This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135392e302f32342d3234203d3e20323635323536.roa
File:                     3136382e302e3135392e302f32342d3234203d3e20323635323536.roa (raw, json)
Hash identifier:          90/QBzpfP8AboMg2ahGUIKe20f1zDdcbZE9KN10MzPc=
Subject key identifier:   E4:E9:DF:4A:55:EA:8E:9A:0B:66:37:C7:2A:BC:35:3E:14:C9:DA:4F
Certificate issuer:       /CN=1D98467C905A92172F884A0A1419F30237985451
Certificate serial:       6A9959A65B0B33DA5C58585F7B3CC5A5E0B16B47
Authority key identifier: 1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135392e302f32342d3234203d3e20323635323536.roa
Signing time:             Sat 30 Aug 2025 00:11:40 +0000
ROA not before:           Sat 30 Aug 2025 00:06:40 +0000
ROA not after:            Sat 29 Aug 2026 00:11:40 +0000
asID:                     265256
IP address blocks:        168.0.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:99:59:a6:5b:0b:33:da:5c:58:58:5f:7b:3c:c5:a5:e0:b1:6b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D98467C905A92172F884A0A1419F30237985451
        Validity
            Not Before: Aug 30 00:06:40 2025 GMT
            Not After : Aug 29 00:11:40 2026 GMT
        Subject: CN=E4E9DF4A55EA8E9A0B6637C72ABC353E14C9DA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:e4:ca:ce:db:38:43:d9:6d:0a:3f:ac:3d:
                    32:09:96:c8:5c:72:fd:3d:be:e6:4d:07:2a:fa:1c:
                    97:f7:6e:a4:9c:4b:11:e1:84:d6:20:a9:6d:dd:85:
                    24:bf:3c:14:c3:02:89:85:9d:30:52:72:bb:4b:17:
                    73:77:13:43:e5:b9:92:c5:69:0c:f0:3f:c8:cd:e5:
                    ae:01:e9:81:46:8e:47:82:d9:4d:b1:d7:3b:81:c3:
                    12:20:75:60:26:dc:e8:d0:34:cb:bd:cc:11:d6:fc:
                    9b:50:94:8d:c2:ac:65:e8:d4:75:07:0d:ec:a4:c2:
                    4a:6c:78:81:bd:05:d4:27:c9:bf:6f:43:99:12:9f:
                    c9:3e:b3:86:a6:35:de:c8:a9:41:75:b7:e1:d4:ab:
                    02:50:d7:2e:b1:fa:78:8f:2f:1a:16:3d:72:03:5e:
                    3d:45:3d:3b:3d:ee:fb:2d:b5:f1:15:7e:4b:5f:f7:
                    75:0e:6e:5c:82:b0:8b:79:1b:4c:6b:c7:7f:ad:e6:
                    68:06:ab:70:06:04:1b:fe:a6:3d:c5:fb:b2:64:99:
                    57:ab:0d:b5:24:a2:e1:c9:8d:33:e3:7e:1c:66:ec:
                    7e:c3:f0:d6:d2:02:85:97:b1:9b:22:6c:d8:c3:e3:
                    32:01:51:69:bb:3a:a7:9d:02:07:12:d8:3c:01:2b:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E9:DF:4A:55:EA:8E:9A:0B:66:37:C7:2A:BC:35:3E:14:C9:DA:4F
            X509v3 Authority Key Identifier:
                keyid:1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135392e302f32342d3234203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ae:b6:c1:98:7a:c4:8c:a9:98:2c:76:f2:a7:90:19:c9:7c:
