This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa
File:                     3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa (raw, json)
Hash identifier:          gklOE3JWl8azo4FesqCs7OySh+TWwAKgtB1yetuysKs=
Subject key identifier:   9A:F9:29:6F:C0:16:B4:DE:90:E1:F5:70:78:B2:52:D1:42:CB:E1:8B
Certificate issuer:       /CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2
Certificate serial:       7ABD277439D53A08DA7D938BC414A5E3C17E411F
Authority key identifier: E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa
Signing time:             Thu 10 Jul 2025 20:07:15 +0000
ROA not before:           Thu 10 Jul 2025 20:02:15 +0000
ROA not after:            Thu 09 Jul 2026 20:07:15 +0000
asID:                     262285
IP address blocks:        177.52.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bd:27:74:39:d5:3a:08:da:7d:93:8b:c4:14:a5:e3:c1:7e:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2
        Validity
            Not Before: Jul 10 20:02:15 2025 GMT
            Not After : Jul  9 20:07:15 2026 GMT
        Subject: CN=9AF9296FC016B4DE90E1F57078B252D142CBE18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:2e:d7:2e:97:58:a6:04:ae:8d:d7:4c:28:
                    cd:75:bb:a2:12:f6:0c:f3:c7:53:b9:5a:67:60:69:
                    92:78:57:ca:07:1e:07:79:8d:c7:eb:ca:57:8e:b9:
                    ca:a1:78:df:40:56:b8:78:65:85:31:8e:19:17:51:
                    08:35:c4:c9:83:28:d9:6d:26:a0:64:91:9c:ab:d8:
                    bb:f6:e5:52:a2:49:41:af:29:cd:e8:7f:73:d0:6a:
                    ef:5c:1d:8e:eb:c5:1a:52:3f:a7:44:fe:e7:6f:cd:
                    24:7f:f0:1f:a0:7d:96:ef:51:fd:4d:34:24:25:57:
                    81:f8:a3:c6:53:10:ed:d9:05:dd:7f:0d:2f:1a:df:
                    3b:20:3b:1d:bb:df:07:9f:ff:da:1e:aa:7a:dd:f2:
                    3d:7a:19:c0:44:2a:d5:1d:e9:39:8f:3f:01:6f:ab:
                    e0:b4:8c:fd:9f:fd:f8:44:80:41:85:dd:c0:73:f7:
                    3f:ef:96:e7:32:f3:6a:0c:b3:26:2b:45:78:f3:80:
                    53:05:ea:d2:02:a4:d7:c1:21:d5:a2:8c:ab:11:07:
                    4d:52:f5:17:ba:af:34:bd:f7:04:1e:ed:04:b2:fb:
                    72:01:a7:fc:3f:4d:b0:65:d3:42:13:9a:e9:d3:78:
                    40:75:76:7e:b1:70:86:e2:ef:8d:14:33:b6:78:e4:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:29:6F:C0:16:B4:DE:90:E1:F5:70:78:B2:52:D1:42:CB:E1:8B
            X509v3 Authority Key Identifier:
                keyid:E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:98:fa:a9:56:cc:51:a4:24:79:7e:ee:d9:ea:c7:8c:a5:04:
         4b:41:18:90:c4:83:11:42:95:56:b2:21:04:8a:e6:84:b5:99:
         85:2c:53:1b:1e:a1:9b:52:f8:57:c6:4c:9d:61:d0:7e:5b:51:
         05:ca:24:f2:49:f5:8c:c3:88:33:5b:ac:48:09:52:2b:a0:a3:
         47:67:6b:d8:d6:33:df:11:e4:1f:a7:c0:7b:e7:ec:d4:be:af:
         03:da:f4:2c:35:56:a9:a4:ad:eb:9b:ca:3d:a4:03:78:c0:f4:
         c5:49:ae:9b:30:d0:95:ed:dd:73:0f:27:e9:fb:da:9a:ba:2c:
         1c:fa:c1:20:07:bc:27:d8:72:7d:61:3f:04:45:bc:cd:4a:68:
         17:99:51:92:8d:c6:d5:f0:b2:40:5d:5e:d2:92:21:66:a1:c1:
         0d:fc:c9:99:c3:60:4f:1b:4d:24:36:dc:8c:f4:fa:37:51:e1:
         49:37:74:35:e5:6f:d7:25:66:ee:c2:d3:13:d9:0e:5d:26:5b:
         e6:4d:f4:a0:b8:8e:4f:38:16:c0:ec:b6:33:5e:91:7b:ff:40:
         60:d2:8d:79:10:bd:e7:ba:1c:e3:25:3a:7c:c1:5a:39:08:27:
         bc:cf:c2:80:8a:0c:4a:36:69:47:02:3b:cd:7f:5d:a0:9e:45:
         e9:78:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----