This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
File:                     3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa (raw, json)
Hash identifier:          X9XQ6NLG4NXILPi43/Q24ZpewPvWolPP6JAcDNF6N0E=
Subject key identifier:   83:26:DE:5E:58:3A:7F:1E:E3:93:F4:1A:3C:B1:4B:71:3E:23:F1:26
Certificate issuer:       /CN=9D9E3DEED92D096161647544CB8DF6DBE1B40E12
Certificate serial:       48A636308E7BF65E95D045D35C0DDA792757BFCA
Authority key identifier: 9D:9E:3D:EE:D9:2D:09:61:61:64:75:44:CB:8D:F6:DB:E1:B4:0E:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
Signing time:             Thu 06 Mar 2025 12:39:16 +0000
ROA not before:           Thu 06 Mar 2025 12:34:16 +0000
ROA not after:            Thu 05 Mar 2026 12:39:16 +0000
asID:                     265913
IP address blocks:        131.196.148.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a6:36:30:8e:7b:f6:5e:95:d0:45:d3:5c:0d:da:79:27:57:bf:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9E3DEED92D096161647544CB8DF6DBE1B40E12
        Validity
            Not Before: Mar  6 12:34:16 2025 GMT
            Not After : Mar  5 12:39:16 2026 GMT
        Subject: CN=8326DE5E583A7F1EE393F41A3CB14B713E23F126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:3e:e0:79:ca:b6:f5:b6:9c:a6:0b:0c:75:
                    25:ad:55:47:bc:41:e1:29:d5:46:c0:8d:a1:bc:a6:
                    52:6f:bf:a2:05:32:e5:e9:9e:41:89:57:7e:3d:9a:
                    a4:e3:ff:d3:ef:c9:42:e8:1f:fd:b9:cf:bb:8e:5d:
                    27:34:44:8e:3a:a1:80:9a:a1:39:e1:49:0c:16:be:
                    d4:5a:ae:a2:45:3d:b7:87:4e:33:b3:7d:ab:1e:df:
                    a3:7b:74:45:a9:74:9f:89:27:9a:19:36:24:f7:58:
                    78:ff:97:92:97:2c:c3:2a:4c:aa:1a:1f:00:9e:f3:
                    67:f9:06:3d:ba:4a:c0:dc:42:ee:85:a9:2b:42:b2:
                    a9:80:30:ae:85:d5:01:da:eb:dc:66:a5:38:7d:15:
                    9e:46:52:5e:a7:30:d4:58:43:79:72:3f:2b:06:1b:
                    a9:5f:ac:12:95:56:e2:7e:7c:91:76:16:f9:77:c4:
                    c4:20:f4:fa:d0:81:03:69:9c:10:63:53:8d:4f:13:
                    88:82:24:af:82:64:a7:6b:f8:c4:99:03:d8:23:ee:
                    1c:d9:19:37:ee:94:84:61:42:a6:d3:c9:52:60:1b:
                    e4:dc:34:9e:00:ca:4a:35:89:93:b7:f7:9d:39:30:
                    79:ef:22:e2:77:3c:56:66:15:67:ed:be:04:f9:bd:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:DE:5E:58:3A:7F:1E:E3:93:F4:1A:3C:B1:4B:71:3E:23:F1:26
            X509v3 Authority Key Identifier:
                keyid:9D:9E:3D:EE:D9:2D:09:61:61:64:75:44:CB:8D:F6:DB:E1:B4:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:27:7e:0f:a6:71:08:fd:69:a4:71:ae:5f:7d:97:49:77:8f:
         43:60:d3:92:7b:d0:ad:aa:fc:cd:73:da:a0:e9:ff:df:87:13:
         a4:a0:65:8b:cc:a9:47:09:27:54:bb:b6:72:e9:c5:a9:d7:da:
         e4:e2:74:38:1e:39:d6:4d:50:d0:dd:be:a7:d6:25:96:1f:c2:
         02:11:69:1d:24:0c:8a:73:7e:82:6d:0d:78:de:78:97:ed:28:
         57:d6:a6:59:bd:d8:02:b7:b1:10:c3:30:69:27:2b:99:f8:f2:
         81:ea:ab:c9:9c:28:d0:2c:d1:fa:84:a0:2f:d6:cf:9b:11:e2:
         9e:09:8d:d3:5b:15:69:d2:0a:ea:0d:fb:7d:22:71:ac:79:a4:
         2c:6a:d5:61:07:c4:7d:fa:84:1c:0c:a1:1c:5a:33:85:9d:12:
         83:33:94:f3:ab:5c:30:f9:f4:a9:b5:09:0b:03:ed:c4:ce:22:
         41:55:9e:35:c0:ab:d6:14:19:54:ef:5e:29:85:97:20:53:67:
         42:10:c9:8c:98:42:b1:dd:6b:62:f5:77:7b:50:d1:70:63:82:
         26:26:aa:29:97:11:70:91:de:8c:96:8d:02:b6:d4:d8:e4:e5:
         65:be:36:63:b0:f6:f8:09:76:ab:92:9f:37:c8:57:9b:b5:2f:
         dc:e5:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----