This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135372e302f32342d3234203d3e20323635323536.roa
File:                     3136382e302e3135372e302f32342d3234203d3e20323635323536.roa (raw, json)
Hash identifier:          iq3eHJJd8Aedjy0i0Zhd6xKELVJ/B71/Iyh2QmPYdtk=
Subject key identifier:   CB:17:40:FD:7D:A0:C6:13:70:58:3E:51:90:03:11:FC:38:03:8A:26
Certificate issuer:       /CN=1D98467C905A92172F884A0A1419F30237985451
Certificate serial:       7F09CDC26EF16A336522FCB87BE1B71E7FCEE454
Authority key identifier: 1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135372e302f32342d3234203d3e20323635323536.roa
Signing time:             Sat 30 Aug 2025 00:11:31 +0000
ROA not before:           Sat 30 Aug 2025 00:06:31 +0000
ROA not after:            Sat 29 Aug 2026 00:11:31 +0000
asID:                     265256
IP address blocks:        168.0.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:09:cd:c2:6e:f1:6a:33:65:22:fc:b8:7b:e1:b7:1e:7f:ce:e4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D98467C905A92172F884A0A1419F30237985451
        Validity
            Not Before: Aug 30 00:06:31 2025 GMT
            Not After : Aug 29 00:11:31 2026 GMT
        Subject: CN=CB1740FD7DA0C61370583E51900311FC38038A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:b5:37:52:96:e5:f1:66:20:0a:25:ae:4f:
                    8f:8b:6a:44:50:e0:c3:3c:bf:9e:b5:e6:80:db:c4:
                    49:a4:62:95:11:1f:ce:cd:89:99:53:4e:66:a1:3c:
                    9a:84:86:a5:18:dd:89:a5:23:56:b3:7a:56:a3:d4:
                    ec:8e:05:ea:2f:d6:4b:e0:0e:c3:99:5b:4e:ca:d4:
                    26:5e:e2:df:02:ee:ed:37:69:75:ee:8e:f6:7a:0b:
                    3e:46:dd:77:5f:c2:58:44:b5:46:76:6c:2d:9b:65:
                    1f:89:9f:c8:8a:9a:37:d9:1b:d8:31:01:9c:4f:0a:
                    cb:f6:60:df:af:33:60:cb:87:55:70:b1:0d:3e:06:
                    ad:4c:f3:23:ab:75:da:b1:14:f1:55:57:86:c2:89:
                    97:04:c8:17:41:19:9a:90:03:7f:c2:f2:c3:86:8d:
                    4c:47:bb:c8:bc:7a:63:1f:47:5d:7c:af:e6:bb:79:
                    18:2e:73:80:47:fb:ba:19:17:fa:5e:b4:d5:8b:76:
                    d2:60:a0:5c:5a:e2:a0:a9:d0:fe:e3:9e:cd:97:c0:
                    35:69:10:6c:ac:cb:f8:be:92:79:73:d2:0f:2a:f2:
                    83:da:1d:0b:31:83:d0:4a:a9:c9:27:0d:bb:98:d4:
                    99:59:c6:1d:83:0d:66:86:ac:ee:f9:7f:6f:3e:ac:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:17:40:FD:7D:A0:C6:13:70:58:3E:51:90:03:11:FC:38:03:8A:26
            X509v3 Authority Key Identifier:
                keyid:1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135372e302f32342d3234203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:48:44:08:de:ec:73:6e:f2:46:45:07:72:06:83:b7:24:
         5d:29:20:af:d9:30:19:66:19:ba:78:80:db:c1:75:3f:36:d0:
         b3:a2:8c:a2:f4:22:61:84:c2:05:22:c2:d8:cf:87:f5:40:a0:
         6e:59:59:ca:5f:13:cc:89:b2:4b:54:ea:e1:02:7a:be:22:63:
         41:8a:bd:9d:7c:6d:b1:97:5c:ba:9a:86:66:60:ac:0e:04:f2:
         b4:ac:b3:cb:81:79:df:fe:22:76:eb:60:1a:e0:75:40:ab:88:
         2e:40:73:13:85:45:09:61:52:85:5a:70:b5:62:9d:db:fb:ab:
         f5:3b:00:7d:71:80:26:75:6e:05:00:31:f1:c1:a2:c2:8e:6a:
         79:a3:78:9f:bf:30:6e:a0:0a:25:20:3a:2e:78:84:1a:da:31:
         74:77:99:51:bb:2d:6c:64:09:80:8a:f2:3b:8e:f7:a5:a0:75:
         92:fc:0e:95:19:8c:4d:f1:a9:e5:b4:93:93:dc:7f:1a:d1:81:
         ef:cd:cf:f0:f6:6c:18:67:a1:3d:c1:4f:ba:58:21:da:ef:be:
         bf:3f:7d:31:01:a9:5f:10:93:3a:84:0b:f6:59:5b:71:86:16:
         ee:96:31:51:66:73:f1:18:fc:38:07:38:36:9b:9d:4f:a2:2a:
         03:45:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----