This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa
File:                     34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa (raw, json)
Hash identifier:          Z7qQjkoUPo90Bjcq+hYnSfGMjbpiebIeLa30aUZKA+A=
Subject key identifier:   19:5B:3D:C2:E1:91:28:5A:5C:D1:09:B2:90:3E:9B:0F:13:9F:34:1B
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       6AF35389B59315604AC5A392D8F08EB90899774F
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa
Signing time:             Fri 02 May 2025 18:06:25 +0000
ROA not before:           Fri 02 May 2025 18:01:25 +0000
ROA not after:            Fri 01 May 2026 18:06:25 +0000
asID:                     268797
IP address blocks:        45.172.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f3:53:89:b5:93:15:60:4a:c5:a3:92:d8:f0:8e:b9:08:99:77:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May  2 18:01:25 2025 GMT
            Not After : May  1 18:06:25 2026 GMT
        Subject: CN=195B3DC2E191285A5CD109B2903E9B0F139F341B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:74:fa:7c:01:d2:0e:b9:16:aa:99:58:c5:
                    cc:68:3e:0b:84:76:55:fb:4e:94:59:5f:67:ba:8b:
                    d3:97:1d:03:7a:83:39:8d:e5:ea:b4:f5:69:49:33:
                    b1:04:ec:f0:ad:91:6d:5e:a6:9f:5f:37:4d:99:68:
                    b9:b7:a9:1b:f1:49:9e:14:27:87:dc:21:43:b3:cd:
                    fb:2c:d8:80:d2:39:f4:6f:37:1e:52:fc:23:f6:f4:
                    43:27:8c:7f:10:1f:63:63:b7:63:96:91:a4:2e:51:
                    9c:8d:8c:0f:4c:9f:50:46:59:85:ec:39:92:8a:c2:
                    01:d9:b2:6f:4a:14:4a:57:fe:83:02:0e:06:3c:14:
                    ca:2d:14:ec:2f:5b:61:c9:5a:12:45:ce:91:c5:83:
                    ed:e8:17:ba:aa:70:ae:72:90:29:e3:3a:15:c1:cc:
                    92:46:96:90:4d:ed:23:b0:30:ab:dc:df:7f:d2:bc:
                    eb:10:43:04:9b:27:2a:13:21:7e:d2:0c:06:0f:6d:
                    d0:85:86:49:a1:e1:ae:31:56:d4:bd:3d:ea:aa:bd:
                    78:c1:e6:54:dd:90:b1:16:84:4c:b6:85:ef:bb:b8:
                    c9:52:c7:99:c3:d3:95:db:a8:13:9d:83:25:b7:23:
                    6c:b2:3c:ce:f3:36:6e:03:6e:4f:c1:4f:6c:fe:6c:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5B:3D:C2:E1:91:28:5A:5C:D1:09:B2:90:3E:9B:0F:13:9F:34:1B
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:84:f6:3e:ca:82:78:8e:d0:a6:19:47:95:e5:8b:8c:e4:e8:
         8d:46:cd:25:7d:97:24:7a:93:a9:ed:f6:f5:20:03:18:43:f3:
         5a:6d:c2:0d:b8:ce:17:d7:dd:4a:ba:f4:2c:13:5a:1d:51:39:
         16:82:30:4e:7c:4d:28:3b:77:57:eb:8e:f2:c5:3a:3e:1f:24:
         4c:db:d6:53:20:31:e3:ab:9b:11:e9:c3:de:c9:e6:1f:32:c8:
         20:9c:33:3a:1d:b3:c1:ac:d2:e9:19:37:6f:29:fa:62:8a:2a:
         aa:a7:24:2b:55:b5:84:94:d0:fd:10:fc:f3:c8:0f:3f:50:6d:
         d8:e7:89:b8:fc:0a:ca:59:7a:58:d4:18:e2:a5:72:71:50:42:
         6f:23:2f:6a:bd:0f:43:f3:cb:75:7a:4c:8d:6e:ba:07:12:26:
         d6:01:50:24:2d:0e:a0:69:94:8f:a9:14:43:a4:7b:d9:09:a9:
         2e:aa:d6:31:bf:d4:d5:32:c3:d9:6c:4d:64:3e:38:b1:a2:79:
         60:de:88:f1:4e:f4:53:a2:43:c8:67:84:04:af:f8:b4:29:49:
         aa:ae:ad:00:8f:0b:4b:76:c1:cc:70:7a:a9:d3:05:13:d3:d2:
         cc:69:fc:f8:d2:cd:38:70:e0:d4:ea:2f:68:f3:8c:c1:de:68:
         08:37:21:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----