This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3234203d3e20323633393133.roa
File:                     3137302e3233312e3231362e302f32322d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          nWyf0BAzTzP5xAfnCPXLNPdw60ntsCYYkmlc6RLwKks=
Subject key identifier:   56:94:2C:0E:E1:35:AC:A2:BC:CD:42:9E:70:D1:C2:29:02:57:53:B0
Certificate issuer:       /CN=A400B2AFB573A05BC2408F8AECC1E6140494925B
Certificate serial:       6938CA4F221A57C521CADA0641F5DC7F9891D888
Authority key identifier: A4:00:B2:AF:B5:73:A0:5B:C2:40:8F:8A:EC:C1:E6:14:04:94:92:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A400B2AFB573A05BC2408F8AECC1E6140494925B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3234203d3e20323633393133.roa
Signing time:             Wed 11 Jun 2025 12:53:13 +0000
ROA not before:           Wed 11 Jun 2025 12:48:13 +0000
ROA not after:            Wed 10 Jun 2026 12:53:13 +0000
asID:                     263913
IP address blocks:        170.231.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:38:ca:4f:22:1a:57:c5:21:ca:da:06:41:f5:dc:7f:98:91:d8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A400B2AFB573A05BC2408F8AECC1E6140494925B
        Validity
            Not Before: Jun 11 12:48:13 2025 GMT
            Not After : Jun 10 12:53:13 2026 GMT
        Subject: CN=56942C0EE135ACA2BCCD429E70D1C229025753B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:6d:d8:26:16:06:c6:53:c4:cc:cc:6d:89:
                    3f:e8:88:32:f4:38:e6:69:8f:5b:f4:8a:e4:8b:10:
                    59:9c:1a:18:1f:8c:b9:5e:d7:6a:19:31:dd:00:d4:
                    84:26:ed:71:e7:cc:fe:53:39:5f:12:ee:b0:53:ba:
                    81:09:e4:dd:c2:b7:27:a0:36:c6:e7:8e:94:8e:42:
                    03:29:a1:8a:24:30:5f:da:c9:cd:03:16:24:21:bc:
                    4d:4e:4e:06:8f:a2:45:c9:80:89:74:e0:cb:38:d1:
                    d2:fb:38:ac:dd:be:80:78:62:03:0d:f1:ec:6a:94:
                    7c:84:0d:3f:9c:a3:06:ed:2d:ee:88:6e:6b:70:71:
                    fc:7f:0a:5f:32:70:4d:a2:b0:d2:ae:08:48:6d:4c:
                    f0:62:23:6e:ac:fc:e3:b4:43:a7:40:b4:71:c7:11:
                    e2:62:e5:08:32:8a:9e:65:01:d4:6c:60:6d:0b:48:
                    8b:af:a9:e1:b6:58:7a:20:4f:10:4c:0e:94:a6:65:
                    c7:0a:86:3a:0c:f2:9a:82:3a:56:b7:fa:20:d4:0b:
                    11:a6:d9:94:ff:12:fe:f1:59:12:da:30:0b:f4:4a:
                    a4:47:b5:f0:09:28:a3:24:10:33:72:9b:15:af:52:
                    c4:f8:ec:56:d3:46:91:02:17:9d:2b:14:8f:d0:8f:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:94:2C:0E:E1:35:AC:A2:BC:CD:42:9E:70:D1:C2:29:02:57:53:B0
            X509v3 Authority Key Identifier:
                keyid:A4:00:B2:AF:B5:73:A0:5B:C2:40:8F:8A:EC:C1:E6:14:04:94:92:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A400B2AFB573A05BC2408F8AECC1E6140494925B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A400B2AFB573A05BC2408F8AECC1E6140494925B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:b2:14:2a:05:92:53:ea:58:41:8a:52:90:ba:1b:19:82:
         7a:b6:f0:c3:5f:42:b3:37:53:82:dd:f1:3d:76:b3:97:6c:30:
         f0:f0:88:4e:ce:a0:51:ce:b3:8b:61:13:05:94:f5:cf:98:9d:
         37:1a:07:9e:68:7d:7f:69:0b:c0:23:10:b8:44:98:a6:cf:75:
         cc:88:aa:9b:63:38:99:cc:e0:19:a6:91:02:e6:e3:83:69:a4:
         2e:07:43:17:b3:85:1d:91:fe:c6:01:68:04:bf:3e:84:88:50:
         42:d1:2f:22:50:68:f4:1a:fc:4e:e1:42:ac:6a:82:00:ec:57:
         ba:c6:f8:d6:6a:ae:de:88:aa:be:1b:12:0c:18:3f:df:da:f2:
         a6:59:fb:43:13:76:a7:95:64:27:6d:13:31:a0:02:e0:ef:ac:
         bd:58:62:10:e7:1c:26:86:95:43:be:1b:30:87:56:52:0a:21:
         5c:fb:33:28:68:08:f4:7d:af:79:c0:48:e3:b7:f0:c5:03:3f:
         69:ca:d0:2b:3f:92:8f:41:ee:42:d5:cb:f6:17:49:d9:17:a2:
         b9:6c:67:56:d3:62:cf:ad:2a:8a:1b:1e:81:69:0c:1f:f9:d8:
         23:0d:19:1b:71:e0:a2:b0:86:85:e6:0a:5a:50:20:f0:e5:70:
         88:1b:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----