This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3136382e3232382e3132302e302f32322d3232203d3e20323632363938.roa
File:                     3136382e3232382e3132302e302f32322d3232203d3e20323632363938.roa (raw, json)
Hash identifier:          N3k0p71bsgw3aZx1VNfeKr9LAE5VMdRkUgGUIz6Ioww=
Subject key identifier:   1D:1E:6E:9D:85:B9:55:7F:21:C8:D5:2A:42:C3:0C:60:A1:AB:A6:9B
Certificate issuer:       /CN=0EEB1A36F74E019593303E919D675571126F53FC
Certificate serial:       4490C5D807CE0E08F04B352DEB91302FCE1F3A79
Authority key identifier: 0E:EB:1A:36:F7:4E:01:95:93:30:3E:91:9D:67:55:71:12:6F:53:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEB1A36F74E019593303E919D675571126F53FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3136382e3232382e3132302e302f32322d3232203d3e20323632363938.roa
Signing time:             Thu 10 Jul 2025 14:49:54 +0000
ROA not before:           Thu 10 Jul 2025 14:44:54 +0000
ROA not after:            Thu 09 Jul 2026 14:49:54 +0000
asID:                     262698
IP address blocks:        168.228.120.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:90:c5:d8:07:ce:0e:08:f0:4b:35:2d:eb:91:30:2f:ce:1f:3a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EEB1A36F74E019593303E919D675571126F53FC
        Validity
            Not Before: Jul 10 14:44:54 2025 GMT
            Not After : Jul  9 14:49:54 2026 GMT
        Subject: CN=1D1E6E9D85B9557F21C8D52A42C30C60A1ABA69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:f3:80:5a:a0:6d:75:1a:32:a6:a5:f6:52:
                    65:17:9f:00:17:f7:55:a7:62:03:88:aa:99:bd:57:
                    f4:bc:0c:76:69:eb:c6:55:67:74:ed:92:ad:c6:66:
                    61:eb:ea:b7:09:5b:c3:af:2b:b2:32:76:d5:d9:3b:
                    dc:f2:08:47:f8:58:07:f4:48:12:b9:9d:c3:9d:4f:
                    54:a5:a2:7b:d6:77:13:36:05:6b:9a:86:f7:14:7a:
                    b0:ea:fa:03:11:c1:b0:e4:e5:87:a9:08:bc:23:0e:
                    f7:4c:2c:ff:d3:e6:40:1c:90:71:8f:21:63:e3:3c:
                    18:99:02:48:b4:ad:a3:46:93:ba:92:55:38:ff:ae:
                    19:53:82:3f:8d:bb:77:b7:98:a5:e7:00:f9:2e:b0:
                    cc:53:d4:6c:c0:28:79:9b:cb:0d:e0:4c:71:b7:22:
                    46:b4:d0:71:30:6d:bc:ef:76:24:af:84:0a:eb:6c:
                    3f:2c:54:a6:b0:5a:3d:1a:e7:c6:8b:43:b3:fc:cf:
                    9f:56:f8:f3:07:88:ef:e8:15:93:78:ec:14:9a:9a:
                    64:b0:2c:c8:e1:72:c1:35:4b:77:94:84:18:fb:75:
                    dd:68:5a:71:77:d4:9f:cd:65:63:4c:1b:22:44:f3:
                    b7:a5:83:d8:d9:83:1d:ef:f5:15:37:95:58:15:34:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1E:6E:9D:85:B9:55:7F:21:C8:D5:2A:42:C3:0C:60:A1:AB:A6:9B
            X509v3 Authority Key Identifier:
