This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32342d3332203d3e20323636343430.roa
File:                     3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          nXRUSLxP704OHb37fvBEpRmpydHyARjS+sxNSAiI2dI=
Subject key identifier:   CF:5B:06:1A:51:17:D8:AE:02:D5:3B:A2:F7:CF:18:54:09:60:F3:DB
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       614EEFE2914F2E296B057FA4C81DBE81729009C3
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32342d3332203d3e20323636343430.roa
Signing time:             Fri 24 Oct 2025 11:17:53 +0000
ROA not before:           Fri 24 Oct 2025 11:12:53 +0000
ROA not after:            Fri 23 Oct 2026 11:17:53 +0000
asID:                     266440
IP address blocks:        170.82.22.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4e:ef:e2:91:4f:2e:29:6b:05:7f:a4:c8:1d:be:81:72:90:09:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Oct 24 11:12:53 2025 GMT
            Not After : Oct 23 11:17:53 2026 GMT
        Subject: CN=CF5B061A5117D8AE02D53BA2F7CF18540960F3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:51:f8:a9:78:10:67:88:6e:88:aa:7e:ac:
                    7f:57:a9:4d:61:1d:c7:18:50:67:ed:b3:d5:bb:23:
                    56:00:b9:d4:74:22:9e:0d:a5:5b:b7:91:6b:d0:7e:
                    bb:3d:ab:8f:85:97:2f:0d:ef:f1:53:ea:b4:1b:dd:
                    f3:63:75:18:3e:57:e0:83:00:13:53:d2:36:84:5c:
                    8c:e9:df:67:11:ef:49:79:fb:62:35:c7:c6:fa:f2:
                    ab:d4:05:06:f2:44:81:d7:4d:8b:f6:4c:2e:0a:cb:
                    6b:05:3f:75:08:5f:3c:ac:85:01:a7:ff:5d:a8:1c:
                    be:4f:7d:b2:5e:ee:13:3f:4a:cf:91:15:c0:f0:72:
                    f3:4f:5a:95:d1:32:31:11:24:e2:75:68:d3:d8:8b:
                    bb:d6:ee:da:ab:3c:f8:53:4d:32:89:7d:48:90:0f:
                    ed:a5:53:41:9f:ba:bb:a0:13:97:5a:d6:0b:29:df:
                    88:ea:0b:6e:ea:dc:09:fe:f5:ee:30:c8:0b:14:07:
                    aa:6b:49:f5:10:65:e1:9d:f9:ee:e8:b9:52:b8:38:
                    34:cb:0a:38:76:48:9b:50:12:d7:4b:3a:31:d1:48:
                    9a:7b:e9:15:b0:0b:c9:95:30:47:f0:e9:80:d8:4f:
                    20:15:3c:e2:9a:39:9f:06:ea:6e:5c:0e:b0:0e:5b:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5B:06:1A:51:17:D8:AE:02:D5:3B:A2:F7:CF:18:54:09:60:F3:DB
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32342d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:48:e8:a4:5d:e3:02:57:34:cd:db:90:ee:2b:ff:3f:39:ad:
         c4:ef:fa:7a:0a:8f:44:8e:05:22:1c:0d:08:73:16:ed:6e:05:
         3d:de:68:43:c9:a6:46:d1:5e:43:62:06:17:93:a1:b7:a8:88:
         0c:f3:83:82:8f:88:4b:e5:09:dc:e2:8c:e7:6c:5a:68:44:81:
         ed:5c:8f:c3:31:ae:b0:3b:ea:bb:52:80:fd:18:9f:25:fa:7e:
         db:cc:bb:f1:a5:8b:1d:67:a8:83:35:7f:f5:a9:1e:6a:2d:35:
         90:d6:1f:f6:a9:20:a6:30:b8:dc:95:ec:f4:04:74:84:f5:54:
         34:19:a6:9d:3d:d7:b5:28:e2:ea:7c:e2:1d:6b:29:65:91:84:
         f9:be:bb:9b:c6:e6:8c:b3:1e:41:b9:7c:c2:ed:ee:23:46:08:
         09:5a:ae:9f:45:d0:66:39:f5:95:31:bf:35:e1:a4:17:d2:39:
         8b:a4:50:78:ae:f0:5c:cb:8b:e0:15:8d:c3:35:b5:9c:04:02:
         9e:dc:c5:cb:73:60:52:d6:ed:d4:c3:a3:8c:bd:ca:15:a1:97:
         2b:17:3d:eb:18:7c:f5:59:25:84:df:29:93:d2:08:62:e3:8f:
         66:2f:7f:f1:86:e8:a1:b8:96:14:d6:f6:e7:44:8e:09:e9:b7:
         e1:40:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:19:54 2025 by rpki-client