This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32332d3234203d3e203233303734.roa
File:                     3136342e38352e38302e302f32332d3234203d3e203233303734.roa (raw, json)
Hash identifier:          MsMuaZR6JOv7BD996SkifesrDp96T7IjhJoGI5z90x8=
Subject key identifier:   A7:3E:02:CD:B0:77:FA:C6:E6:5B:A9:7A:4C:03:60:3D:BD:AB:7A:63
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       7D2FD35BE39C207A5C0C23AA854727C1AAD97574
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32332d3234203d3e203233303734.roa
Signing time:             Fri 07 Feb 2025 02:20:54 +0000
ROA not before:           Fri 07 Feb 2025 02:15:54 +0000
ROA not after:            Fri 06 Feb 2026 02:20:54 +0000
asID:                     23074
IP address blocks:        164.85.80.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2f:d3:5b:e3:9c:20:7a:5c:0c:23:aa:85:47:27:c1:aa:d9:75:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Feb  7 02:15:54 2025 GMT
            Not After : Feb  6 02:20:54 2026 GMT
        Subject: CN=A73E02CDB077FAC6E65BA97A4C03603DBDAB7A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:3c:c0:bc:4b:82:f2:61:6a:80:6c:2c:5a:
                    13:f7:77:1a:6b:44:2e:2b:32:c4:8e:2e:a3:a6:b3:
                    40:00:64:74:ba:62:cb:81:6a:0b:3b:e6:e8:e6:0e:
                    e0:5d:73:c1:7f:1c:e1:70:3c:a9:6c:2b:50:b8:e8:
                    c8:58:fe:d3:80:18:af:24:ce:d1:71:69:1c:1a:81:
                    b9:9e:61:2f:f0:71:0a:da:6b:b8:d6:db:28:07:dd:
                    cf:07:6c:8b:db:8b:a2:1f:d5:4d:ce:b5:bf:e4:6d:
                    f3:b4:7d:b8:4c:0f:c3:12:06:bd:06:26:8e:b7:39:
                    68:93:c0:7b:32:57:a4:0b:96:25:b5:96:45:9d:30:
                    05:b7:16:e2:0d:00:03:a1:a9:ff:f6:ac:9f:32:9f:
                    3d:e8:d9:8f:28:59:b4:f1:b6:15:c5:0d:d3:bd:8b:
                    52:e3:9a:54:26:ff:d6:f7:b9:0c:ef:e2:06:72:6f:
                    d5:cd:86:0c:86:c1:d9:ee:21:67:2b:a9:7f:3c:b3:
                    78:da:8a:22:f8:bb:1e:16:ea:e6:aa:87:be:78:5e:
                    da:19:2d:e7:15:35:49:56:85:dd:eb:5d:fa:ed:95:
                    9f:81:ed:00:39:51:d3:80:26:7d:87:20:16:d4:4f:
                    be:22:6c:15:17:35:16:ab:c7:28:91:0f:38:66:60:
                    4e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3E:02:CD:B0:77:FA:C6:E6:5B:A9:7A:4C:03:60:3D:BD:AB:7A:63
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32332d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:be:21:4e:76:db:6b:9f:82:c6:c5:0c:7b:84:2d:b6:12:a7:
         a4:71:18:66:15:ac:bf:5a:69:31:39:cd:e2:a4:10:bf:e3:f7:
         6d:ec:ab:19:1e:45:f3:49:77:84:6f:21:6a:e3:e9:91:88:8d:
         3c:e4:17:f8:e3:d9:20:62:16:a5:fe:69:e6:bb:9a:17:e9:49:
         f2:63:42:ef:2f:e9:37:87:7f:31:95:9d:c2:55:69:10:51:60:
         0e:1d:4c:8e:03:47:73:bc:22:d3:e6:38:77:40:84:5a:7e:73:
         05:53:87:e6:13:fe:38:4f:9a:bb:8f:46:91:9f:17:b9:c6:eb:
         03:bd:cc:d9:f1:56:23:af:fb:67:34:d5:fd:b6:17:35:3d:a6:
         77:c7:54:7f:e7:9e:4e:20:be:e3:b8:47:16:fa:7d:bf:d1:55:
         e0:f3:02:f8:34:20:4a:04:39:bc:e6:c1:69:ab:63:d3:7a:a7:
         44:3b:d2:0a:88:99:1f:c0:21:66:ef:4f:ef:df:52:a0:2b:59:
         ae:68:7f:d4:45:a4:9a:e7:dd:11:ce:19:7d:e6:91:7a:10:34:
         f1:19:23:91:ca:ff:54:4b:07:32:40:b1:e9:b9:07:21:bb:e4:
         ab:74:c7:81:72:f2:55:b2:c8:d2:7d:a6:f5:db:27:3a:69:47:
         06:08:67:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----