         f5:c2:a0:84:ec:3e:a5:40:7f:19:ec:a3:45:43:1c:f2:24:c6:
         1e:eb:56:8f:1e:0c:88:c7:8e:a3:bf:2a:11:ef:1a:0d:85:97:
         94:5f:10:98:7a:38:49:6b:1a:d3:83:a3:56:2a:51:86:60:33:
         c8:50:4d:51:db:ce:b9:e1:9c:bc:9c:b4:d0:0a:44:19:23:47:
         5a:4d:71:74:41:a1:90:b8:47:69:30:80:78:74:6c:8e:83:ac:
         03:06:8a:ba:51:08:4c:9a:69:71:55:79:76:55:ff:4a:46:12:
         fe:19:b3:8c:44:27:4e:4e:f0:40:46:36:9d:a9:bb:88:7b:91:
         9a:53:eb:61:c9:ba:91:fc:01:9a:f4:c5:82:43:63:e7:20:03:
         31:f1:10:31:bc:d3:fd:be:44:55:0b:14:2a:27:09:0c:a0:60:
         5c:21:43:48:62:3c:ba:0c:97:86:5e:8c:12:84:4c:50:92:af:
         0d:f8:a2:19:c0:5e:79:8d:56:b0:01:8c:ac:d1:00:fd:df:55:
         95:2c:a4:e4:1b:fe:f3:84:cf:89:28:3e:60:dc:19:5d:52:1b:
         e9:3e:60:92:e1:45:1b:77:2b:9d:62:a7:4b:a3:05:77:e4:1a:
         d1:3e:af:94
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaplZplsLM9pcWFhfezzFpeCxa0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ5ODQ2N0M5MDVBOTIxNzJGODg0QTBBMTQxOUYzMDIz
Nzk4NTQ1MTAeFw0yNTA4MzAwMDA2NDBaFw0yNjA4MjkwMDExNDBaMDMxMTAvBgNV
BAMTKEU0RTlERjRBNTVFQThFOUEwQjY2MzdDNzJBQkMzNTNFMTRDOURBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKeTKzts4Q9ltCj+sPTIJlshc
cv09vuZNByr6HJf3bqScSxHhhNYgqW3dhSS/PBTDAomFnTBScrtLF3N3E0PluZLF
aQzwP8jN5a4B6YFGjkeC2U2x1zuBwxIgdWAm3OjQNMu9zBHW/JtQlI3CrGXo1HUH
DeykwkpseIG9BdQnyb9vQ5kSn8k+s4amNd7IqUF1t+HUqwJQ1y6x+niPLxoWPXID
Xj1FPTs97vsttfEVfktf93UOblyCsIt5G0xrx3+t5mgGq3AGBBv+pj3F+7JkmVer
DbUkouHJjTPjfhxm7H7D8NbSAoWXsZsibNjD4zIBUWm7OqedAgcS2DwBKybDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5OnfSlXqjpoLZjfHKrw1PhTJ2k8wHwYDVR0j
BBgwFoAUHZhGfJBakhcviEoKFBnzAjeYVFEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtoN1UxbWFCN0NFazk0TnljaEJwV2kxWXpYRkc5RVY1eFJhYW5MOXdW
M3YvMS8xRDk4NDY3QzkwNUE5MjE3MkY4ODRBMEExNDE5RjMwMjM3OTg1NDUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEOTg0NjdDOTA1QTkyMTcy
Rjg4NEEwQTE0MTlGMzAyMzc5ODU0NTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVraDdVMW1hQjdDRWs5NE55Y2hCcFdpMVl6WEZHOUVWNXhSYWFuTDl3VjN2LzEv
MzEzNjM4MmUzMDJlMzEzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqACfMA0GCSqGSIb3DQEBCwUAA4IBAQAXrrbBmHrE
jKmYLHbyp5AZyXz1wqCE7D6lQH8Z7KNFQxzyJMYe61aPHgyIx46jvyoR7xoNhZeU
XxCYejhJaxrTg6NWKlGGYDPIUE1R28654Zy8nLTQCkQZI0daTXF0QaGQuEdpMIB4
dGyOg6wDBoq6UQhMmmlxVXl2Vf9KRhL+GbOMRCdOTvBARjadqbuIe5GaU+thybqR
/AGa9MWCQ2PnIAMx8RAxvNP9vkRVCxQqJwkMoGBcIUNIYjy6DJeGXowShExQkq8N
+KIZwF55jVawAYys0QD931WVLKTkG/7zhM+JKD5g3BldUhvpPmCS4UUbdyudYqdL
owV35BrRPq+U
-----END CERTIFICATE-----