This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132302e302f32322d3232203d3e20323730343339.roa
File:                     3230302e31312e3132302e302f32322d3232203d3e20323730343339.roa (raw, json)
Hash identifier:          4Vf6leUY2jvWiBo/heJHe1SX9cJ3k3z1AFnDRLWrW9U=
Subject key identifier:   AC:85:34:FD:3A:39:B6:84:BC:96:C7:33:95:19:80:87:0F:11:09:AF
Certificate issuer:       /CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
Certificate serial:       1AAD5DC69C91BF76FB6350457819A61C70285A60
Authority key identifier: 14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132302e302f32322d3232203d3e20323730343339.roa
Signing time:             Tue 08 Apr 2025 14:51:14 +0000
ROA not before:           Tue 08 Apr 2025 14:46:14 +0000
ROA not after:            Tue 07 Apr 2026 14:51:14 +0000
asID:                     270439
IP address blocks:        200.11.120.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:5d:c6:9c:91:bf:76:fb:63:50:45:78:19:a6:1c:70:28:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
        Validity
            Not Before: Apr  8 14:46:14 2025 GMT
            Not After : Apr  7 14:51:14 2026 GMT
        Subject: CN=AC8534FD3A39B684BC96C733951980870F1109AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:20:e2:75:8c:22:fc:2b:4b:04:bf:24:85:
                    c1:e1:7d:9c:68:55:96:aa:8e:6a:a1:d3:d0:d1:71:
                    f5:f7:2f:8e:2a:93:14:74:74:d6:5b:40:f8:f0:df:
                    7b:85:1e:7d:f3:5a:a2:0a:12:fb:c9:94:be:37:ef:
                    54:1d:1c:ac:80:d2:c5:ea:d3:90:16:3c:35:97:28:
                    d3:59:9d:46:6f:ce:1c:3d:e7:0d:47:90:e0:63:69:
                    12:e2:84:b5:3b:9d:51:33:66:0b:39:b1:e9:3f:2c:
                    42:13:d8:ad:97:3d:d2:5d:c0:09:6d:c2:31:f3:b0:
                    0b:0a:a2:f1:ea:b1:7a:dc:be:15:21:bb:8c:f6:49:
                    7d:11:14:48:e4:33:e0:c2:92:58:0b:2d:17:da:37:
                    62:a7:ff:b3:da:77:2b:24:5b:f3:f4:8b:dc:33:67:
                    09:1f:bd:f3:bc:be:74:58:eb:7d:32:b8:b2:b1:64:
                    b7:b6:b7:d5:0e:88:1f:5a:f9:6d:fe:da:f9:d6:9e:
                    3a:2a:30:08:f8:80:f6:13:46:1f:b9:5d:67:ad:9b:
                    b3:fd:58:0e:25:18:f4:a6:6f:d4:92:14:d3:9b:ac:
                    e6:ff:84:a5:3e:18:f5:33:8d:fe:ff:02:2c:92:bd:
                    52:11:09:d7:a3:2f:ee:37:9e:bd:c8:f2:9c:60:f2:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:34:FD:3A:39:B6:84:BC:96:C7:33:95:19:80:87:0F:11:09:AF
            X509v3 Authority Key Identifier:
                keyid:14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132302e302f32322d3232203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:b6:2e:8c:66:dc:99:fd:b2:28:2e:a2:87:55:0e:10:01:bb:
         4e:91:89:b5:f8:98:0c:f2:55:39:48:05:ab:9f:11:24:b5:55:
         7f:25:45:21:93:9a:17:be:ff:82:c2:11:b8:2d:39:a2:17:01:
         00:36:8f:ed:20:7f:9b:01:ed:24:ae:0f:9e:77:8c:b4:8a:6c:
         3b:eb:e3:de:cc:05:9a:06:99:cb:a5:01:5d:47:42:08:7b:90:
         49:55:cc:50:7e:ea:e4:52:35:d1:39:2b:3c:fd:a3:3e:14:5b:
         71:27:46:2d:8d:e6:fa:80:f5:74:83:5c:68:72:a3:9c:dd:b1:
         21:ce:83:40:07:92:37:9f:1b:53:95:67:0c:4d:ca:75:2b:db:
         d4:03:ba:27:a7:2a:a6:6c:ad:7a:f5:7c:88:59:4c:0f:d2:ef:
         16:11:57:78:8a:56:c4:da:dd:6c:fe:98:51:f9:00:95:01:3e:
         ef:69:79:c4:9a:8b:d7:41:fd:26:61:72:7f:c5:34:bd:d6:70:
         81:c3:e1:2a:52:c5:ab:44:9b:a6:77:6a:4f:90:b2:3d:5b:34:
         39:1c:31:9b:ba:ad:8e:1a:26:3a:2c:57:3f:2f:40:c2:a5:7f:
         86:5f:4e:82:31:a0:c2:99:5f:cb:e7:a7:3c:32:d4:8b:59:4e:
         db:09:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----