This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234362e302f32332d3233203d3e20323637323239.roa
File:                     34352e3233312e3234362e302f32332d3233203d3e20323637323239.roa (raw, json)
Hash identifier:          SfbXQz+QzJobC7TusDP0xXJlhcXKQNnhSKP2wYxFnMg=
Subject key identifier:   A2:C0:5C:88:54:02:20:B1:84:58:C5:5B:C3:3F:69:4B:5D:3A:2A:D9
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       0BC4A1F0860C873DE8554D73F992F020D0CEDA49
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234362e302f32332d3233203d3e20323637323239.roa
Signing time:             Thu 03 Jul 2025 22:11:50 +0000
ROA not before:           Thu 03 Jul 2025 22:06:50 +0000
ROA not after:            Thu 02 Jul 2026 22:11:50 +0000
asID:                     267229
IP address blocks:        45.231.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c4:a1:f0:86:0c:87:3d:e8:55:4d:73:f9:92:f0:20:d0:ce:da:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Jul  3 22:06:50 2025 GMT
            Not After : Jul  2 22:11:50 2026 GMT
        Subject: CN=A2C05C88540220B18458C55BC33F694B5D3A2AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4d:55:f4:6b:80:22:2a:29:2f:74:ee:7e:2c:
                    1e:ac:0f:7c:31:a2:27:59:74:db:66:f6:1a:23:ca:
                    46:c3:4f:71:d0:a0:69:88:81:64:6a:6a:82:54:b4:
                    c1:7a:6e:1a:83:92:2b:a4:cf:0d:38:a4:83:b3:60:
                    76:d6:b1:be:ab:3c:b2:ac:e8:33:56:75:e2:be:4b:
                    45:62:8e:ce:e1:91:17:82:77:a5:ec:06:ed:b9:86:
                    74:55:b9:99:29:37:16:37:63:39:73:9e:ff:5b:68:
                    3f:59:b4:6d:11:34:59:1f:af:94:1f:ec:47:6c:73:
                    db:f9:5b:83:3d:a9:9b:d8:58:f5:de:ee:ff:f8:54:
                    99:e0:76:b7:3d:59:41:1f:e6:3f:2e:2a:34:06:df:
                    85:b5:24:fe:fe:22:15:9c:68:01:1b:a4:0c:4f:6c:
                    11:8a:ff:76:6c:7d:f8:4c:9a:8c:39:0b:30:a8:01:
                    8e:f4:fe:0b:20:66:61:ca:74:bb:5e:e6:3f:8c:e1:
                    bc:f8:08:a9:82:d3:27:8c:80:48:a6:e5:8d:71:ac:
                    ac:75:0a:44:df:19:92:f7:d1:8d:c8:ba:af:9f:39:
                    2e:21:98:65:c1:76:0f:6e:ea:7a:87:b3:2f:50:ef:
                    8c:a9:33:b1:f4:fe:35:87:a4:68:1d:a7:3c:c9:de:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C0:5C:88:54:02:20:B1:84:58:C5:5B:C3:3F:69:4B:5D:3A:2A:D9
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234362e302f32332d3233203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:d8:37:13:b6:41:3a:cc:f2:57:c0:86:e3:06:dd:13:ec:
         71:e6:aa:e7:62:aa:d2:e4:d7:e6:73:63:26:e4:4c:0b:9e:81:
         17:5d:b5:71:86:6d:02:a1:14:32:6d:47:51:54:dd:a2:77:cf:
         98:fe:cf:27:25:33:c8:9c:b9:a1:27:fc:c6:76:12:c1:0f:4f:
         5a:f8:8f:c1:66:c4:3b:68:f8:66:24:d8:39:b3:6d:24:32:71:
         ec:b4:a2:01:cb:5b:fb:b3:fc:d5:10:a7:95:5e:0a:ea:4f:39:
         7a:53:8b:ac:29:cb:e8:66:54:aa:03:46:c3:47:82:52:0e:e9:
         f7:91:af:07:7d:70:cc:b7:75:94:2a:72:cc:e6:eb:a2:1c:a3:
         90:89:4d:a1:63:90:da:a9:82:6c:e5:4f:1a:1b:51:b7:fd:ca:
         8f:fb:28:f4:06:31:3c:ad:b9:94:0a:8f:70:56:63:4c:76:8f:
         56:c0:b2:99:05:a8:0b:24:72:99:b1:a7:29:2a:8b:60:67:95:
         04:a8:c6:f7:6e:03:ff:2a:dd:b7:61:ee:10:6f:0c:9c:b3:37:
         e7:db:93:d2:4b:4c:4d:a4:c7:0f:31:7d:16:f0:7e:54:e6:fd:
         11:bc:0a:92:04:dd:1c:24:fd:d9:8c:02:6b:3d:77:74:25:7d:
         b9:b4:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----