This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa
File:                     34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa (raw, json)
Hash identifier:          8+HuMCGexDlGm7COhOr1pGlkInLd3g+uJ1f5bHw93nY=
Subject key identifier:   18:1B:B8:F3:44:86:A7:D1:9D:DC:76:A9:F6:DB:48:28:CF:4F:71:9C
Certificate issuer:       /CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2
Certificate serial:       70381E08764A4A1CDBB1178BD26C62AD4AAF2F1A
Authority key identifier: E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa
Signing time:             Thu 10 Jul 2025 20:06:49 +0000
ROA not before:           Thu 10 Jul 2025 20:01:49 +0000
ROA not after:            Thu 09 Jul 2026 20:06:49 +0000
asID:                     262285
IP address blocks:        45.161.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:38:1e:08:76:4a:4a:1c:db:b1:17:8b:d2:6c:62:ad:4a:af:2f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2
        Validity
            Not Before: Jul 10 20:01:49 2025 GMT
            Not After : Jul  9 20:06:49 2026 GMT
        Subject: CN=181BB8F34486A7D19DDC76A9F6DB4828CF4F719C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:e9:01:d1:40:4d:3e:e0:1f:b9:2b:57:95:
                    34:98:1b:d2:bc:a8:c7:e2:00:76:0d:2b:dd:70:00:
                    bb:36:a4:3b:40:7c:76:99:e3:cf:5c:97:00:e4:56:
                    80:d6:a1:7e:cc:1f:02:8a:55:30:06:12:d2:b2:f9:
                    dc:2f:9d:d4:ac:1a:88:a8:95:7a:ab:7f:9a:5f:eb:
                    2e:d9:b9:45:f2:90:73:16:a0:58:6a:27:dd:45:fb:
                    a2:03:e1:dc:5f:99:b7:c2:c5:c4:99:3e:b3:e6:6c:
                    ae:2d:7c:23:a9:2d:d8:e7:dc:0d:cb:56:82:9a:73:
                    72:30:3f:64:ee:f2:3a:e8:7c:95:4c:a3:54:01:4b:
                    f3:d4:2d:44:2c:54:80:ed:1c:bd:9a:42:9d:e6:2f:
                    53:49:fb:7b:31:f0:37:68:35:da:37:91:17:0f:90:
                    fc:ef:a9:9a:bb:9f:4e:27:1b:f8:f8:c9:e3:65:fb:
                    23:9c:4a:b3:f7:9a:8a:fc:05:a9:79:ce:97:b3:2f:
                    03:d3:e7:18:0d:2c:e8:38:c7:44:de:b6:21:ac:9e:
                    e6:5e:94:ad:a7:b0:fd:47:4c:d5:57:3d:e5:cc:40:
                    f8:18:c2:c4:d6:f1:d2:1d:2a:9e:c5:8b:a8:f4:b5:
                    72:3e:5d:5f:06:d1:a0:d6:e6:74:40:a0:c6:0f:e2:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:B8:F3:44:86:A7:D1:9D:DC:76:A9:F6:DB:48:28:CF:4F:71:9C
            X509v3 Authority Key Identifier:
                keyid:E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:9f:2d:9a:43:d2:f6:46:2d:30:0a:dd:24:e8:7b:12:e0:
         e0:d9:66:bd:82:be:04:17:8b:7c:c3:fd:ff:20:83:5b:53:22:
         07:c1:99:db:8f:b3:9d:57:4d:ea:71:a6:e4:0c:82:21:88:06:
         9e:b8:71:27:05:f4:8d:a1:8a:8c:81:9b:25:d5:67:c7:84:3c:
         1d:f1:09:9b:88:cd:cd:32:9f:e1:e2:1f:a6:ec:ce:33:e1:ef:
         9d:6b:a0:69:22:55:60:ef:78:5d:d9:5c:d4:5e:20:cf:91:28:
         5a:22:9f:37:bd:89:82:89:52:13:01:f0:eb:3d:3e:dd:b6:db:
         1d:68:41:97:3d:32:16:90:80:e1:dd:9a:6b:1e:e2:6c:24:34:
         0e:f8:2f:f7:d9:17:ab:5a:6c:d8:64:7b:1c:0a:16:f5:c1:37:
         91:8b:f4:73:89:2f:6a:03:28:f5:36:77:b1:cc:9c:4e:7e:76:
         fa:2e:54:84:c6:8d:df:d0:67:dc:65:56:3b:9d:65:77:5f:ea:
         fd:db:ae:c3:50:b3:92:8a:ae:1d:24:36:ae:5b:e3:d4:94:f2:
         09:bd:af:94:31:ae:20:10:d0:ef:f8:90:0a:62:df:f0:31:33:
         24:f1:30:53:90:2e:54:ee:69:87:67:1e:bc:e9:25:0d:18:1c:
         4e:c8:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----