This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/3137302e3233392e3138342e302f32322d3332203d3e20323636333534.roa
File:                     3137302e3233392e3138342e302f32322d3332203d3e20323636333534.roa (raw, json)
Hash identifier:          jZjHVwLxcqB5b4PuV/jnh6iSyxUqs5RCggbc9wexjfE=
Subject key identifier:   A2:2C:D4:45:CE:67:7E:8E:10:1F:34:D9:6F:4B:1E:6C:6E:A2:9D:F9
Certificate issuer:       /CN=3840A008492F71B1106D76BB9F35A1CF966A50E1
Certificate serial:       6B3BE60814D7C3B0FF8FB2A252569FA7FAE65C5F
Authority key identifier: 38:40:A0:08:49:2F:71:B1:10:6D:76:BB:9F:35:A1:CF:96:6A:50:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3840A008492F71B1106D76BB9F35A1CF966A50E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/3137302e3233392e3138342e302f32322d3332203d3e20323636333534.roa
Signing time:             Wed 21 May 2025 21:40:24 +0000
ROA not before:           Wed 21 May 2025 21:35:24 +0000
ROA not after:            Wed 20 May 2026 21:40:24 +0000
asID:                     266354
IP address blocks:        170.239.184.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3b:e6:08:14:d7:c3:b0:ff:8f:b2:a2:52:56:9f:a7:fa:e6:5c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3840A008492F71B1106D76BB9F35A1CF966A50E1
        Validity
            Not Before: May 21 21:35:24 2025 GMT
            Not After : May 20 21:40:24 2026 GMT
        Subject: CN=A22CD445CE677E8E101F34D96F4B1E6C6EA29DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:e6:ac:6a:c0:7e:11:2c:3b:a7:85:1a:86:
                    25:99:f5:e8:64:df:e2:da:ce:cb:2e:72:9c:90:57:
                    9e:e8:25:3b:bd:eb:30:1e:06:d3:30:b5:63:d2:a7:
                    09:ee:82:c7:f2:7e:ad:9c:71:69:b2:23:1b:6e:79:
                    da:86:52:56:69:91:a1:84:41:ac:b4:55:f8:29:64:
                    f6:a5:a3:e1:c8:c5:ef:16:03:78:6c:9b:8e:11:4f:
                    35:7a:c1:d0:8c:bc:bd:32:82:b7:83:3c:d2:aa:eb:
                    4c:99:dc:2f:8e:b4:63:e8:61:72:8b:6c:51:ff:66:
                    16:07:d5:1e:f3:14:07:2e:93:6b:9f:82:15:42:99:
                    03:ac:2d:e8:02:4b:32:e2:63:bc:64:19:e0:c7:b7:
                    ea:da:53:5a:86:c3:9b:d5:89:c9:d9:00:ea:92:6e:
                    cb:26:e2:55:6e:5e:01:89:ac:fd:02:65:77:f8:d2:
                    4d:f6:d3:e4:c7:9b:4b:37:0f:e1:71:8f:6e:e2:e6:
                    09:86:24:40:16:e7:63:bb:2b:07:ff:52:68:1a:2c:
                    ee:99:07:36:40:cf:fb:6a:d6:34:74:62:3c:85:cd:
                    9b:5d:b9:a3:6f:67:c2:f5:f9:b6:1b:d6:57:d7:f5:
                    06:0d:55:b9:fd:50:d1:40:39:a9:7b:fc:0c:65:4f:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2C:D4:45:CE:67:7E:8E:10:1F:34:D9:6F:4B:1E:6C:6E:A2:9D:F9
            X509v3 Authority Key Identifier:
                keyid:38:40:A0:08:49:2F:71:B1:10:6D:76:BB:9F:35:A1:CF:96:6A:50:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/3840A008492F71B1106D76BB9F35A1CF966A50E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3840A008492F71B1106D76BB9F35A1CF966A50E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrBd9WfdMDD6DMVy8g3BCDPYPd7vAhLevV4T6ieuL4PP/0/3137302e3233392e3138342e302f32322d3332203d3e20323636333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:56:b2:9f:64:b6:1a:b0:c0:0f:b3:5f:76:3d:b6:04:6c:a1:
         ff:d1:cf:db:be:e2:3a:ae:65:43:a3:ed:7e:42:ec:ac:c3:55:
         b6:76:cc:78:9e:5c:ad:7b:63:e4:10:c5:11:54:e3:5c:f3:3f:
         97:81:3a:be:d1:75:b1:a9:a6:e7:90:a0:78:e6:45:98:8e:90:
         86:15:13:4f:85:84:cb:8a:f0:35:43:78:44:1a:48:18:80:9b:
         7d:e9:cc:cd:33:9c:09:3f:fc:d7:7b:33:ec:dd:68:b7:74:3f:
         27:b1:14:41:11:10:56:43:a3:2a:d1:4e:8a:7f:a1:9a:78:27:
         68:e0:fe:02:7c:88:16:ad:f6:49:15:fc:4d:c6:5e:df:a0:66:
         de:e4:13:94:0d:67:15:bc:59:2b:ad:bc:4c:6a:7f:67:2c:50:
         dd:83:be:4f:ad:2c:9a:24:57:ba:64:a8:2a:b7:74:b2:c2:f5:
         51:05:9f:fb:a7:dd:ed:2e:aa:db:29:78:46:55:9e:4b:17:23:
         be:8c:b5:63:41:ef:0c:7c:fb:fb:50:4a:7d:24:41:8b:b9:58:
         65:f1:4b:f5:60:75:aa:6c:62:ac:c9:12:e2:d0:72:38:45:a7:
         3f:9b:71:5a:a9:7c:89:c2:e9:c5:47:09:f5:c6:69:16:b9:90:
         d2:b5:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----