This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135382e302f32342d3234203d3e20323635323536.roa
File:                     3136382e302e3135382e302f32342d3234203d3e20323635323536.roa (raw, json)
Hash identifier:          Ba2qCzRMq7rxZFCA8qhMk21cyI4obAB6zG8l5lImHPg=
Subject key identifier:   E9:9C:47:D8:6C:67:6B:7F:D4:A8:D0:F7:B4:1A:46:80:CA:CB:D4:9C
Certificate issuer:       /CN=1D98467C905A92172F884A0A1419F30237985451
Certificate serial:       4033EE881A3C72C9F0BA2D3260E8B35F76179B4F
Authority key identifier: 1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135382e302f32342d3234203d3e20323635323536.roa
Signing time:             Sat 30 Aug 2025 00:11:43 +0000
ROA not before:           Sat 30 Aug 2025 00:06:43 +0000
ROA not after:            Sat 29 Aug 2026 00:11:43 +0000
asID:                     265256
IP address blocks:        168.0.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:ee:88:1a:3c:72:c9:f0:ba:2d:32:60:e8:b3:5f:76:17:9b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D98467C905A92172F884A0A1419F30237985451
        Validity
            Not Before: Aug 30 00:06:43 2025 GMT
            Not After : Aug 29 00:11:43 2026 GMT
        Subject: CN=E99C47D86C676B7FD4A8D0F7B41A4680CACBD49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:5f:e0:60:9f:9f:ff:17:b5:ee:f5:4b:58:
                    f7:ad:f3:44:36:40:7a:9d:35:bd:59:93:df:27:fd:
                    da:c2:f3:ec:d8:d6:98:59:6a:29:0b:10:60:5e:fa:
                    af:d5:69:2c:52:a0:4d:b5:c8:cc:01:96:5a:2c:db:
                    c1:e3:d2:59:6d:8c:63:64:d3:18:b4:6f:b1:cb:b5:
                    6e:6e:42:a3:cb:b6:3f:bd:01:ef:22:19:3b:83:b5:
                    74:13:98:e5:80:cc:23:c1:9b:e6:34:cf:af:e2:63:
                    db:03:c4:41:79:ab:b2:3c:c2:7f:45:98:ba:9d:e4:
                    e5:23:5c:68:a3:25:c4:d5:ef:ff:23:94:45:71:87:
                    74:ad:90:93:1c:d2:8a:33:c2:5d:05:1e:22:0a:98:
                    11:18:21:a1:27:c4:85:1a:d1:cf:c9:af:e9:36:9d:
                    18:b6:4a:dd:51:63:7c:e4:11:4b:d0:56:68:54:e2:
                    56:4d:ff:ec:69:b9:6d:db:0b:1a:e2:3b:7a:ec:1b:
                    2c:27:71:da:61:5f:4b:0f:29:ac:3b:08:59:e9:6c:
                    0d:5e:2b:05:33:c6:b5:10:e1:68:be:97:aa:70:4d:
                    e1:fa:a6:12:0a:c6:b9:75:11:e4:3b:b4:02:15:99:
                    81:96:22:31:b6:e4:8e:b0:3b:2a:a9:5d:96:bb:00:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:47:D8:6C:67:6B:7F:D4:A8:D0:F7:B4:1A:46:80:CA:CB:D4:9C
            X509v3 Authority Key Identifier:
                keyid:1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135382e302f32342d3234203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:ac:99:84:13:fa:da:65:25:b2:34:a2:b8:a3:e1:a2:b7:
         59:c7:16:64:ca:6a:ee:0c:ae:ca:61:cf:36:17:45:b6:61:4c:
         f3:43:6a:20:f7:fb:c4:ae:25:3e:72:ff:9d:55:16:a6:04:dc:
         d5:f7:3f:fc:d4:5b:af:71:93:1b:d8:52:16:28:b5:ae:f3:2d:
         f2:20:cb:4a:50:c2:14:4a:d6:55:62:38:4c:fe:f0:a7:30:a7:
         d4:74:65:27:4a:46:f0:b4:03:4d:11:8d:b6:29:20:2d:ef:bc:
         c1:fb:4c:0d:c5:47:42:b7:ba:ee:64:6d:34:11:0e:7f:83:40:
         8b:1d:75:1c:1e:5c:02:56:e5:13:02:7c:93:44:52:03:00:e5:
         09:56:7b:02:e2:47:47:72:01:81:79:46:4c:c3:36:48:b0:53:
         7c:53:73:30:51:96:d3:7f:17:49:14:08:b1:cd:25:cf:3f:6f:
         4e:96:a0:bc:d6:5e:ee:57:05:ff:32:7d:77:00:ea:0e:3a:6f:
         6a:e3:6f:3a:7d:95:84:91:64:d4:8a:23:c6:19:39:eb:41:39:
         b0:4c:5b:1c:81:20:42:a2:53:8a:48:b8:d0:99:26:53:c0:72:
         14:ba:ed:e5:b5:d3:c1:f0:ec:85:8d:b5:98:2a:6b:40:1c:02:
         31:e7:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----