This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          U5q40uL+WstlJPXj/VFsMOew599cz3yJOKsI1dpfZck=
Subject key identifier:   A7:26:A4:15:0C:98:50:35:8C:BE:F2:C1:3E:4A:B2:3F:FC:6F:1D:2B
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       4536AE2F135E0A33A879E759807447174616E745
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:19 +0000
ROA not before:           Thu 06 Mar 2025 01:34:19 +0000
ROA not after:            Thu 05 Mar 2026 01:39:19 +0000
asID:                     28594
IP address blocks:        200.218.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:36:ae:2f:13:5e:0a:33:a8:79:e7:59:80:74:47:17:46:16:e7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:19 2025 GMT
            Not After : Mar  5 01:39:19 2026 GMT
        Subject: CN=A726A4150C9850358CBEF2C13E4AB23FFC6F1D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:99:4b:88:ac:4e:e4:ad:f9:df:4b:49:31:
                    0f:4c:38:62:ad:c7:25:6d:e0:21:a6:82:96:47:e0:
                    5c:41:b1:e4:1e:1b:94:ab:b0:47:a3:f0:25:18:b1:
                    49:64:a6:91:d0:07:54:e8:f1:3d:2a:ce:3a:1d:2b:
                    ce:ca:8c:bb:fa:02:7d:32:68:49:5e:29:40:f5:88:
                    00:d4:02:1a:e9:0b:76:87:8d:1d:5e:03:ca:45:ec:
                    9c:ab:f6:44:43:16:56:cf:a1:55:d4:38:69:4f:c0:
                    7c:04:d7:a1:52:1f:df:71:d0:75:99:ec:a1:08:81:
                    5c:33:ca:71:97:85:8d:ef:de:65:57:1c:b3:bc:fd:
                    b0:31:6d:f0:e8:70:68:6f:53:65:31:18:15:de:f7:
                    fe:dc:fd:27:8e:10:40:5d:d6:28:78:71:4c:89:82:
                    5e:20:06:7d:2b:36:29:e7:d4:82:e2:e8:31:52:e3:
                    b7:79:ce:7f:29:53:08:39:d1:b9:1d:d3:bb:b9:1b:
                    0c:fa:92:c4:5a:15:e6:cc:90:82:2a:6b:d1:05:31:
                    07:bd:8a:d1:2f:91:95:5f:de:ff:30:74:88:29:58:
                    8c:b8:4b:ee:a0:b1:c3:61:e1:29:b3:72:d1:df:69:
                    bc:c4:49:28:e9:61:3a:cc:c3:10:92:d2:eb:4b:cb:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:A4:15:0C:98:50:35:8C:BE:F2:C1:3E:4A:B2:3F:FC:6F:1D:2B
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d4:2d:19:d8:ef:62:c9:7c:0c:2d:69:cd:51:93:ca:74:1c:
         a3:00:48:04:28:0a:91:38:cc:f9:b3:49:22:f8:cb:ed:b7:0f:
         06:34:9a:e6:02:a9:1f:22:b0:77:8c:aa:9a:50:d8:cf:86:c4:
         b7:85:08:48:fe:d5:b2:5c:07:e3:95:ef:a6:26:d0:46:4d:71:
         db:6b:d0:0a:d5:10:cc:b3:4e:04:51:a4:39:e1:92:3e:28:e9:
         61:63:d1:74:fc:ac:47:78:cf:92:1a:68:f9:05:b5:c5:fc:a4:
         23:1c:7f:f4:b0:bd:8d:18:10:a3:40:23:c4:1f:7e:bb:0d:9b:
         37:4a:74:5f:96:16:66:cc:33:ed:d3:47:d7:15:5a:f3:f0:9c:
         c9:f8:72:c0:77:27:4d:62:e8:2b:82:df:f2:dd:9f:d9:83:e2:
         60:7e:d8:9d:3a:7b:0b:47:7b:46:15:70:7b:52:de:45:cf:d5:
         52:52:3a:c4:06:d1:de:17:96:42:c9:4d:82:ef:f4:12:3f:a1:
         a0:d6:af:25:dd:58:4c:b6:ba:01:c7:a2:9b:e1:98:bf:9c:ff:
         64:0d:ec:3b:ef:de:43:d4:e0:89:63:44:a3:57:5a:89:de:6d:
         36:b4:e0:fb:38:df:32:54:de:c3:56:12:69:4f:1a:31:a2:b1:
         03:74:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----