This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa
File:                     34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa (raw, json)
Hash identifier:          PbJR+qEYQPIh1+ob8eD9+zdUP0cUVtuj0R+OWv/q4x8=
Subject key identifier:   B7:53:C4:2B:ED:D3:F8:AC:E0:96:0A:2E:97:65:E9:C9:6D:91:42:40
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       5CD2888F5FDBB4B119CD39308A7413511B001418
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa
Signing time:             Fri 02 May 2025 18:06:24 +0000
ROA not before:           Fri 02 May 2025 18:01:24 +0000
ROA not after:            Fri 01 May 2026 18:06:24 +0000
asID:                     268797
IP address blocks:        45.172.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d2:88:8f:5f:db:b4:b1:19:cd:39:30:8a:74:13:51:1b:00:14:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May  2 18:01:24 2025 GMT
            Not After : May  1 18:06:24 2026 GMT
        Subject: CN=B753C42BEDD3F8ACE0960A2E9765E9C96D914240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:9a:db:0c:30:0e:f2:93:5c:87:5b:99:98:
                    78:72:36:50:13:cf:41:a1:b6:ab:01:5d:b9:c6:6c:
                    0f:b3:da:72:72:bc:df:ff:3b:0d:d4:fc:62:42:1b:
                    b9:bb:a0:66:ae:d3:32:f7:f4:0f:8b:b5:c1:e2:31:
                    cd:f5:71:c9:38:2c:08:2f:a7:41:dc:83:f7:ea:5e:
                    1c:dc:33:0a:d4:7a:95:4b:9e:0f:0f:7b:d5:1b:f5:
                    06:8a:b4:a8:3d:42:13:f9:53:86:26:9c:95:45:e4:
                    c6:82:b6:c5:ab:fc:61:b0:4c:f1:09:3b:f7:14:52:
                    63:f6:d9:d1:a4:1f:7c:57:1e:84:62:cc:25:b9:ad:
                    17:27:1b:f6:4c:cd:47:33:4f:12:7a:df:68:72:ae:
                    0a:f0:05:f1:38:02:d7:52:18:62:9b:dc:03:ba:90:
                    0b:ed:13:7b:d7:48:bc:28:47:37:1d:97:64:a9:27:
                    9c:68:b6:f1:3c:b0:be:19:fd:f7:f7:b8:e5:04:b8:
                    c1:8b:bc:1b:63:e7:04:28:07:70:d9:a8:52:18:43:
                    e7:a2:75:db:56:9b:79:79:73:36:7a:a5:8d:35:ad:
                    fd:ce:88:26:6c:27:72:d3:05:24:ee:ce:c8:96:bd:
                    c9:b4:54:e1:da:93:2f:ce:42:c1:6c:30:9b:f6:e3:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:53:C4:2B:ED:D3:F8:AC:E0:96:0A:2E:97:65:E9:C9:6D:91:42:40
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:d8:86:f9:f8:ff:17:2f:f9:fd:e2:81:09:2c:dc:75:7d:
         c6:83:33:40:80:72:fd:d7:7f:e8:60:48:fb:0f:62:46:7a:41:
         28:ee:f4:72:cd:31:17:3b:79:2d:22:08:c1:e0:03:f1:82:ab:
         b3:7b:c2:f1:eb:fb:80:b7:b9:78:8d:42:71:9b:cf:01:c7:b0:
         fe:e0:2a:29:6f:c3:9a:20:73:46:2f:6d:49:4f:ed:fe:8c:1e:
         3f:b6:66:6e:63:63:03:2b:f7:5e:e4:21:6d:6d:f2:bc:7c:30:
         3f:76:01:c1:6b:c0:4e:cd:e2:32:4a:4b:d7:0a:36:ee:8c:86:
         cd:af:35:d0:f8:87:c7:56:54:82:7f:33:73:fd:d5:a4:07:72:
         e8:01:a2:25:f4:d5:f4:84:d1:fd:57:b8:fb:f7:a2:cf:bf:ab:
         9d:91:e2:3e:0c:80:f5:61:fe:47:06:cf:e2:7d:0e:62:30:5a:
         b8:cf:4b:be:dc:9a:5d:8f:01:4d:54:fd:ab:50:9f:60:26:2a:
         e1:86:ab:cd:a8:7d:87:bf:8b:b6:df:80:19:bd:a0:06:81:85:
         49:6b:db:07:48:d6:53:4c:b9:26:43:0a:2d:88:7c:46:af:df:
         6b:67:4e:63:54:76:1d:86:8d:0c:c4:08:51:dd:84:67:a2:db:
         af:cf:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----