This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e203238323730.roa
File:                     3137372e36372e342e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          iLuT2kF4FMkObf3POL0LSTZeJsOZn27LCyR/gZCTqkw=
Subject key identifier:   79:EB:BA:BE:2A:86:80:54:BB:21:C8:A3:AD:EE:30:77:FF:C0:47:AB
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       0891C7676F4847ED552280FBDED484D2790BD35C
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:11 +0000
ROA not before:           Thu 07 Nov 2024 20:35:11 +0000
ROA not after:            Thu 06 Nov 2025 20:40:11 +0000
asID:                     28270
IP address blocks:        177.67.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:91:c7:67:6f:48:47:ed:55:22:80:fb:de:d4:84:d2:79:0b:d3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:11 2024 GMT
            Not After : Nov  6 20:40:11 2025 GMT
        Subject: CN=79EBBABE2A868054BB21C8A3ADEE3077FFC047AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:82:d3:cd:37:a8:89:16:19:f2:70:6e:64:
                    35:0a:10:e9:cd:18:c2:e8:40:12:ef:bb:aa:cc:17:
                    63:dc:f9:8a:05:96:3e:36:9c:ce:2b:a9:0b:f4:aa:
                    07:37:bc:14:c5:8f:d3:f8:d8:aa:21:17:5c:65:57:
                    8c:c7:20:8c:c8:61:55:c5:0a:de:a4:ea:ca:9e:0e:
                    db:05:8e:52:55:9d:b7:d8:b6:8b:f0:a4:47:6d:50:
                    33:6b:73:25:2e:5a:34:36:a9:74:7a:f1:e7:31:b4:
                    33:b3:58:ad:6a:ab:6b:a3:de:23:09:4b:73:8b:88:
                    8a:cb:74:ad:16:b9:1e:da:f6:cb:cf:2a:64:a5:ef:
                    2d:d3:bc:35:59:d3:24:88:c6:ba:ce:5c:61:90:91:
                    c6:27:cc:d4:7a:a0:26:ec:64:8f:98:ed:56:17:ca:
                    db:cd:04:2e:e5:e0:6f:66:72:a5:ea:c8:73:ee:9a:
                    fe:2e:f1:9f:f4:a7:0d:b9:8c:65:bb:95:f9:14:9b:
                    f8:37:f2:cd:ec:ad:91:7b:31:2f:fe:16:c0:96:c3:
                    5d:4b:b8:0e:94:1d:dd:74:df:57:26:11:5c:21:c8:
                    ff:5f:e1:79:d9:25:b3:09:e8:ad:42:cb:84:09:34:
                    f1:51:b3:da:86:08:2e:74:7e:aa:dd:0b:25:7f:97:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EB:BA:BE:2A:86:80:54:BB:21:C8:A3:AD:EE:30:77:FF:C0:47:AB
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:dd:0e:3d:a3:46:28:22:f0:12:33:5c:a0:08:6d:69:fd:
         9a:c2:64:86:e6:9d:84:8d:55:1c:fc:82:62:e4:99:5e:d3:b3:
         a7:af:69:40:a4:db:d9:4a:2a:26:78:f8:1e:2b:7c:3e:66:09:
         78:16:61:e6:02:03:d0:2c:fb:d4:e6:4b:a8:55:5b:f7:94:b3:
         b0:a5:fa:67:ea:a3:c5:67:39:e0:04:31:93:e7:f7:04:38:4b:
         34:45:8c:ba:e2:e3:50:a6:e0:66:ee:fc:ea:3a:43:13:2c:96:
         53:36:e7:a6:7c:f6:13:8f:e7:4e:d7:dd:ab:18:d2:da:11:9c:
         8b:d0:a1:de:b0:7e:03:ac:5e:e1:c4:ca:0e:82:ba:d0:7c:0e:
         81:98:80:63:31:14:be:46:ff:46:ea:95:3f:fc:70:48:d8:2e:
         e5:aa:b9:cc:3a:af:ea:05:8f:06:40:ad:6b:b0:94:3a:95:75:
         f7:c3:ca:31:99:59:95:aa:f8:55:db:0f:b9:fa:d6:5d:f7:df:
         f7:4d:1e:d5:c3:25:8d:16:31:51:fe:8e:a1:2f:0f:17:49:96:
         ac:0b:c5:e3:2e:8d:97:e8:d1:44:72:a7:2f:cf:a8:aa:7d:31:
         a5:f4:97:01:68:16:89:b9:ea:b6:e1:ca:ec:b3:cf:74:6d:f9:
         33:f6:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:26:54 2025 by rpki-client