This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32312e302f32342d3332203d3e20323636343430.roa
File:                     3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          GdWJ0LtdgTQyLq+jIrp9wtVjAfcMLmN9XadrUm88244=
Subject key identifier:   65:FD:39:23:93:31:71:39:36:6F:B3:20:E2:1C:DB:D9:A8:43:EB:50
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       0A0D062B51750A204BFFE1A1488F9D82CE784E29
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32312e302f32342d3332203d3e20323636343430.roa
Signing time:             Fri 24 Oct 2025 11:17:53 +0000
ROA not before:           Fri 24 Oct 2025 11:12:53 +0000
ROA not after:            Fri 23 Oct 2026 11:17:53 +0000
asID:                     266440
IP address blocks:        170.82.21.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0d:06:2b:51:75:0a:20:4b:ff:e1:a1:48:8f:9d:82:ce:78:4e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Oct 24 11:12:53 2025 GMT
            Not After : Oct 23 11:17:53 2026 GMT
        Subject: CN=65FD392393317139366FB320E21CDBD9A843EB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:f9:04:d4:98:a6:1c:1d:90:7b:12:9b:df:
                    34:7d:b5:62:6a:6b:0b:39:cd:de:00:78:36:f2:36:
                    e2:46:fe:e6:33:a2:fd:b6:c1:45:8a:9c:d2:09:96:
                    c5:37:3f:52:fe:70:54:1c:06:19:ff:b6:ba:0e:95:
                    7e:8b:94:64:a6:ce:b4:7c:8d:e5:7e:ef:97:da:14:
                    d7:a0:12:b6:74:ba:c5:76:23:a6:8d:9a:7e:93:7b:
                    34:57:d3:88:22:90:f3:b1:f5:dc:a0:f8:cc:62:79:
                    f4:98:35:9d:d9:a4:d1:ba:02:8d:76:69:32:ef:20:
                    e4:81:54:08:09:ce:55:7e:5a:43:ab:7e:a1:08:6d:
                    06:45:1f:6a:3e:fe:57:39:8f:e1:4a:02:d3:24:0e:
                    00:d2:c9:5a:44:f1:f4:35:70:44:4b:fc:17:3c:08:
                    89:2a:97:fd:4f:0f:d9:24:f3:7c:b7:1e:0c:ed:99:
                    ec:b9:a2:6c:a4:a5:2b:69:b5:21:e1:21:8f:2d:c1:
                    b3:58:5c:86:6b:ab:5e:28:22:9d:92:bc:3c:0d:c4:
                    7f:6a:39:67:52:08:41:63:ff:1e:0d:4b:51:e9:da:
                    3b:ea:ab:61:99:f9:d9:0d:79:6c:a7:7c:67:16:ea:
                    d5:b2:91:30:9c:51:0a:30:7a:ad:8b:f5:72:61:5e:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FD:39:23:93:31:71:39:36:6F:B3:20:E2:1C:DB:D9:A8:43:EB:50
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32312e302f32342d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9e:89:4c:d1:2c:f2:6f:93:e2:80:60:fa:e8:4a:af:37:76:
         e3:aa:5f:30:7d:5a:f6:42:90:06:9c:97:c6:4c:f6:c4:ad:0a:
         a8:8b:69:a5:32:ad:77:c3:fe:46:73:51:d0:7e:c0:0d:be:7a:
         13:e7:cf:0c:22:eb:fb:7d:24:c8:bb:a1:10:d8:b8:27:a9:dd:
         61:70:5c:ba:f0:36:95:8d:96:45:c2:13:09:fb:51:f7:65:a8:
         31:4d:d6:f9:b5:67:54:ce:f0:51:47:99:1c:de:2e:10:54:9a:
         f4:b1:f2:eb:e3:76:45:c2:e6:aa:a8:5f:ae:e0:72:1b:66:2e:
         1b:49:a3:a4:94:f6:d1:7d:f1:59:91:5f:de:c0:70:de:02:00:
         82:8c:40:ba:7c:24:53:68:95:68:57:9a:1b:e0:28:3a:d7:5a:
         d9:6b:62:24:64:5e:62:5b:7b:4c:b3:50:7c:ea:3c:7c:a3:97:
         76:81:f6:73:31:d4:42:4a:36:e6:07:4b:4e:e8:47:36:f1:5b:
         6a:09:4b:b1:c8:1a:23:a4:a4:27:fa:26:a5:b7:3e:c9:f3:3b:
         e0:d1:7a:5f:f9:ea:39:be:13:27:56:55:ee:47:35:73:f9:aa:
         fa:eb:09:6e:ac:5b:7b:8a:31:6c:89:c8:51:42:1b:c8:2b:5e:
         a7:a2:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:19:59 2025 by rpki-client