This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          fLUjzNU3yTiQHJ4FdQlYgr4d326qyrRRf/Dwq+ruLo4=
Subject key identifier:   60:6E:2D:A6:48:36:22:DF:62:68:42:63:97:A7:2B:52:A9:BE:A7:43
Certificate issuer:       /CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
Certificate serial:       48D6215B4ADD8086D97E0F7835B2D5CDBAEF8048
Authority key identifier: BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
Signing time:             Wed 01 Oct 2025 22:53:53 +0000
ROA not before:           Wed 01 Oct 2025 22:48:53 +0000
ROA not after:            Wed 30 Sep 2026 22:53:53 +0000
asID:                     270579
IP address blocks:        189.126.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d6:21:5b:4a:dd:80:86:d9:7e:0f:78:35:b2:d5:cd:ba:ef:80:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
        Validity
            Not Before: Oct  1 22:48:53 2025 GMT
            Not After : Sep 30 22:53:53 2026 GMT
        Subject: CN=606E2DA6483622DF6268426397A72B52A9BEA743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:09:3b:84:d2:1d:89:8f:6e:5c:24:0e:2d:bb:
                    2b:1a:6a:ba:e9:71:de:e8:5f:8b:3a:0a:f0:41:97:
                    26:cb:5c:74:82:fb:88:06:45:f3:79:54:1b:3b:66:
                    2c:76:84:fa:a1:30:d7:ee:89:85:11:c0:31:af:24:
                    17:ad:6b:7b:87:e2:a8:26:2f:c7:6f:0a:57:54:3a:
                    3a:bf:ef:33:40:23:07:42:cc:9a:ba:ec:87:2e:4c:
                    79:15:bc:ab:08:83:2d:a8:03:20:2a:e7:d4:30:f3:
                    30:cb:b8:ff:22:c4:33:bc:96:7f:20:19:40:6c:29:
                    ad:2a:71:f8:e1:83:a2:17:91:86:d4:dd:05:43:56:
                    11:46:1f:42:85:97:1b:4f:00:30:c4:dc:9f:69:35:
                    ca:0c:1d:bf:d7:49:0e:d4:d9:39:81:73:d7:c5:6b:
                    af:c3:82:cd:5e:10:62:59:9e:30:36:79:4f:26:13:
                    0d:7a:5e:51:c6:27:69:65:0f:a4:35:12:ef:89:5d:
                    b0:da:6c:94:ba:9f:ac:d2:56:ea:e7:f7:59:8b:cb:
                    e6:b1:54:f3:0d:6d:6d:7e:68:ea:ef:5a:38:90:16:
                    b6:4c:e7:94:95:1e:98:6f:84:32:8e:34:f0:3d:45:
                    91:09:df:d1:64:f4:87:bd:22:6e:ee:e8:96:c3:bb:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6E:2D:A6:48:36:22:DF:62:68:42:63:97:A7:2B:52:A9:BE:A7:43
            X509v3 Authority Key Identifier:
                keyid:BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:52:3e:bc:57:01:5d:c2:40:07:10:3c:a6:71:fd:29:a9:9a:
         3c:ac:bf:cc:11:60:65:b5:0b:65:46:16:60:97:2f:e3:83:75:
         06:3d:06:12:1b:2b:5c:28:60:37:eb:46:5b:09:7b:5c:46:bf:
         aa:a8:24:e5:50:85:56:39:67:98:95:83:95:84:02:97:89:ce:
         21:9f:99:34:ab:91:e3:6b:b8:70:66:19:95:1c:24:a3:f2:73:
         ee:10:74:eb:d3:e6:f5:9b:b3:48:63:32:00:cf:bc:12:7c:29:
         98:69:62:b1:d7:56:ee:e4:ac:14:84:3d:ad:74:4d:7f:b5:df:
         21:78:d7:1f:62:be:54:77:1d:56:c1:e9:77:8b:4c:68:ba:97:
         98:e9:ad:3a:6e:6e:27:08:d9:f7:c2:cf:f8:2e:b6:c3:d5:ef:
         e6:36:61:5b:c9:a7:dc:54:7b:b5:bd:b3:f6:55:41:bd:92:98:
         2d:8c:9f:a8:26:49:7f:18:4f:eb:73:95:11:e8:da:d7:a9:a1:
         0c:32:ca:b8:0c:a9:c9:b4:bd:87:aa:56:ed:c4:9b:b3:05:2b:
         c2:f3:63:28:7c:d1:98:b7:dc:11:d4:92:89:a7:97:cf:ef:bf:
         e2:65:61:fc:eb:1b:ee:8c:52:d7:51:52:1a:c8:2f:6b:b6:d9:
         c2:5c:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----