This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234362e302f32332d3233203d3e20323638373937.roa
File:                     34352e3137322e3234362e302f32332d3233203d3e20323638373937.roa (raw, json)
Hash identifier:          Awx1xPHZWIEwYv7i3XlOnPbyQYsPieHvXj/weDHlTn8=
Subject key identifier:   A2:CD:4E:E1:D9:C8:00:35:E7:7F:34:00:75:43:C2:97:32:95:0C:F9
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       2CA0CD48F1268469CF2C57666CC95BA47596E864
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234362e302f32332d3233203d3e20323638373937.roa
Signing time:             Fri 02 May 2025 18:06:25 +0000
ROA not before:           Fri 02 May 2025 18:01:25 +0000
ROA not after:            Fri 01 May 2026 18:06:25 +0000
asID:                     268797
IP address blocks:        45.172.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a0:cd:48:f1:26:84:69:cf:2c:57:66:6c:c9:5b:a4:75:96:e8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May  2 18:01:25 2025 GMT
            Not After : May  1 18:06:25 2026 GMT
        Subject: CN=A2CD4EE1D9C80035E77F34007543C29732950CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:8a:80:80:ee:98:d6:2d:00:71:eb:ce:b1:
                    8b:8a:af:de:47:d8:34:2d:74:b8:3b:2e:b0:5f:9e:
                    9f:5e:5a:a7:67:37:a7:cb:98:43:2d:d7:54:f5:a1:
                    65:6b:22:2c:f8:d7:86:68:b2:24:4e:e7:fb:c3:d8:
                    bd:35:81:83:00:9b:73:0c:f2:86:d9:31:f0:a9:38:
                    81:9f:ec:4c:01:14:ef:b3:bd:28:97:63:e8:f4:0a:
                    87:80:0b:75:40:13:8a:b9:71:73:24:3f:23:ca:25:
                    ff:e8:d8:7c:ea:51:9d:f0:d7:ea:e6:1e:87:e1:03:
                    7c:01:13:ad:a4:11:ff:21:e6:5a:36:ec:d0:4a:81:
                    40:1f:32:fd:44:2f:fd:d5:fc:7a:c7:ed:28:9f:61:
                    51:a3:87:cb:4d:80:54:ca:65:53:b0:38:30:7e:75:
                    5e:ef:b7:e2:92:23:11:60:e6:f5:1e:fe:de:e5:6a:
                    4a:fd:de:36:cd:6a:4a:72:e9:d0:27:d2:b9:34:ab:
                    b3:6e:2f:90:d3:45:13:71:64:ba:da:dd:1e:3b:b8:
                    0b:de:8b:a7:b4:88:14:a1:7e:dd:c2:50:fb:0b:ab:
                    42:cd:fa:e1:82:b4:13:f4:cc:5e:89:71:d3:67:fd:
                    ba:55:a9:58:75:18:dd:9b:4a:76:ed:98:e2:da:0a:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:4E:E1:D9:C8:00:35:E7:7F:34:00:75:43:C2:97:32:95:0C:F9
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234362e302f32332d3233203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:b9:40:cc:5e:81:e8:85:72:29:7f:95:97:f5:da:94:8c:
