This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa
File:                     3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          Uhs2EnhLYS3vvCI6rXGY44HBJ7cQCIiuaZCLEF3JbUA=
Subject key identifier:   BA:65:CF:6A:DF:98:74:58:76:84:C3:B8:0C:6D:A6:36:66:E9:A2:59
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       0B15A90D70BE486872B96C8B2DF4A34C4671232E
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa
Signing time:             Mon 12 May 2025 15:00:02 +0000
ROA not before:           Mon 12 May 2025 14:55:02 +0000
ROA not after:            Mon 11 May 2026 15:00:02 +0000
asID:                     53118
IP address blocks:        187.110.174.0/24 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:15:a9:0d:70:be:48:68:72:b9:6c:8b:2d:f4:a3:4c:46:71:23:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: May 12 14:55:02 2025 GMT
            Not After : May 11 15:00:02 2026 GMT
        Subject: CN=BA65CF6ADF9874587684C3B80C6DA63666E9A259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:2f:1d:e5:38:1e:ab:2a:fb:30:a9:2d:13:
                    c4:cd:6d:88:03:74:d8:64:20:25:a7:c3:e1:e6:ed:
                    4e:3c:7f:3e:5d:72:a0:fd:dd:8a:ed:3c:58:17:a3:
                    0f:7c:2d:71:eb:01:cd:81:0c:a0:bc:c0:a5:1f:d8:
                    1a:d6:a1:c4:68:51:c3:c3:e0:92:78:32:a4:6a:40:
                    3f:fa:50:8f:55:95:26:2c:69:8c:4f:bc:0a:3f:22:
                    39:de:1c:17:6f:bc:1e:8c:f6:0e:05:cf:45:cf:a3:
                    b8:90:0e:63:85:7c:b4:b6:43:e1:e0:d1:ba:2e:a7:
                    f3:70:d3:5f:5f:d1:25:85:5e:d6:76:bf:3a:f6:c0:
                    57:c4:8a:47:83:2b:4f:17:da:44:6a:b0:cf:97:73:
                    56:0f:86:89:1b:e7:ab:db:45:e6:3b:f0:f4:32:be:
                    61:b6:7f:15:f7:8c:6e:5e:47:3e:b4:77:50:ec:37:
                    84:d4:bd:16:3f:b9:bf:c7:7c:15:ba:45:ce:14:c6:
                    b6:f9:7f:23:af:56:e1:1d:15:43:92:06:97:5e:05:
                    1f:a3:f8:b6:c5:f0:9d:12:e5:be:21:bc:45:b4:37:
                    ec:93:f0:4b:7a:20:b9:4e:65:3f:2a:99:39:23:3b:
                    b7:8d:f3:f8:e5:ed:91:45:dd:44:59:41:d9:84:6e:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:65:CF:6A:DF:98:74:58:76:84:C3:B8:0C:6D:A6:36:66:E9:A2:59
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:51:fa:cc:19:4a:95:02:1c:5b:44:8e:03:0f:03:d7:61:b8:
         87:fe:54:c1:47:a5:e2:27:d2:42:7c:dd:a7:64:69:e4:e9:ec:
         d0:01:af:68:7e:3b:f1:59:fd:c0:9e:3b:86:17:de:84:db:93:
         d0:cc:0c:50:12:3e:74:27:f7:e6:d2:3d:c8:94:c1:01:69:5b:
         a9:40:ce:9d:d4:77:07:91:cb:f0:8d:8f:43:42:b4:aa:75:26:
         57:c2:fa:c9:65:76:d1:ad:39:7c:38:30:2d:09:a0:3f:39:ab:
         c4:25:fe:ac:a9:40:4d:38:86:9a:aa:d5:ca:56:e0:1b:7c:e9:
         79:34:f1:f6:47:30:3c:db:1a:b1:4a:bd:20:f8:e0:37:92:5b:
         c4:71:7a:20:fa:b7:da:f0:bc:e2:7c:0a:72:a5:45:b7:84:c1:
         fc:15:36:35:06:d8:66:51:40:5a:f2:12:25:27:06:fc:52:be:
         40:8a:c5:fc:d6:e3:74:fb:a9:6d:58:ce:53:ae:37:b6:3b:89:
         b1:18:39:02:a1:49:ac:d0:c3:8a:6e:77:8f:a7:ca:42:7a:6a:
         a1:60:c1:4e:39:62:81:86:51:ce:f4:7a:54:eb:66:f6:99:5b:
         3d:8a:56:b3:31:98:76:ce:f2:37:c2:3b:6a:47:74:44:a8:b7:
         55:7d:8f:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCxWpDXC+SGhyuWyLLfSjTEZxIy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0
OTEzQzhBODAeFw0yNTA1MTIxNDU1MDJaFw0yNjA1MTExNTAwMDJaMDMxMTAvBgNV
BAMTKEJBNjVDRjZBREY5ODc0NTg3Njg0QzNCODBDNkRBNjM2NjZFOUEyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ni8d5Tgeqyr7MKktE8TNbYgD
dNhkICWnw+Hm7U48fz5dcqD93YrtPFgXow98LXHrAc2BDKC8wKUf2BrWocRoUcPD
4JJ4MqRqQD/6UI9VlSYsaYxPvAo/IjneHBdvvB6M9g4Fz0XPo7iQDmOFfLS2Q+Hg
0boup/Nw019f0SWFXtZ2vzr2wFfEikeDK08X2kRqsM+Xc1YPhokb56vbReY78PQy
vmG2fxX3jG5eRz60d1DsN4TUvRY/ub/HfBW6Rc4Uxrb5fyOvVuEdFUOSBpdeBR+j
+LbF8J0S5b4hvEW0N+yT8Et6ILlOZT8qmTkjO7eN8/jl7ZFF3URZQdmEbts5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUumXPat+YdFh2hMO4DG2mNmbpolkwHwYDVR0j
BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz
MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzEv
MzEzODM3MmUzMTMxMzAyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7bq4wDQYJKoZIhvcNAQELBQADggEBALNR+swZ
SpUCHFtEjgMPA9dhuIf+VMFHpeIn0kJ83adkaeTp7NABr2h+O/FZ/cCeO4YX3oTb
k9DMDFASPnQn9+bSPciUwQFpW6lAzp3UdweRy/CNj0NCtKp1JlfC+slldtGtOXw4
MC0JoD85q8Ql/qypQE04hpqq1cpW4Bt86Xk08fZHMDzbGrFKvSD44DeSW8RxeiD6
t9rwvOJ8CnKlRbeEwfwVNjUG2GZRQFryEiUnBvxSvkCKxfzW43T7qW1YzlOuN7Y7
ibEYOQKhSazQw4pud4+nykJ6aqFgwU45YoGGUc70elTrZvaZWz2KVrMxmHbO8jfC
O2pHdESot1V9j9E=
-----END CERTIFICATE-----