This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32332e302f32342d3332203d3e20323636343430.roa
File:                     3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          xehbKMbZvWgSqHxIKduXg4YHONpfowsl6azRQ9jHu4Q=
Subject key identifier:   95:02:B9:8D:DC:35:91:D5:BC:D7:84:BC:CE:9F:C2:24:31:E7:33:F2
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       4D1BE3B0A5E3AC826ED34DDB9D0CC8CB24F59882
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32332e302f32342d3332203d3e20323636343430.roa
Signing time:             Fri 24 Oct 2025 11:17:53 +0000
ROA not before:           Fri 24 Oct 2025 11:12:53 +0000
ROA not after:            Fri 23 Oct 2026 11:17:53 +0000
asID:                     266440
IP address blocks:        170.82.23.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1b:e3:b0:a5:e3:ac:82:6e:d3:4d:db:9d:0c:c8:cb:24:f5:98:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Oct 24 11:12:53 2025 GMT
            Not After : Oct 23 11:17:53 2026 GMT
        Subject: CN=9502B98DDC3591D5BCD784BCCE9FC22431E733F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:43:e0:e3:3d:f3:e7:f8:45:33:78:3b:2c:
                    72:42:e1:32:e1:ae:3c:bd:84:d0:e0:63:17:52:c2:
                    bb:b8:8f:b1:db:4a:59:2b:83:ec:ed:01:fc:0e:c9:
                    61:91:56:62:cc:41:bb:e6:d5:8b:05:da:e7:7c:4b:
                    46:9b:ff:55:03:9e:6b:f0:66:aa:5f:7b:da:36:e3:
                    d0:2e:29:30:c3:c1:44:5d:2d:4f:67:f3:23:8e:24:
                    fe:50:81:c0:f4:30:88:13:c6:35:5d:8f:a0:6d:b8:
                    db:67:f2:91:90:d7:80:43:e1:34:94:5d:b8:c7:5b:
                    a5:e7:41:2d:fa:57:cf:9f:04:f8:83:f3:89:2e:6a:
                    4c:1c:d2:fe:be:8d:db:39:74:26:80:d6:5f:ca:fc:
                    28:6e:d8:bf:92:8a:24:6c:b1:f1:92:df:62:36:3f:
                    b6:2a:8e:ba:56:e5:7e:a0:eb:d6:5e:ce:ae:48:7d:
                    df:20:63:44:75:62:98:92:f2:03:4c:f4:cd:61:58:
                    79:15:69:85:33:b5:2c:94:bc:d9:49:d3:10:9e:25:
                    c9:c1:e1:5d:af:1b:a8:0d:77:eb:da:4b:c6:c4:9b:
                    d3:9a:9e:26:f8:3a:fb:5b:38:62:93:a3:2d:0f:b6:
                    86:bb:23:73:b0:94:cd:78:32:41:ec:0f:ee:95:06:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:B9:8D:DC:35:91:D5:BC:D7:84:BC:CE:9F:C2:24:31:E7:33:F2
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32332e302f32342d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:68:ee:c3:ad:a9:5d:c0:f8:06:a0:75:66:cc:f2:49:eb:03:
         d1:4f:04:2e:55:0d:b1:22:4e:22:b0:8c:bc:15:d4:88:92:ff:
         f7:42:bc:25:c9:78:1a:47:f8:d1:3d:66:37:6d:29:df:7e:01:
         c4:ed:1d:8a:6d:d4:d3:cd:a9:2d:fe:26:ff:c2:7e:cf:09:a5:
         b2:4d:96:99:34:18:28:af:bb:c8:0a:e7:07:dd:00:bb:98:e5:
         9e:3a:aa:ed:3f:05:cd:6c:3f:38:b9:0c:b2:e3:46:c8:bd:15:
         7a:cd:b0:8c:4d:dd:1f:42:73:4a:8d:16:ee:ce:bd:51:4a:38:
         8f:e9:80:c2:23:cb:69:f4:9d:28:8d:c0:06:8d:6f:16:d3:d0:
         b2:19:ac:46:9d:df:39:40:d4:2d:89:d2:32:25:ab:a6:b1:d3:
         64:5b:d1:d5:73:bc:af:57:08:63:f4:0f:d3:af:d6:44:b0:88:
         16:04:3c:4d:e2:d9:71:1f:39:52:f8:0d:80:d1:51:3a:73:d0:
         2b:e8:3b:86:8a:43:5e:77:17:cb:88:ff:5c:48:8c:34:c7:c5:
         cf:81:0e:b6:8c:64:88:3e:5b:2b:8d:4f:e8:5e:c4:5b:04:42:
         cf:82:ea:1d:98:79:93:42:18:bd:9b:b0:85:38:e4:ae:7b:2e:
         92:30:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:19:57 2025 by rpki-client