         dd:d8:d9:36:49:ba:7b:e0:3d:fa:b4:b9:d0:54:16:0f:9c:f8:
         77:c0:cb:a6:7e:ae:85:b8:cc:a4:99:6f:54:2a:8a:8d:c7:80:
         0c:d7:a6:fd:b5:ab:af:81:35:79:15:c6:3f:fd:c5:d9:6c:d3:
         06:3c:5d:0d:fc:11:41:dd:76:d7:6c:c7:d1:79:ff:38:77:1b:
         8e:f8:49:ca:0a:e5:a5:a3:7b:2d:d5:60:99:e3:60:91:de:95:
         ac:3e:1d:ae:01:c8:fe:0e:40:ff:13:aa:19:9a:2a:ff:e0:fd:
         d5:c0:6e:cc:83:24:ab:53:ec:91:6b:47:d8:bb:49:7f:2b:1f:
         6d:eb:1d:76:12:49:4f:52:7c:3e:46:c9:0d:01:eb:44:6e:29:
         95:ce:fc:0c:71:cc:fb:48:41:1a:64:fb:f4:5f:9e:e3:3d:1b:
         cd:55:5d:00:ce:b9:f8:28:48:86:db:05:a7:1f:50:f9:a7:65:
         d3:01:0a:0a:af:a4:87:52:21:36:05:72:90:03:35:7b:5d:e4:
         e4:43:12:0b:fb:8c:b0:1a:56:46:94:bd:b0:07:f9:fa:92:58:
         f8:45:93:8f:c8:04:10:bd:68:aa:fd:9a:c9:f7:02:fb:f8:87:
         cd:78:a2:b5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULKDNSPEmhGnPLFdmbMlbpHWW6GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVFQUU3ODE3NzRCQkYzOUQzOTM5REY4RDlBRkU1RDEz
NDk1ODE5NjAeFw0yNTA1MDIxODAxMjVaFw0yNjA1MDExODA2MjVaMDMxMTAvBgNV
BAMTKEEyQ0Q0RUUxRDlDODAwMzVFNzdGMzQwMDc1NDNDMjk3MzI5NTBDRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CIqAgO6Y1i0AcevOsYuKr95H
2DQtdLg7LrBfnp9eWqdnN6fLmEMt11T1oWVrIiz414ZosiRO5/vD2L01gYMAm3MM
8obZMfCpOIGf7EwBFO+zvSiXY+j0CoeAC3VAE4q5cXMkPyPKJf/o2HzqUZ3w1+rm
HofhA3wBE62kEf8h5lo27NBKgUAfMv1EL/3V/HrH7SifYVGjh8tNgFTKZVOwODB+
dV7vt+KSIxFg5vUe/t7lakr93jbNakpy6dAn0rk0q7NuL5DTRRNxZLra3R47uAve
i6e0iBShft3CUPsLq0LN+uGCtBP0zF6JcdNn/bpVqVh1GN2bSnbtmOLaCvTpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUos1O4dnIADXnfzQAdUPClzKVDPkwHwYDVR0j
BBgwFoAU7urngXdLvznTk5342a/l0TSVgZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRZeDNHckFoN1g1YjdwWFpKUlBQbThMZVRDaHE3cldIOHpmZ2F6NzFN
ZmUvMC9FRUVBRTc4MTc3NEJCRjM5RDM5MzlERjhEOUFGRTVEMTM0OTU4MTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFRUFFNzgxNzc0QkJGMzlE
MzkzOURGOEQ5QUZFNUQxMzQ5NTgxOTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0WXgzR3JBaDdYNWI3cFhaSlJQUG04TGVUQ2hxN3JXSDh6ZmdhejcxTWZlLzAv
MzQzNTJlMzEzNzMyMmUzMjM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtrPYwDQYJKoZIhvcNAQELBQADggEBAGnsuUDM
XoHohXIpf5WX9dqUjN3Y2TZJunvgPfq0udBUFg+c+HfAy6Z+roW4zKSZb1Qqio3H
gAzXpv21q6+BNXkVxj/9xdls0wY8XQ38EUHddtdsx9F5/zh3G474ScoK5aWjey3V
YJnjYJHelaw+Ha4ByP4OQP8TqhmaKv/g/dXAbsyDJKtT7JFrR9i7SX8rH23rHXYS
SU9SfD5GyQ0B60RuKZXO/AxxzPtIQRpk+/RfnuM9G81VXQDOufgoSIbbBacfUPmn
ZdMBCgqvpIdSITYFcpADNXtd5ORDEgv7jLAaVkaUvbAH+fqSWPhFk4/IBBC9aKr9
msn3Avv4h814orU=
-----END CERTIFICATE-----