This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa
File:                     3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier:          kADLRHMmjiCezwZyqxWbGTII65kykV5XX1UDsZq/4sI=
Subject key identifier:   75:8C:52:57:C4:A6:BE:7B:A3:7D:50:9D:1F:95:90:8A:5B:97:56:F8
Certificate issuer:       /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial:       3DCFE6AA42A98787028A865D72D26D6768301FA9
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa
Signing time:             Fri 23 May 2025 16:53:06 +0000
ROA not before:           Fri 23 May 2025 16:48:06 +0000
ROA not after:            Fri 22 May 2026 16:53:06 +0000
asID:                     263256
IP address blocks:        170.247.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cf:e6:aa:42:a9:87:87:02:8a:86:5d:72:d2:6d:67:68:30:1f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
        Validity
            Not Before: May 23 16:48:06 2025 GMT
            Not After : May 22 16:53:06 2026 GMT
        Subject: CN=758C5257C4A6BE7BA37D509D1F95908A5B9756F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:7e:93:99:31:8a:73:8d:ad:c5:e1:db:c5:
                    d2:65:99:0c:25:71:d5:2f:78:f0:1b:31:a0:52:45:
                    fe:64:94:d7:00:da:1e:5e:08:47:73:28:d1:78:75:
                    5a:ee:e1:fa:d5:c3:95:8e:f2:18:04:cf:91:68:2f:
                    1e:20:2d:3e:a5:ee:32:f3:08:bb:16:21:b5:0f:b9:
                    64:33:7b:78:1b:ba:68:0e:13:bc:5a:10:df:aa:31:
                    28:c0:3f:79:33:26:f3:8c:9a:f7:8f:1d:f6:f4:3d:
                    ed:37:b0:b8:bb:74:c9:56:86:0e:39:8d:2e:aa:8d:
                    3f:62:37:99:eb:d0:e6:45:6a:d4:26:22:72:99:86:
                    7d:3a:de:b6:d0:4d:44:4e:5c:0f:53:b6:71:be:35:
                    6b:b3:01:61:ae:19:f0:4d:9e:a3:4d:44:39:0b:5c:
                    55:91:14:ee:ec:97:09:09:7d:be:8a:3a:11:6c:34:
                    08:51:c3:b5:2a:0e:bc:5d:9f:f0:e0:5b:a9:70:69:
                    d0:bc:fc:39:04:f9:4c:73:01:b4:47:2f:29:67:95:
                    ff:04:ac:a7:6a:67:65:a2:c5:c9:e8:09:77:2a:80:
                    b4:8a:37:70:6b:e5:67:ac:e5:77:48:f5:ac:8d:c7:
                    51:43:72:bf:05:67:30:84:5b:8a:f1:e8:49:73:c2:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8C:52:57:C4:A6:BE:7B:A3:7D:50:9D:1F:95:90:8A:5B:97:56:F8
            X509v3 Authority Key Identifier:
                keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:77:cb:c6:0f:88:8b:42:19:d3:56:1e:aa:4f:e0:74:69:
         22:7f:a5:9b:04:0d:a7:b1:fd:8a:76:c4:b6:78:5e:ed:de:4a:
         ff:dc:3d:6c:03:3c:67:b5:b9:15:08:d1:07:3d:dc:64:bd:5e:
         e2:d1:12:74:26:f3:d7:9a:2a:8b:21:13:83:a6:dc:68:93:a7:
         d7:49:3f:83:d5:bb:b1:01:16:a1:91:15:36:f8:e5:37:89:c1:
         71:fb:e4:d7:89:b8:24:f1:1d:6e:59:eb:08:59:e4:dd:3e:ee:
         0a:b3:79:fb:eb:47:61:e0:63:41:26:75:ff:69:96:19:24:23:
         1e:9b:d5:60:62:b0:a6:9f:c6:0f:03:ef:62:eb:49:94:35:10:
         81:3a:a8:67:0d:7f:c7:4f:15:3f:19:56:a0:95:83:50:e5:93:
         20:ed:70:9d:fd:1c:04:66:6c:10:59:75:bd:6a:2e:78:54:d5:
         b6:ab:19:01:75:08:70:76:12:a8:38:f2:00:c9:c1:c0:66:7e:
         9e:28:31:d7:ad:03:5f:f8:f6:b7:8e:e5:6b:be:3a:18:99:91:
         57:e2:77:64:dd:bb:0a:58:4b:a1:f9:5a:b5:6b:50:dc:1d:be:
         37:66:2a:29:ba:29:e0:5e:ee:4b:7e:fa:05:95:0d:6c:ef:07:
         e1:79:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----