This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier:          qfAxub5PzZGnII31Lfe22YU3q3f8nAa7T+Ocr5wKjGk=
Subject key identifier:   F6:81:F7:FB:3E:E3:74:7A:2F:61:42:B8:EA:7E:9F:B5:64:18:12:3A
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       1C33072F9F7F953909B3CF482606368EA445FDF4
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:18 +0000
ROA not before:           Thu 06 Mar 2025 01:34:18 +0000
ROA not after:            Thu 05 Mar 2026 01:39:18 +0000
asID:                     28594
IP address blocks:        200.218.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:33:07:2f:9f:7f:95:39:09:b3:cf:48:26:06:36:8e:a4:45:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:18 2025 GMT
            Not After : Mar  5 01:39:18 2026 GMT
        Subject: CN=F681F7FB3EE3747A2F6142B8EA7E9FB56418123A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:12:58:57:16:ef:19:c5:f2:f5:d6:53:cc:
                    31:f1:d6:9d:8b:84:b5:1b:eb:ba:a2:63:6d:fe:77:
                    13:e1:b6:52:57:44:9c:52:b2:8f:b7:f2:b3:f8:4e:
                    69:bb:b0:11:1d:b5:5b:12:a6:1b:bd:68:71:a6:f9:
                    2a:b1:db:03:00:d6:de:7b:3a:12:74:d8:2f:d0:5f:
                    02:a6:b0:d3:4e:93:1a:76:0d:53:43:0e:2e:7a:f5:
                    08:11:15:6f:c5:84:44:f7:c4:a2:d8:f4:46:4e:e9:
                    19:06:ae:d5:75:95:29:4b:29:4c:c9:88:c6:b7:3f:
                    35:07:9a:18:30:2b:97:d6:56:60:5c:1e:b1:90:d7:
                    14:d6:f9:31:6d:b0:2c:c1:32:36:3a:4f:43:33:23:
                    55:fc:14:61:dc:51:fc:1b:a9:3b:35:94:e0:b0:e0:
                    65:60:79:89:03:1a:58:15:32:09:9c:cf:c1:72:22:
                    12:dd:dd:6f:43:96:96:6d:4f:a7:1e:d3:fa:34:32:
                    6a:5a:92:23:66:81:3e:69:81:93:4a:48:0f:eb:c9:
                    3e:3e:e4:52:e1:43:4a:fe:2c:fa:9c:7b:10:96:e8:
                    0c:65:57:e7:bd:d3:c6:b2:38:cb:18:28:d2:e5:e8:
                    18:a7:ab:ef:1e:67:58:21:39:b0:5f:ff:ef:03:7b:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:F7:FB:3E:E3:74:7A:2F:61:42:B8:EA:7E:9F:B5:64:18:12:3A
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:dc:d0:32:1c:27:1e:04:1a:37:d4:a2:07:f2:5a:75:d5:
         2b:39:8b:ee:87:db:71:66:4d:b7:14:1a:72:aa:0b:60:9f:83:
         c4:9e:90:d0:04:1a:46:4a:ab:e4:70:cc:eb:36:c5:e4:84:b0:
         c7:3f:9e:6a:25:e7:a9:34:48:1d:24:8d:2c:8a:2f:2e:49:f4:
         66:b1:61:b0:28:f8:e7:37:0d:17:ab:0e:93:82:1a:6c:4a:6e:
         f5:d7:bd:45:c6:f7:13:87:e8:21:3a:b8:27:d8:c4:4f:f7:e2:
         cd:13:7a:56:2f:a5:8b:7a:bc:86:e4:59:6d:82:5c:23:b0:bc:
         97:31:4b:78:ed:6a:9a:d7:b7:31:2d:8c:90:59:16:11:4e:fa:
         66:b7:b2:fa:45:34:36:41:9d:2b:8c:d0:be:74:a7:45:69:2d:
         63:72:e9:b8:44:8e:b8:1e:8f:fc:8d:db:9b:55:7e:a2:a5:99:
         5a:33:a3:72:b5:35:3b:f2:cc:6b:61:1f:21:1c:e6:88:7b:67:
         98:d0:66:85:d3:fe:cd:1a:ea:3c:d9:e2:45:85:21:0d:ff:3e:
         21:9d:87:63:56:63:6c:82:63:5b:1e:35:2f:e6:c8:a9:f0:65:
         4b:fc:c7:47:01:5b:91:ef:f6:ed:82:44:76:77:70:78:f2:7f:
         9b:16:80:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHDMHL59/lTkJs89IJgY2jqRF/fQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNTAzMDYwMTM0MThaFw0yNjAzMDUwMTM5MThaMDMxMTAvBgNV
BAMTKEY2ODFGN0ZCM0VFMzc0N0EyRjYxNDJCOEVBN0U5RkI1NjQxODEyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOABJYVxbvGcXy9dZTzDHx1p2L
hLUb67qiY23+dxPhtlJXRJxSso+38rP4Tmm7sBEdtVsSphu9aHGm+Sqx2wMA1t57
OhJ02C/QXwKmsNNOkxp2DVNDDi569QgRFW/FhET3xKLY9EZO6RkGrtV1lSlLKUzJ
iMa3PzUHmhgwK5fWVmBcHrGQ1xTW+TFtsCzBMjY6T0MzI1X8FGHcUfwbqTs1lOCw
4GVgeYkDGlgVMgmcz8FyIhLd3W9DlpZtT6ce0/o0MmpakiNmgT5pgZNKSA/ryT4+
5FLhQ0r+LPqcexCW6AxlV+e908ayOMsYKNLl6Binq+8eZ1ghObBf/+8De12rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9oH3+z7jdHovYUK46n6ftWQYEjowHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPI2vAwDQYJKoZIhvcNAQELBQADggEBADrc3NAy
HCceBBo31KIH8lp11Ss5i+6H23FmTbcUGnKqC2Cfg8SekNAEGkZKq+RwzOs2xeSE
sMc/nmol56k0SB0kjSyKLy5J9GaxYbAo+Oc3DRerDpOCGmxKbvXXvUXG9xOH6CE6
uCfYxE/34s0TelYvpYt6vIbkWW2CXCOwvJcxS3jtaprXtzEtjJBZFhFO+ma3svpF
NDZBnSuM0L50p0VpLWNy6bhEjrgej/yN25tVfqKlmVozo3K1NTvyzGthHyEc5oh7
Z5jQZoXT/s0a6jzZ4kWFIQ3/PiGdh2NWY2yCY1seNS/myKnwZUv8x0cBW5Hv9u2C
RHZ3cHjyf5sWgPY=
-----END CERTIFICATE-----