This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          0sOkBnICxP8vgcnNS4oMzAWgpu0UXJdwd8YKPNV5NBs=
Subject key identifier:   CC:29:B7:D8:D0:E9:DF:0F:AF:FC:E0:1F:23:42:63:C0:B7:7D:48:26
Certificate issuer:       /CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
Certificate serial:       25F75AAAE8B1C9A6D1284CDFAC7C2F8DAD747ADD
Authority key identifier: BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
Signing time:             Wed 01 Oct 2025 22:53:53 +0000
ROA not before:           Wed 01 Oct 2025 22:48:53 +0000
ROA not after:            Wed 30 Sep 2026 22:53:53 +0000
asID:                     270579
IP address blocks:        189.126.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f7:5a:aa:e8:b1:c9:a6:d1:28:4c:df:ac:7c:2f:8d:ad:74:7a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
        Validity
            Not Before: Oct  1 22:48:53 2025 GMT
            Not After : Sep 30 22:53:53 2026 GMT
        Subject: CN=CC29B7D8D0E9DF0FAFFCE01F234263C0B77D4826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:9c:6b:21:2a:98:68:79:12:2d:9d:6a:45:
                    b6:d2:31:51:a5:85:3b:03:fc:e0:a6:fb:c8:ed:de:
                    d8:1b:e5:52:6b:11:c7:b1:b7:cd:27:61:69:3e:f3:
                    73:4d:35:8e:8f:76:5e:ae:5a:be:f2:6b:ee:fc:c2:
                    01:6d:96:f5:0c:07:37:2f:97:ae:88:dd:8b:aa:ba:
                    66:86:ef:99:eb:92:71:a0:55:33:68:69:38:da:3a:
                    ab:20:ce:8f:70:96:c6:1c:fe:a9:a7:a5:7e:ad:6c:
                    9b:24:1b:5e:5d:97:c1:86:b8:55:07:9a:20:32:7a:
                    50:fb:37:e3:e0:3b:24:9f:1f:49:b8:92:57:30:f6:
                    2f:00:cc:ce:70:9e:d2:4e:54:de:85:66:21:c3:1a:
                    18:fd:bb:b3:d4:f9:c8:67:f0:32:20:1f:e0:c0:f7:
                    18:fa:66:98:18:f8:65:80:18:8c:3a:cc:c7:94:28:
                    e1:d3:68:66:e1:bb:5e:17:37:9f:34:e1:e9:93:af:
                    0f:d8:82:7e:8f:c2:af:1a:0f:4f:04:93:de:a9:54:
                    ff:b4:89:f9:01:76:98:92:a0:8c:1e:04:46:33:66:
                    fa:54:c9:27:cb:f9:29:e9:3c:9a:8f:d6:da:bd:aa:
                    42:9f:eb:57:d7:6e:66:ec:7f:fc:c8:4a:30:ab:ef:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:B7:D8:D0:E9:DF:0F:AF:FC:E0:1F:23:42:63:C0:B7:7D:48:26
            X509v3 Authority Key Identifier:
                keyid:BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6e:15:1c:ae:c2:bd:24:4c:f1:ca:0f:84:a0:11:e6:17:f3:
         d8:0f:b3:c1:7c:34:73:f5:5f:eb:37:ed:59:79:ac:36:0d:96:
