This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32332d3233203d3e20323633323536.roa
File:                     3139382e35382e382e302f32332d3233203d3e20323633323536.roa (raw, json)
Hash identifier:          jGi6ojpVlubXgS4RG0vtuS6mInDWh5WuPzGHNV7NTr0=
Subject key identifier:   28:C2:E1:0D:84:0B:2A:51:38:E4:E5:48:B1:8D:05:D9:42:1A:9F:13
Certificate issuer:       /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial:       457A4D0D2C6D283D66B769755EEDE33D4F0CD4E3
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32332d3233203d3e20323633323536.roa
Signing time:             Fri 23 May 2025 16:53:05 +0000
ROA not before:           Fri 23 May 2025 16:48:05 +0000
ROA not after:            Fri 22 May 2026 16:53:05 +0000
asID:                     263256
IP address blocks:        198.58.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7a:4d:0d:2c:6d:28:3d:66:b7:69:75:5e:ed:e3:3d:4f:0c:d4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
        Validity
            Not Before: May 23 16:48:05 2025 GMT
            Not After : May 22 16:53:05 2026 GMT
        Subject: CN=28C2E10D840B2A5138E4E548B18D05D9421A9F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:03:57:ec:53:a9:22:99:db:2c:be:52:7c:
                    9e:ce:f0:8a:6b:3f:e1:2b:c1:57:11:88:6d:cd:0b:
                    1b:94:b6:38:b5:35:6a:04:17:31:40:fd:63:84:4e:
                    5b:75:53:78:bc:99:ae:85:0d:16:a8:ff:94:4a:c9:
                    9c:71:95:1c:0a:fe:0d:d5:17:87:f7:d2:07:48:c6:
                    e8:4e:c0:38:0e:c4:de:2e:b7:56:25:27:91:89:71:
                    69:37:84:c0:a5:74:4a:e1:fc:9b:16:99:ef:2a:da:
                    28:98:b4:91:56:63:ba:ac:81:53:55:71:82:55:da:
                    80:9c:d5:a2:50:aa:55:a8:6e:95:3b:a8:72:37:5e:
                    a3:9f:f0:da:23:de:7d:e4:51:3a:fc:68:20:86:e0:
                    fd:14:7c:33:b7:31:7d:eb:42:3e:05:54:08:4f:14:
                    84:09:01:b6:5a:c6:e5:21:40:43:5c:e1:b7:94:3c:
                    d6:0c:bf:ba:ef:d5:2c:5c:f1:d2:c9:12:70:39:2f:
                    10:8b:6e:53:77:e2:04:4e:5a:98:aa:1c:60:98:ea:
                    79:fd:eb:11:63:66:0b:cf:d2:7e:2e:11:b0:ff:04:
                    c4:04:8b:fe:5c:ca:71:b4:81:39:44:56:a1:ee:c5:
                    bf:63:8a:d0:35:77:11:0b:9a:d4:d6:92:39:57:6e:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C2:E1:0D:84:0B:2A:51:38:E4:E5:48:B1:8D:05:D9:42:1A:9F:13
            X509v3 Authority Key Identifier:
                keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32332d3233203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:0b:68:81:63:de:64:c5:84:0b:e0:f2:4a:fb:35:7d:0a:85:
         a3:b2:39:23:3a:92:98:c8:7d:37:19:8d:49:9a:f0:b1:62:63:
         b9:95:4e:d4:2e:23:b4:d3:14:04:ec:60:13:75:f9:65:3c:68:
         ec:7c:cf:51:33:e0:c6:f3:38:dd:bc:ba:53:44:17:08:fd:31:
         98:c4:a4:bc:4b:0c:81:59:bc:8f:d3:a7:01:4b:7e:ce:f6:50:
         0e:b1:64:8b:ec:19:cb:35:d3:a5:ad:d5:bf:4b:68:ab:cd:8d:
         83:cb:19:cb:47:51:d2:64:d9:ca:0a:1d:b1:be:aa:07:e4:33:
         ad:c2:88:ae:f9:5e:ce:0c:1b:4b:12:5e:62:2a:3a:d1:91:53:
         2a:c0:47:bf:a0:db:40:8b:90:17:db:32:6f:85:03:52:2c:25:
         24:8b:43:cd:6c:d3:bb:3f:c8:c8:31:33:73:04:33:2e:1f:73:
         fb:0c:bb:2d:b9:48:06:16:28:83:d1:6a:33:e0:7a:4b:20:e7:
         44:3b:83:5e:ec:8b:19:30:f7:21:20:4a:63:ec:d1:02:8b:a0:
         13:49:3f:a9:44:a2:c8:12:7c:ca:4e:f9:7e:0d:09:d8:da:1d:
         2c:bb:4d:91:64:0b:f3:7d:cf:c0:62:75:48:7c:82:b9:a3:86:
         a2:23:ee:6e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURXpNDSxtKD1mt2l1Xu3jPU8M1OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1NkI5NTYyMTVBRTRDN0Y5NTFEOUZBQkE3Njg5QjBD
MTgzMDY4MDAeFw0yNTA1MjMxNjQ4MDVaFw0yNjA1MjIxNjUzMDVaMDMxMTAvBgNV
BAMTKDI4QzJFMTBEODQwQjJBNTEzOEU0RTU0OEIxOEQwNUQ5NDIxQTlGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlsgNX7FOpIpnbLL5SfJ7O8Ipr
P+ErwVcRiG3NCxuUtji1NWoEFzFA/WOETlt1U3i8ma6FDRao/5RKyZxxlRwK/g3V
F4f30gdIxuhOwDgOxN4ut1YlJ5GJcWk3hMCldErh/JsWme8q2iiYtJFWY7qsgVNV
cYJV2oCc1aJQqlWobpU7qHI3XqOf8Noj3n3kUTr8aCCG4P0UfDO3MX3rQj4FVAhP
FIQJAbZaxuUhQENc4beUPNYMv7rv1Sxc8dLJEnA5LxCLblN34gROWpiqHGCY6nn9
6xFjZgvP0n4uEbD/BMQEi/5cynG0gTlEVqHuxb9jitA1dxELmtTWkjlXbsj/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUKMLhDYQLKlE45OVIsY0F2UIanxMwHwYDVR0j
BBgwFoAUAVa5ViFa5Mf5Udn6unaJsMGDBoAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC8wMTU2Qjk1NjIxNUFFNEM3Rjk1MUQ5RkFCQTc2ODlCMEMxODMwNjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNTZCOTU2MjE1QUU0QzdG
OTUxRDlGQUJBNzY4OUIwQzE4MzA2ODAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzOTM4MmUzNTM4MmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMzMy
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcY6CDANBgkqhkiG9w0BAQsFAAOCAQEArQtogWPeZMWE
C+DySvs1fQqFo7I5IzqSmMh9NxmNSZrwsWJjuZVO1C4jtNMUBOxgE3X5ZTxo7HzP
UTPgxvM43by6U0QXCP0xmMSkvEsMgVm8j9OnAUt+zvZQDrFki+wZyzXTpa3Vv0to
q82Ng8sZy0dR0mTZygodsb6qB+QzrcKIrvlezgwbSxJeYio60ZFTKsBHv6DbQIuQ
F9syb4UDUiwlJItDzWzTuz/IyDEzcwQzLh9z+wy7LblIBhYog9FqM+B6SyDnRDuD
XuyLGTD3ISBKY+zRAougE0k/qUSiyBJ8yk75fg0J2NodLLtNkWQL833PwGJ1SHyC
uaOGoiPubg==
-----END CERTIFICATE-----