This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa (raw, json)
Hash identifier:          +WeKBoiidSUi7YY1XPN7x/YPiyC57o4eIF59+GOtwko=
Subject key identifier:   6A:B1:DA:92:1B:71:32:6E:05:74:D5:5E:59:70:D9:7B:36:98:35:28
Certificate issuer:       /CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
Certificate serial:       0F192624FFCE6A3877DBEFB53763968550EA03DA
Authority key identifier: BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
Signing time:             Wed 01 Oct 2025 22:53:53 +0000
ROA not before:           Wed 01 Oct 2025 22:48:53 +0000
ROA not after:            Wed 30 Sep 2026 22:53:53 +0000
asID:                     270579
IP address blocks:        189.126.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:19:26:24:ff:ce:6a:38:77:db:ef:b5:37:63:96:85:50:ea:03:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
        Validity
            Not Before: Oct  1 22:48:53 2025 GMT
            Not After : Sep 30 22:53:53 2026 GMT
        Subject: CN=6AB1DA921B71326E0574D55E5970D97B36983528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:de:02:d4:5a:7d:d2:f7:3d:af:a0:64:ba:77:
                    bd:e1:1e:b4:73:6e:14:8e:0a:b3:f3:67:34:df:96:
                    57:be:86:2e:d8:24:9d:47:cf:af:52:c3:d6:45:2c:
                    c7:0d:2b:29:18:8a:09:0f:4e:04:23:74:ea:c0:8d:
                    cc:5c:b2:99:f3:12:3e:d1:e7:34:fd:68:fb:e6:65:
                    da:08:bd:9e:29:41:cb:94:84:24:78:c2:48:d6:8a:
                    1f:d3:26:78:42:7d:b7:1a:bb:92:2f:26:60:79:14:
                    50:ba:1b:fb:00:df:0d:7c:9e:37:9f:47:ea:cc:d4:
                    61:0d:fa:49:ff:1a:55:51:02:fa:6b:f3:37:bd:28:
                    92:98:a1:70:4b:0f:a3:ab:cf:d0:31:8b:25:8a:37:
                    24:f3:8f:6f:10:c6:1a:a3:62:cb:99:19:1d:66:d6:
                    50:a9:18:ba:23:c2:e8:56:9e:e1:53:8f:38:60:62:
                    75:7b:fa:ad:d7:13:87:b4:d9:5f:5b:b7:f0:b2:e7:
                    65:62:3e:38:28:1f:96:24:d6:a3:05:ad:a9:eb:d0:
                    2e:b9:66:c6:e6:d5:fb:52:99:c3:1f:45:d8:f9:d9:
                    91:46:06:a1:90:0a:c6:66:5a:76:af:bf:af:34:7b:
                    c8:32:5f:b5:d3:b7:f5:25:39:f6:e1:af:2d:0b:3b:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B1:DA:92:1B:71:32:6E:05:74:D5:5E:59:70:D9:7B:36:98:35:28
            X509v3 Authority Key Identifier:
                keyid:BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:df:36:f3:d4:a6:48:ac:b4:61:54:9d:bd:69:a5:f9:c2:b6:
         db:57:ac:9f:55:76:38:94:7b:f4:cb:68:b5:91:ed:e5:95:aa:
         5b:a5:49:61:99:02:fa:b1:0e:9b:d7:91:00:7a:55:85:43:5e:
         80:ba:dd:c4:5b:9b:ea:97:ff:9e:0a:63:e1:08:51:46:c0:ff:
         24:f2:40:69:a9:2f:97:92:84:82:06:7e:9f:68:55:a5:c5:36:
         3f:ad:c0:7a:37:cf:e7:69:e9:a1:fd:d3:05:f5:4d:a3:73:e9:
         f4:fc:2e:be:a0:0c:b4:37:04:ad:7b:45:c4:c1:d7:2f:de:cc:
         22:49:08:53:0d:2d:b0:0e:86:e4:37:95:a7:e0:27:25:d0:88:
         fa:21:28:6c:d1:70:0d:8a:78:d3:9d:5a:86:8e:0d:0e:d5:6c:
         fe:62:33:e4:09:3c:e2:92:f1:4a:9f:10:ba:0c:6f:e4:65:28:
         77:2f:45:53:79:a6:55:42:f2:f7:cd:e5:3f:45:ad:7a:81:61:
         fe:6f:40:14:0d:4f:7f:71:48:84:ba:15:12:b0:ae:90:04:77:
         1c:a4:c6:05:0c:a1:f8:72:56:3b:39:a8:11:72:7a:8e:5b:33:
         b4:9a:49:36:3c:5a:a8:e7:35:83:a3:f2:9b:d7:70:be:b2:9d:
         80:e4:30:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----