7:68:58:
                    90:dd:f2:ab:d6:79:e4:55:ab:88:fe:72:ea:07:c0:
                    bf:b4:9d:fa:6e:0e:25:4c:98:21:3d:08:07:7f:57:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5F:1F:FF:32:F0:22:C0:66:89:F5:B8:80:A9:BF:3A:F3:E3:BB:86
            X509v3 Authority Key Identifier:
                keyid:07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39382e302f32332d3233203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:66:10:be:2e:1e:3d:c6:e4:45:e7:c4:69:4e:ce:4f:25:a7:
         df:ca:35:cf:1e:d3:55:00:e8:20:8d:2e:79:ee:dd:3d:fa:da:
         e9:be:87:df:73:4d:16:a9:02:5a:55:9a:97:85:7d:7c:fc:6c:
         19:67:17:cd:37:06:b3:05:b9:7a:eb:c8:03:21:fa:47:dc:d9:
         34:da:7c:fa:29:51:ce:2b:78:83:2f:27:e5:ac:10:c7:dc:e3:
         4b:0c:65:8a:3a:f7:07:18:9d:49:c3:30:cb:d6:29:6e:dd:8d:
         ee:b5:40:19:db:24:a0:ae:f9:0b:9b:45:7e:b9:be:e7:e5:15:
         12:07:de:cc:ca:a3:af:5c:69:23:1f:5a:bf:74:d2:c4:91:72:
         e9:0f:b2:79:c8:b0:6b:07:a9:b9:d7:13:86:71:37:8d:5c:08:
         4b:7b:cc:ad:9d:aa:9f:ec:55:88:86:38:ca:d6:12:e0:76:a8:
         8a:b9:c9:97:1e:39:69:4b:83:1d:c5:e2:ca:d4:40:c6:cf:a1:
         77:7d:2a:56:d0:24:91:be:cf:1e:83:4c:7c:5a:57:1b:4d:b5:
         e6:c0:22:75:52:f0:de:5f:30:d8:2e:f0:41:fb:20:49:e1:50:
         1d:9c:1e:1f:f7:d3:68:e6:05:0c:df:f1:87:eb:35:ef:44:70:
         52:df:bd:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGma7B9HR6JSSTo6gNS63IO6IlogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdBNTFFNjhGNDhBRDZFODI0RjQ1ODNCRkVCQkM1NUU2
OUQ0RENDQjAeFw0yNTA4MTgyMjQ4MzhaFw0yNjA4MTcyMjUzMzhaMDMxMTAvBgNV
BAMTKDIyNUYxRkZGMzJGMDIyQzA2Njg5RjVCODgwQTlCRjNBRjNFM0JCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSIvB5kRh6vAW2IYkobKt9DbP
yRq98xN/3gSFHAUPfPWGmKXmjvNSTvyYs3mUX3HKQIAzFm4P4n5LkfjFTvebw6bE
30VeaO7oICGD6JNjAd5R9Tot8IvUa0wUDplTYuv7v4PuW8hY75+IdAXo3HbLUqBz
5m7X9jKx8s3eGf9wXWoVFO8BHQ+odhG5L4I5EtESt+zVAxfpo4fkyFg360GzRiVc
e77pFYE0jYmp4EDJpTzLQ762TjvgI6zS5lWfhcvTVLSDkDjftYAPrs1MerUGrSqU
03U5Vll5ycZJpvdoWJDd8qvWeeRVq4j+cuoHwL+0nfpuDiVMmCE9CAd/V8RFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIl8f/zLwIsBmifW4gKm/OvPju4YwHwYDVR0j
BBgwFoAUB6UeaPSK1ugk9Fg7/rvFXmnU3MswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkR0Tmtwck1tR1pGZGVVek1ZSm54dWtxVXJmVm1LQkJSelI1dEhxUFZC
QnovMC8wN0E1MUU2OEY0OEFENkU4MjRGNDU4M0JGRUJCQzU1RTY5RDREQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3QTUxRTY4RjQ4QUQ2RTgy
NEY0NTgzQkZFQkJDNTVFNjlENERDQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEdE5rcHJNbUdaRmRlVXpNWUpueHVrcVVyZlZtS0JCUnpSNXRIcVBWQkJ6LzAv
MzIzMDMwMmUzMTMxMzAyZTM5MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzMjM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIbmIwDQYJKoZIhvcNAQELBQADggEBADRmEL4u
Hj3G5EXnxGlOzk8lp9/KNc8e01UA6CCNLnnu3T362um+h99zTRapAlpVmpeFfXz8
bBlnF803BrMFuXrryAMh+kfc2TTafPopUc4reIMvJ+WsEMfc40sMZYo69wcYnUnD
MMvWKW7dje61QBnbJKCu+QubRX65vuflFRIH3szKo69caSMfWr900sSRcukPsnnI
sGsHqbnXE4ZxN41cCEt7zK2dqp/sVYiGOMrWEuB2qIq5yZceOWlLgx3F4srUQMbP
oXd9KlbQJJG+zx6DTHxaVxtNtebAInVS8N5fMNgu8EH7IEnhUB2cHh/302jmBQzf
8YfrNe9EcFLfvcY=
-----END CERTIFICATE-----