         01:ba:a3:83:91:5f:1e:f6:de:7e:94:8f:f4:8a:0f:08:35:dd:
         07:50:2d:a0:40:01:7a:2d:fc:14:aa:14:72:45:98:f9:92:4d:
         f2:1f:f4:d7:41:f0:d9:9e:03:35:72:7b:e6:16:da:06:44:80:
         7a:eb:22:02:c8:65:d6:f7:5f:aa:07:45:0b:eb:1e:01:f7:18:
         2b:ed:d6:e6:f6:cf:af:94:aa:ec:d2:c3:e7:f1:2a:b4:eb:23:
         e2:00:17:a9:7b:3f:bb:3b:30:01:6a:d9:02:7d:49:c1:fa:5a:
         2e:f5:f9:45:60:b7:c9:7a:93:49:21:3d:b1:eb:e5:3b:e5:70:
         37:36:73:00:0c:b9:0d:8e:ec:0c:42:0d:8e:00:89:8d:92:84:
         87:f4:51:86:0d:01:1f:d4:48:8f:bc:8f:dd:c0:82:53:0f:8d:
         bb:e6:43:fe:02:e9:d5:03:c5:f7:35:82:05:e8:c9:3e:6c:2b:
         5d:f8:d2:e5:6a:f0:dc:b6:cd:2b:75:00:cb:75:eb:41:55:ac:
         c5:bb:30:d3:69:20:50:e8:40:ae:2f:02:d6:74:f0:3c:81:5f:
         38:28:a6:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJfdaquixyabRKEzfrHwvja10et0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzQjNCM0MxQTM2OUZEMERERjJDRTIwNTlDQkU0Qzk4
Q0I0NjA5MjAeFw0yNTEwMDEyMjQ4NTNaFw0yNjA5MzAyMjUzNTNaMDMxMTAvBgNV
BAMTKENDMjlCN0Q4RDBFOURGMEZBRkZDRTAxRjIzNDI2M0MwQjc3RDQ4MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhpxrISqYaHkSLZ1qRbbSMVGl
hTsD/OCm+8jt3tgb5VJrEcext80nYWk+83NNNY6Pdl6uWr7ya+78wgFtlvUMBzcv
l66I3YuqumaG75nrknGgVTNoaTjaOqsgzo9wlsYc/qmnpX6tbJskG15dl8GGuFUH
miAyelD7N+PgOySfH0m4klcw9i8AzM5wntJOVN6FZiHDGhj9u7PU+chn8DIgH+DA
9xj6ZpgY+GWAGIw6zMeUKOHTaGbhu14XN5804emTrw/Ygn6Pwq8aD08Ek96pVP+0
ifkBdpiSoIweBEYzZvpUySfL+SnpPJqP1tq9qkKf61fXbmbsf/zISjCr701dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzCm32NDp3w+v/OAfI0JjwLd9SCYwHwYDVR0j
BBgwFoAUvzs7PBo2n9Dd8s4gWcvkyYy0YJIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0t5aFN0RFVFTG1nbWVFZGZMOTdudjNkaWt1UXhmQzhwTUFNNXY0a1Zm
VkEvMC9CRjNCM0IzQzFBMzY5RkQwRERGMkNFMjA1OUNCRTRDOThDQjQ2MDkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGM0IzQjNDMUEzNjlGRDBE
REYyQ0UyMDU5Q0JFNEM5OENCNDYwOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLeWhTdERVRUxtZ21lRWRmTDk3bnYzZGlrdVF4ZkM4cE1BTTV2NGtWZlZBLzAv
MzEzODM5MmUzMTMyMzYyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9flQwDQYJKoZIhvcNAQELBQADggEBAGtuFRyu
wr0kTPHKD4SgEeYX89gPs8F8NHP1X+s37Vl5rDYNlgG6o4ORXx723n6Uj/SKDwg1
3QdQLaBAAXot/BSqFHJFmPmSTfIf9NdB8NmeAzVye+YW2gZEgHrrIgLIZdb3X6oH
RQvrHgH3GCvt1ub2z6+UquzSw+fxKrTrI+IAF6l7P7s7MAFq2QJ9ScH6Wi71+UVg
t8l6k0khPbHr5TvlcDc2cwAMuQ2O7AxCDY4AiY2ShIf0UYYNAR/USI+8j93AglMP
jbvmQ/4C6dUDxfc1ggXoyT5sK1340uVq8Ny2zSt1AMt160FVrMW7MNNpIFDoQK4v
AtZ08DyBXzgopk4=
-----END CERTIFICATE-----