This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          l7wGda9SQtj0uYdC4YwSX++5AxsBsCRYC3y0Sy1FYe0=
Subject key identifier:   96:46:9E:2A:7D:82:8A:02:40:00:34:A0:8D:61:9F:FD:C9:FD:22:07
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       4F673C366C2C36A21B3E9538135B1F512399D573
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:17 +0000
ROA not before:           Thu 06 Mar 2025 01:34:17 +0000
ROA not after:            Thu 05 Mar 2026 01:39:17 +0000
asID:                     28594
IP address blocks:        200.218.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:67:3c:36:6c:2c:36:a2:1b:3e:95:38:13:5b:1f:51:23:99:d5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:17 2025 GMT
            Not After : Mar  5 01:39:17 2026 GMT
        Subject: CN=96469E2A7D828A02400034A08D619FFDC9FD2207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:6a:76:80:d4:c3:75:fe:83:09:ce:6f:80:
                    09:ea:6f:74:01:5d:bc:2c:7f:8b:b4:5e:4f:67:e7:
                    e3:a4:7a:dd:3c:0d:c4:94:37:a2:c4:57:aa:b7:c3:
                    53:a0:56:17:82:16:b6:05:39:82:f6:9f:69:d2:0f:
                    40:d8:82:36:c8:33:cf:6f:ce:4a:d9:b2:7c:cd:f3:
                    dd:e3:13:e0:40:92:0c:ab:f1:3b:d1:5c:03:09:9a:
                    b2:a3:b8:88:14:d9:b8:ed:ce:86:0c:92:6c:72:8a:
                    12:0d:6d:69:43:b3:58:53:9e:f8:9c:06:8d:a9:8c:
                    c2:5a:df:2d:ad:5d:61:bc:9a:7a:25:c7:8a:56:92:
                    68:4f:58:3f:41:d8:ed:c4:81:d3:62:22:fa:97:dc:
                    6c:18:37:98:0e:fa:cd:a4:cc:ed:2b:0e:19:53:64:
                    f6:da:c1:9e:32:e9:42:3b:30:c7:4e:75:40:7e:34:
                    fb:7f:fe:20:c1:9a:2f:1a:58:e4:f0:1f:d6:24:6c:
                    20:dd:e8:23:38:96:67:dd:9d:46:cb:88:e6:97:42:
                    12:f4:93:84:23:fb:24:f1:53:53:67:d5:e1:88:ef:
                    92:46:25:47:f1:65:26:f6:74:9e:32:64:36:de:86:
                    f1:a8:d0:4a:37:07:ab:04:77:04:41:57:3e:ba:79:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:9E:2A:7D:82:8A:02:40:00:34:A0:8D:61:9F:FD:C9:FD:22:07
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:cc:a9:d2:04:a1:46:ed:94:f7:7b:d8:87:1a:44:c5:a0:71:
         1c:8e:fb:1b:ff:f7:ac:ea:57:a2:dc:7f:c5:09:09:3c:c2:46:
         bf:18:04:18:2c:35:d9:03:0d:ba:37:c2:4c:4f:fa:0f:07:78:
         a3:9e:4c:6e:fb:18:d9:05:92:be:d0:29:ec:b1:f1:40:1b:a9:
         30:2d:6f:1e:3c:20:d7:b2:cd:ca:41:a9:ec:9c:13:42:a9:b9:
         ae:ef:a9:23:78:06:51:c7:eb:2d:35:c0:e5:ec:1f:6c:5c:17:
         9a:dc:a4:e6:57:bc:8b:37:1d:90:d7:04:bb:c8:3a:62:1a:de:
         ca:44:83:51:3a:6f:2e:3d:c0:20:f9:cd:2d:d4:af:b9:e0:02:
         c2:b3:36:e3:c0:dd:a3:17:f3:69:b8:2b:a5:b1:7e:d6:a7:8e:
         a7:5d:81:83:50:78:d3:72:eb:ba:df:34:89:d6:e8:3b:71:58:
         57:29:ff:8f:08:26:12:5c:40:28:44:77:a1:5d:c6:45:72:e7:
         50:3c:5c:33:ec:7c:1e:c0:63:73:53:cf:a0:72:3c:bb:35:01:
         e1:24:ef:1a:56:50:dd:2d:39:29:a7:18:a9:52:b3:ed:77:49:
         af:b7:b9:0a:98:b2:1b:97:6f:70:c7:3f:a1:9d:86:f5:94:b9:
         06:06:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----