This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32342d3234203d3e20323638323930.roa
File:                     34352e3233372e3230342e302f32342d3234203d3e20323638323930.roa (raw, json)
Hash identifier:          HlnsIrIXegHYw8WYqJ7TRiE2SvrsLFxf9vHyUbWbKw0=
Subject key identifier:   2D:D6:DA:5C:86:95:D6:77:03:E8:FE:79:BF:E5:1D:52:3B:A4:75:B7
Certificate issuer:       /CN=52937F241DD078A0CCBA97C8DEB63507075B2045
Certificate serial:       3266BCF0E53F30066C9842EBDC71EA3E792BE971
Authority key identifier: 52:93:7F:24:1D:D0:78:A0:CC:BA:97:C8:DE:B6:35:07:07:5B:20:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52937F241DD078A0CCBA97C8DEB63507075B2045.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32342d3234203d3e20323638323930.roa
Signing time:             Mon 15 Sep 2025 13:01:37 +0000
ROA not before:           Mon 15 Sep 2025 12:56:37 +0000
ROA not after:            Mon 14 Sep 2026 13:01:37 +0000
asID:                     268290
IP address blocks:        45.237.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:bc:f0:e5:3f:30:06:6c:98:42:eb:dc:71:ea:3e:79:2b:e9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52937F241DD078A0CCBA97C8DEB63507075B2045
        Validity
            Not Before: Sep 15 12:56:37 2025 GMT
            Not After : Sep 14 13:01:37 2026 GMT
        Subject: CN=2DD6DA5C8695D67703E8FE79BFE51D523BA475B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:6f:1f:6b:be:de:40:7f:91:08:1a:39:ad:
                    b2:b1:26:03:00:53:96:bc:db:f2:b7:db:1c:8a:0c:
                    e4:69:82:b4:8a:9c:1c:8a:d7:da:21:7c:4c:66:2e:
                    0f:53:33:52:f7:e0:8a:1f:4c:03:ec:fd:9f:f2:45:
                    a3:1b:6d:b3:c2:83:a4:59:9f:b0:ea:d9:0b:86:f9:
                    fe:49:d6:2f:df:a3:41:0d:1a:3a:e2:04:42:f4:83:
                    69:aa:2f:9a:da:75:ad:d4:4a:8c:d6:16:13:f9:33:
                    77:34:36:77:6d:47:df:fd:15:60:69:77:cc:ac:dd:
                    1b:b3:3f:2c:7f:8d:4f:d2:f7:bf:ab:cb:c7:9f:78:
                    cf:bb:c3:a2:13:b5:45:e7:d4:64:1a:12:43:04:94:
                    9c:96:c5:69:22:70:71:14:8c:02:db:83:b8:24:d0:
                    58:c6:7c:f5:55:18:c3:b0:71:7c:85:8a:3a:38:5e:
                    60:ad:fd:4a:fe:ba:4d:3d:48:64:d4:48:bf:ab:b4:
                    f0:26:71:ad:a1:96:4d:d0:25:42:89:06:74:51:57:
                    aa:39:ef:c1:7f:a6:66:c1:7f:3d:da:03:ba:30:a4:
                    36:87:c8:0c:d9:3e:06:6c:39:c1:e4:88:32:52:cf:
                    48:fd:74:59:49:6e:79:a8:47:ff:b1:12:bc:07:b2:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D6:DA:5C:86:95:D6:77:03:E8:FE:79:BF:E5:1D:52:3B:A4:75:B7
            X509v3 Authority Key Identifier:
                keyid:52:93:7F:24:1D:D0:78:A0:CC:BA:97:C8:DE:B6:35:07:07:5B:20:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/52937F241DD078A0CCBA97C8DEB63507075B2045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52937F241DD078A0CCBA97C8DEB63507075B2045.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32342d3234203d3e20323638323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:22:5b:33:da:42:6b:16:26:6a:bb:4c:55:1c:b2:e0:60:
         fd:dc:a8:ce:3b:ab:35:88:5e:9f:f7:06:a9:89:e1:98:d4:6f:
         89:00:c7:2d:44:0b:00:cd:37:82:71:8f:7a:20:3f:6a:02:6a:
         b0:1e:18:7e:5b:0e:5a:3d:88:cb:f6:11:d4:f1:44:11:e2:f4:
         5b:67:1c:61:90:b6:9c:35:bc:8d:a6:60:87:57:b3:18:cc:fb:
         85:af:42:65:8e:33:0a:96:62:0a:61:a3:b1:65:96:c4:82:4e:
         dc:48:8e:26:bf:93:46:68:0a:65:84:dc:32:90:bd:6d:86:10:
         67:8b:33:bb:5b:5a:63:47:29:83:03:73:d0:97:23:06:dc:78:
         88:cb:50:e5:f0:55:1b:ce:30:38:0a:fe:15:42:d5:2f:02:50:
         cd:74:2a:c4:1b:f4:33:e3:71:9d:91:9b:0f:80:93:19:56:74:
         17:09:82:02:1a:33:76:9a:40:09:1a:ea:67:62:5f:29:84:d5:
         7c:7b:29:0e:90:1f:48:b5:7b:65:62:82:76:dc:1f:97:42:c8:
         00:78:d9:fa:8d:f4:2d:0d:39:fc:34:f9:59:21:4a:56:c1:2c:
         c6:a0:1c:2e:b0:f1:c5:72:a9:a5:b7:9e:4d:82:c3:65:c2:f9:
         68:89:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----