This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          MCLXdYBORY40MGpYeNLOzZqJQN8GeZ87WjNRG/7VwgQ=
Subject key identifier:   20:AD:4C:E7:54:80:9C:CB:44:A7:44:3F:57:93:91:0D:EF:75:DB:EC
Certificate issuer:       /CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
Certificate serial:       08D28993E1F2A06CCE16AE141CF3F15FA0B2F133
Authority key identifier: 3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa
Signing time:             Tue 01 Jul 2025 22:46:22 +0000
ROA not before:           Tue 01 Jul 2025 22:41:22 +0000
ROA not after:            Tue 30 Jun 2026 22:46:22 +0000
asID:                     264422
IP address blocks:        131.221.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d2:89:93:e1:f2:a0:6c:ce:16:ae:14:1c:f3:f1:5f:a0:b2:f1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Validity
            Not Before: Jul  1 22:41:22 2025 GMT
            Not After : Jun 30 22:46:22 2026 GMT
        Subject: CN=20AD4CE754809CCB44A7443F5793910DEF75DBEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ca:42:c6:c2:f1:df:00:96:97:9e:4d:a0:54:
                    21:da:3b:77:f6:bc:5f:9c:fe:d7:d0:b0:4a:de:7f:
                    27:66:bf:29:92:80:89:97:a8:3e:19:51:b5:2c:bc:
                    60:8d:19:61:03:f1:a1:46:59:64:a9:d5:e4:50:0d:
                    de:01:26:f1:67:af:2d:a2:47:aa:6e:7d:94:36:c3:
                    d1:53:4c:79:2b:6a:19:18:d3:db:71:b5:0a:07:26:
                    e0:49:44:14:4f:7d:6d:78:fe:ac:ec:68:e4:04:69:
                    00:ca:89:01:fc:df:df:1e:ee:17:0c:1b:98:5d:05:
                    cf:2f:7d:2f:77:e5:9b:ce:92:d9:03:4d:f5:94:3d:
                    8e:84:42:2b:6a:b2:4c:51:20:18:2c:74:34:74:8a:
                    aa:3f:ac:5f:9e:ca:0f:5d:82:02:79:85:54:48:26:
                    2c:3b:d8:f8:c1:87:61:61:61:88:42:d3:9b:33:ac:
                    dc:f4:77:da:7f:e9:6a:a2:36:ab:39:00:65:86:b0:
                    ad:48:26:f5:9d:43:87:a1:4c:54:7a:4c:fd:47:b6:
                    2c:ee:d2:30:7e:ff:20:08:12:fe:90:66:d5:19:57:
                    80:b2:bb:9d:7b:0e:bf:ef:8a:0d:30:44:39:36:6d:
                    56:28:9e:04:54:05:e6:83:78:c3:72:91:da:cc:e4:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AD:4C:E7:54:80:9C:CB:44:A7:44:3F:57:93:91:0D:EF:75:DB:EC
            X509v3 Authority Key Identifier:
                keyid:3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3b:a6:28:87:ac:7a:10:41:25:02:29:ca:b5:f6:3c:06:00:
         33:fa:7f:35:53:b6:38:d0:f3:f2:95:cd:39:e4:c7:25:58:e3:
         36:13:50:75:da:65:64:56:ad:c7:89:ef:b7:a4:96:4c:d3:87:
         3b:ef:df:d4:51:28:b0:cc:05:3d:82:15:59:ac:f4:75:26:48:
         2c:6c:b2:b2:59:2c:4c:35:2c:60:64:14:14:75:60:a1:48:9c:
         82:03:60:3c:0e:fa:7d:e6:a3:74:30:64:aa:96:3e:f9:a2:0d:
         d1:2b:80:ca:3a:54:40:e7:10:4b:f6:14:d2:93:4d:89:34:1a:
         a6:ae:ea:dc:0e:3f:ad:42:99:b1:ec:15:1b:98:bf:c8:82:c4:
         82:08:14:d7:e5:df:e7:77:56:99:51:2c:4a:57:d6:2f:69:a3:
         f8:61:32:ca:ac:f0:c5:3f:0c:fd:e2:7f:9c:d9:9f:25:48:bd:
         6a:50:fd:37:91:87:6e:a0:52:2f:98:2d:39:52:ac:c1:26:ba:
         8b:96:8f:12:00:88:a1:fa:74:fc:0c:cd:ed:35:75:4f:7b:fd:
         55:4c:c4:d4:65:3a:36:5c:b0:ed:50:40:3c:18:80:14:b6:0a:
         1c:a8:44:cf:d8:ef:81:f5:eb:97:0e:aa:27:32:a1:e8:6f:df:
         ed:84:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----