This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          npZAec2daMPWv7jly/FdjSJpUGcMYuDEEyxB7XXQqYM=
Subject key identifier:   81:26:54:F1:40:06:AF:57:FD:53:E8:32:43:18:3A:79:5E:02:24:98
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       64292EB79AC79A453A6DC4BF0B6872CC950D0855
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:17 +0000
ROA not before:           Thu 06 Mar 2025 01:34:17 +0000
ROA not after:            Thu 05 Mar 2026 01:39:17 +0000
asID:                     28594
IP address blocks:        200.218.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:29:2e:b7:9a:c7:9a:45:3a:6d:c4:bf:0b:68:72:cc:95:0d:08:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:17 2025 GMT
            Not After : Mar  5 01:39:17 2026 GMT
        Subject: CN=812654F14006AF57FD53E83243183A795E022498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:90:52:b7:85:0d:27:65:ab:9f:ac:cb:09:b3:
                    39:43:9d:76:4f:09:2c:fb:2c:e7:3e:5d:9d:10:8b:
                    50:00:dc:01:10:50:3b:35:bb:5e:fc:3e:6a:a7:db:
                    9b:c1:da:8a:a3:8b:74:e7:81:c5:12:3a:fb:03:07:
                    ea:c0:86:0e:a6:c4:22:f3:73:15:8b:ba:b9:12:68:
                    22:ae:5a:ba:ab:83:1b:7b:e6:44:b0:30:cc:f8:63:
                    c0:f9:05:ae:60:7d:79:41:1c:06:39:1c:7d:3b:42:
                    b1:d1:c1:30:c0:4d:77:08:bd:57:26:c7:77:cd:9a:
                    09:85:4d:0e:3f:28:d3:f1:65:13:7b:72:14:26:54:
                    10:a6:89:9d:3a:54:ae:91:86:1c:26:fa:dc:75:20:
                    2a:ee:f1:0c:6f:3c:0e:b2:aa:33:27:34:bf:f2:d5:
                    95:9e:6c:d0:2a:fe:11:e5:ef:d9:f4:af:68:d2:f1:
                    7f:df:0b:28:aa:6f:0b:bc:b9:0b:ec:4e:3b:b6:3c:
                    59:d1:e1:f5:04:f8:3e:14:a6:cc:91:ce:0d:b9:76:
                    f7:fc:53:a0:e4:9a:6c:5b:11:2b:2e:9a:35:42:08:
                    fc:82:4f:86:b0:06:a1:30:b5:60:91:65:97:4e:f6:
                    d2:21:90:2d:60:81:96:7c:d4:41:59:8c:76:a2:a3:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:26:54:F1:40:06:AF:57:FD:53:E8:32:43:18:3A:79:5E:02:24:98
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:38:52:28:1e:03:a1:9c:47:8b:60:b2:67:20:b8:b5:38:
         84:5b:d4:93:24:a3:35:3f:1b:be:47:b7:59:a6:ee:b5:01:40:
         d4:41:a7:ed:04:ce:6c:06:56:3e:d8:0b:2b:b2:82:68:ee:74:
         2d:ad:53:78:64:12:70:42:88:e1:b4:f8:90:24:7f:72:d4:c5:
         02:45:44:e3:74:7c:32:ee:07:fe:6c:bd:77:09:36:7c:92:73:
         c0:89:f2:6d:8e:62:7b:14:26:26:44:21:06:b3:3a:70:95:2d:
         a1:de:7b:5f:91:e2:10:f7:0d:50:25:36:e4:dd:97:b0:0b:be:
         3f:98:06:5f:b0:95:9e:c0:35:d1:aa:8f:57:44:55:2d:6a:11:
         b9:50:ae:69:bf:67:67:34:6d:f0:0f:c9:65:b4:20:3f:55:af:
         51:84:b6:91:08:c9:86:f8:ab:c6:db:bd:52:66:c8:59:8e:25:
         83:f0:4c:24:30:c7:e0:a8:f6:5e:34:53:4a:18:61:e6:0d:98:
         9f:c3:83:91:6a:3b:ba:e5:f0:dd:7d:bd:b6:8a:8f:39:93:f8:
         59:65:d6:99:b4:85:f2:5d:4e:80:3b:b4:3f:25:b8:98:be:20:
         ce:4b:60:29:41:f2:1c:09:95:bb:a9:dc:3f:27:b8:1f:57:1d:
         57:d3:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----