                keyid:0E:EB:1A:36:F7:4E:01:95:93:30:3E:91:9D:67:55:71:12:6F:53:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/0EEB1A36F74E019593303E919D675571126F53FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEB1A36F74E019593303E919D675571126F53FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3136382e3232382e3132302e302f32322d3232203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:ff:4e:de:81:75:75:2c:21:5c:74:df:c3:16:5e:c6:8b:6e:
         31:43:8e:17:72:3d:d8:4a:3e:a4:d7:ba:b6:83:0c:89:32:0d:
         67:ab:68:f7:3f:dd:b8:d5:5f:b2:52:c7:fb:04:ed:a8:20:7b:
         53:3f:ea:5d:c0:46:bd:b9:06:45:32:f7:f2:25:4a:60:06:a1:
         04:02:dc:10:cf:43:32:a3:02:52:74:23:e5:e6:ca:85:31:79:
         af:1e:1a:8c:a6:ff:93:6a:fd:42:b3:db:6f:3f:90:b2:7d:b9:
         b8:24:a8:59:af:43:0e:88:d9:ab:f5:7e:f4:c8:3f:ad:c5:d5:
         3c:f4:33:48:e9:6a:40:f3:78:71:91:1c:53:f6:7c:c5:ea:c9:
         3c:04:d5:52:6c:5a:e4:8d:de:3a:f1:04:12:5c:24:cf:f8:6b:
         96:4d:25:f0:81:c1:12:00:18:8b:ed:73:4e:2d:95:67:1c:47:
         f6:f2:a8:6a:1e:9f:2a:76:57:46:77:1d:11:18:b1:13:c3:2d:
         ab:d5:a6:af:46:fb:5d:4e:05:02:fd:50:b6:10:fb:70:93:87:
         71:f5:4f:d0:fb:8b:d9:d2:7d:38:7a:33:a4:e2:2f:bc:3d:f2:
         02:be:5b:68:6f:8a:cc:3f:54:55:85:1a:be:e3:27:ad:46:ec:
         ee:98:43:af
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURJDF2AfODgjwSzUt65EwL84fOnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVFQjFBMzZGNzRFMDE5NTkzMzAzRTkxOUQ2NzU1NzEx
MjZGNTNGQzAeFw0yNTA3MTAxNDQ0NTRaFw0yNjA3MDkxNDQ5NTRaMDMxMTAvBgNV
BAMTKDFEMUU2RTlEODVCOTU1N0YyMUM4RDUyQTQyQzMwQzYwQTFBQkE2OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwmfOAWqBtdRoypqX2UmUXnwAX
91WnYgOIqpm9V/S8DHZp68ZVZ3Ttkq3GZmHr6rcJW8OvK7IydtXZO9zyCEf4WAf0
SBK5ncOdT1SlonvWdxM2BWuahvcUerDq+gMRwbDk5YepCLwjDvdMLP/T5kAckHGP
IWPjPBiZAki0raNGk7qSVTj/rhlTgj+Nu3e3mKXnAPkusMxT1GzAKHmbyw3gTHG3
Ika00HEwbbzvdiSvhArrbD8sVKawWj0a58aLQ7P8z59W+PMHiO/oFZN47BSammSw
LMjhcsE1S3eUhBj7dd1oWnF31J/NZWNMGyJE87elg9jZgx3v9RU3lVgVNEsPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHR5unYW5VX8hyNUqQsMMYKGrppswHwYDVR0j
BBgwFoAUDusaNvdOAZWTMD6RnWdVcRJvU/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhvbjQyajJ5bm12S1c3RENHWHFTUU5XaVg3U0c4Q0hnUTh5aExicmVu
V2ovMC8wRUVCMUEzNkY3NEUwMTk1OTMzMDNFOTE5RDY3NTU3MTEyNkY1M0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRUIxQTM2Rjc0RTAxOTU5
MzMwM0U5MTlENjc1NTcxMTI2RjUzRkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zob240MmoyeW5tdktXN0RDR1hxU1FOV2lYN1NHOENIZ1E4eWhMYnJlbldqLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM2MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjkeDANBgkqhkiG9w0BAQsFAAOCAQEAPv9O
3oF1dSwhXHTfwxZexotuMUOOF3I92Eo+pNe6toMMiTINZ6to9z/duNVfslLH+wTt
qCB7Uz/qXcBGvbkGRTL38iVKYAahBALcEM9DMqMCUnQj5ebKhTF5rx4ajKb/k2r9
QrPbbz+Qsn25uCSoWa9DDojZq/V+9Mg/rcXVPPQzSOlqQPN4cZEcU/Z8xerJPATV
Umxa5I3eOvEEElwkz/hrlk0l8IHBEgAYi+1zTi2VZxxH9vKoah6fKnZXRncdERix
E8Mtq9Wmr0b7XU4FAv1QthD7cJOHcfVP0PuL2dJ9OHozpOIvvD3yAr5baG+KzD9U
VYUavuMnrUbs7phDrw==
-----END CERTIFICATE-----