This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa
File:                     3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa (raw, json)
Hash identifier:          hOS2vsDdoDy2lh8y9DZMAYX4qmg4eXNwNQxhwTHCCKo=
Subject key identifier:   D7:38:90:87:7D:5B:3B:43:45:9B:2C:52:01:F5:57:AB:E9:35:C3:AA
Certificate issuer:       /CN=31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37
Certificate serial:       4DBD7092E7C7932452867A2BCD667CF07CFD74E9
Authority key identifier: 31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa
Signing time:             Tue 06 May 2025 16:06:53 +0000
ROA not before:           Tue 06 May 2025 16:01:53 +0000
ROA not after:            Tue 05 May 2026 16:06:53 +0000
asID:                     263421
IP address blocks:        168.121.156.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bd:70:92:e7:c7:93:24:52:86:7a:2b:cd:66:7c:f0:7c:fd:74:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37
        Validity
            Not Before: May  6 16:01:53 2025 GMT
            Not After : May  5 16:06:53 2026 GMT
        Subject: CN=D73890877D5B3B43459B2C5201F557ABE935C3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:1f:30:02:58:2f:82:3a:a6:82:74:44:b9:
                    1c:b6:69:3d:17:eb:76:0b:08:12:6d:01:fa:67:be:
                    56:f7:21:6c:e4:73:45:a4:00:5f:66:64:3b:a8:f2:
                    5d:00:56:5a:b9:70:ae:5c:90:1e:6f:a0:60:a0:26:
                    b7:a8:80:61:a9:39:30:b2:a8:7c:a6:ac:fe:a4:17:
                    fd:1f:b7:16:ea:e7:a5:0d:84:4c:c9:33:3a:6a:47:
                    51:2e:93:8d:b7:45:ec:c4:32:2d:bb:b3:d1:fe:85:
                    5e:fe:b4:b3:1f:ef:0d:26:23:37:f9:08:b6:0d:b1:
                    c6:7c:b1:80:d8:e3:6d:4d:f4:ec:b7:2d:8b:6e:0d:
                    a8:70:82:a1:0d:c4:fb:5c:a5:a0:55:56:ed:cf:66:
                    58:84:d2:e9:a5:07:58:5d:05:fa:82:2a:94:31:50:
                    d7:e1:57:1b:7d:53:27:7e:c5:a5:aa:e9:9b:fe:cf:
                    86:dc:49:0b:8b:9b:b3:16:d5:6f:60:12:46:72:de:
                    9d:ce:f3:10:8f:a9:27:11:da:16:52:51:d7:62:2c:
                    90:60:c5:6e:4a:8a:05:80:4f:83:eb:c8:71:47:d5:
                    17:55:a0:fd:b4:a7:3a:bf:5f:94:a8:c9:f8:86:bd:
                    43:89:b9:3d:98:1d:d1:60:05:63:02:b3:0c:1a:16:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:90:87:7D:5B:3B:43:45:9B:2C:52:01:F5:57:AB:E9:35:C3:AA
            X509v3 Authority Key Identifier:
                keyid:31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3332203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:5e:99:42:95:e5:e9:24:f5:60:73:e0:03:1d:d7:41:ae:
         58:fb:ac:79:42:7d:b5:ca:e6:21:cc:0b:09:0e:ad:9c:37:e9:
         7c:79:f1:b1:cf:33:8e:ac:81:a5:6e:c7:60:80:80:bf:d5:ed:
         07:e6:56:91:c9:54:b0:3d:56:28:5a:42:5a:69:c8:06:17:6e:
         f0:26:e9:87:35:1f:0d:d9:c5:2b:53:a8:9e:7f:be:2f:32:a1:
         8c:1c:8b:b0:99:7e:71:6b:f4:21:55:13:8e:0f:bd:eb:58:37:
         25:79:08:a6:b5:d1:86:0b:22:7d:a7:b4:a6:59:01:d0:7c:0f:
         b5:d6:93:7d:85:b4:2b:3d:71:3a:19:e1:91:7d:9e:db:9f:5b:
         a8:b8:bb:13:d7:73:47:64:1a:d4:aa:1e:d0:6c:68:bb:f8:c0:
         d7:15:d8:b1:a7:05:ed:7e:72:58:f7:b0:6e:e2:f0:6a:c7:e1:
         f2:0f:42:dd:9b:d0:cd:aa:fd:a0:19:9d:ef:80:f1:d7:c0:fc:
         8e:72:68:88:7f:62:f3:ba:6f:9e:96:f5:62:21:1c:40:e6:2a:
         85:66:ed:de:be:4d:0e:38:20:96:b1:97:9b:65:e0:28:ac:1c:
         68:c5:22:ca:79:80:cd:b2:a6:90:ff:46:33:4b:92:93:98:b1:
         2b:00:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----