This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa
File:                     34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa (raw, json)
Hash identifier:          NRSqYAeT4IP0KC6hWzG6qgEytsBmswJqBmWmwL9mpZM=
Subject key identifier:   AA:1B:F5:B2:AE:63:77:79:A4:3B:94:64:FF:C5:DF:9F:FC:9C:4E:54
Certificate issuer:       /CN=87575BC22E7BED0E57475986037CBA8D6DE4F4A8
Certificate serial:       793BFDB00D1F09742D711D4294B0C7A653BE0550
Authority key identifier: 87:57:5B:C2:2E:7B:ED:0E:57:47:59:86:03:7C:BA:8D:6D:E4:F4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa
Signing time:             Fri 20 Jun 2025 15:43:53 +0000
ROA not before:           Fri 20 Jun 2025 15:38:53 +0000
ROA not after:            Fri 19 Jun 2026 15:43:53 +0000
asID:                     268850
IP address blocks:        45.174.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3b:fd:b0:0d:1f:09:74:2d:71:1d:42:94:b0:c7:a6:53:be:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87575BC22E7BED0E57475986037CBA8D6DE4F4A8
        Validity
            Not Before: Jun 20 15:38:53 2025 GMT
            Not After : Jun 19 15:43:53 2026 GMT
        Subject: CN=AA1BF5B2AE637779A43B9464FFC5DF9FFC9C4E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:cf:ce:31:a6:d5:a3:bf:2e:d0:52:6e:86:
                    f2:93:1c:4b:64:73:49:31:c2:ce:ca:f2:da:5a:c8:
                    46:c3:eb:89:e2:94:0f:7c:3b:70:5d:c8:f3:c0:68:
                    ce:de:89:e0:87:cb:8a:3f:9a:ca:09:45:d2:ce:f3:
                    56:f5:c2:8e:f1:99:bf:4d:cb:22:11:c4:3b:a6:15:
                    cf:ec:ae:60:54:61:8a:e0:5d:d3:d0:8f:4b:61:6d:
                    ea:92:2b:cc:2b:ad:f6:3b:2e:e1:96:96:da:83:db:
                    54:44:5d:f6:ce:9f:f5:7b:d7:b3:20:9d:87:d6:a0:
                    13:55:9b:9e:96:6c:2b:ea:13:57:7e:53:ff:02:6d:
                    61:cb:47:9f:6f:c4:59:74:b9:e4:b2:7b:80:1e:19:
                    00:79:b5:96:6c:fa:eb:16:60:3b:c4:24:c3:40:f6:
                    99:17:7d:6b:eb:82:99:78:b8:f0:c2:96:54:4a:79:
                    2b:bd:01:b3:5d:9d:e2:e3:00:da:5f:71:6d:11:cd:
                    93:2b:ae:9f:68:a5:ef:08:6a:15:6c:d2:b1:ed:a5:
                    bd:ae:1e:87:d7:3b:ed:48:88:88:84:83:f8:65:eb:
                    a6:d3:ad:53:5d:c8:58:3d:40:00:2e:dc:00:1e:04:
                    7c:68:2a:b9:6c:6e:a3:88:66:5c:fd:8d:21:b3:18:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:F5:B2:AE:63:77:79:A4:3B:94:64:FF:C5:DF:9F:FC:9C:4E:54
            X509v3 Authority Key Identifier:
                keyid:87:57:5B:C2:2E:7B:ED:0E:57:47:59:86:03:7C:BA:8D:6D:E4:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2e:46:37:3c:d2:da:41:04:d9:ff:f9:66:33:59:20:c0:ed:
         65:1f:2f:36:ad:bf:90:36:6c:f0:5d:ca:75:0b:60:08:b8:5f:
         14:c4:ad:87:34:d0:c3:5b:27:4a:3c:cf:03:68:cd:7d:ae:14:
         9f:40:1d:25:a9:44:b7:1a:83:08:7c:a0:8f:ab:d6:db:1c:a3:
         6d:55:ee:b7:39:8e:d8:65:d5:94:fc:24:ea:44:5d:7a:77:27:
         18:19:07:98:a7:c4:40:83:38:d2:e8:33:ed:21:50:5c:dd:0e:
         cb:6d:0a:c4:92:fd:a2:6b:51:ac:32:ed:5a:f1:c4:10:00:78:
         8b:b9:86:bb:7c:d9:8f:08:cf:b2:6e:ce:a1:50:4e:2e:86:14:
         3f:f0:51:6c:3a:f7:46:4a:fa:6a:2e:07:99:71:57:8c:39:5a:
         74:f8:7d:4d:d0:cc:5a:ff:00:9d:f3:61:6b:8e:67:b5:08:9c:
         08:39:e2:52:0c:09:ae:3c:0c:23:4a:1b:ec:d3:ce:83:5d:fb:
         d9:9e:04:28:6d:c5:b5:eb:ae:50:c6:85:59:15:0c:d1:b5:a1:
         3d:89:1f:7d:3c:25:84:21:7d:aa:f3:c5:87:af:9c:5b:58:bf:
         98:bc:ad:cb:e9:13:bb:de:3b:3b:87:8a:1c:ee:1a:af:69:4d:
         dc:bc:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----