This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3133312e3130302e3233322e302f32322d3234203d3e203631363836.roa
File:                     3133312e3130302e3233322e302f32322d3234203d3e203631363836.roa (raw, json)
Hash identifier:          uNwt6kt+M9s8jgwsdBxDnhPYKw4KEPrReqSaqzeG0OM=
Subject key identifier:   68:C9:F7:08:DE:F3:61:53:36:EE:F4:A3:74:5D:E4:A6:AF:6C:12:1F
Certificate issuer:       /CN=3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978
Certificate serial:       1FBE053B777D74467647A1AFC317854924DBB5CF
Authority key identifier: 3E:40:35:FC:57:BB:6A:B7:45:72:D7:C5:C9:E3:4C:AC:1F:7D:59:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3133312e3130302e3233322e302f32322d3234203d3e203631363836.roa
Signing time:             Fri 22 Aug 2025 00:51:45 +0000
ROA not before:           Fri 22 Aug 2025 00:46:45 +0000
ROA not after:            Fri 21 Aug 2026 00:51:45 +0000
asID:                     61686
IP address blocks:        131.100.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:be:05:3b:77:7d:74:46:76:47:a1:af:c3:17:85:49:24:db:b5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978
        Validity
            Not Before: Aug 22 00:46:45 2025 GMT
            Not After : Aug 21 00:51:45 2026 GMT
        Subject: CN=68C9F708DEF3615336EEF4A3745DE4A6AF6C121F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:ed:95:6e:3a:c5:4b:2c:e5:e9:a5:43:8b:
                    f2:a1:5d:fb:59:d1:a1:a4:61:d9:7c:36:8f:04:22:
                    07:2c:81:e0:5b:08:c4:0e:7f:b3:18:09:c6:c3:9b:
                    18:5d:cb:c2:32:19:b9:3f:46:f6:43:e8:14:a1:96:
                    a8:5b:0e:19:05:29:40:3c:be:26:89:9c:02:ba:e3:
                    05:9b:1b:07:e5:75:dc:04:b8:74:46:f6:06:65:c6:
                    5c:7a:42:34:e7:dd:f1:ff:fe:51:14:91:26:9e:f9:
                    40:66:39:f6:65:c7:b1:ff:24:58:3c:c5:ab:00:0e:
                    ed:95:8f:60:e5:ca:d4:91:ea:6e:e5:2a:9e:cf:25:
                    b3:84:5e:4a:b2:98:89:9a:03:0b:7a:42:69:6d:91:
                    ad:0f:94:10:9a:9c:b8:9a:bc:b2:0d:7f:ff:f1:44:
                    9b:af:df:76:7f:53:b0:c4:88:58:0d:9a:ae:a5:de:
                    07:2a:8f:0e:98:35:f3:e4:f1:41:9b:0a:bc:37:f6:
                    4a:f7:2e:41:ed:f6:f6:3e:29:e7:23:55:e6:14:58:
                    30:a7:01:0d:b1:fe:e9:77:a7:0b:a6:37:da:7a:d7:
                    f9:69:76:de:4c:03:25:17:fb:00:0c:01:5a:53:fe:
                    9c:3b:1b:88:2e:e7:f7:0a:6f:60:62:d5:af:9a:6d:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:F7:08:DE:F3:61:53:36:EE:F4:A3:74:5D:E4:A6:AF:6C:12:1F
            X509v3 Authority Key Identifier:
                keyid:3E:40:35:FC:57:BB:6A:B7:45:72:D7:C5:C9:E3:4C:AC:1F:7D:59:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3133312e3130302e3233322e302f32322d3234203d3e203631363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:26:5e:eb:2b:25:63:ca:08:93:65:e1:df:dc:2a:a5:7e:af:
         80:ac:03:5a:00:1a:5e:24:b6:38:95:2a:1f:01:49:13:19:84:
         3e:9f:18:9f:0f:27:4b:61:59:d6:79:59:1a:0c:5a:b8:86:9f:
         8d:0a:52:ae:40:03:2e:3f:30:9b:15:62:07:25:31:35:de:9a:
         4c:d4:4a:8f:77:b6:4e:c3:f3:aa:d0:d8:ba:e4:65:97:5a:78:
         9d:4d:3d:cf:c1:9f:47:df:eb:08:7d:40:74:52:38:25:81:b5:
         47:89:68:a1:9d:44:25:8a:bc:fe:49:33:f8:70:c9:93:12:f1:
         85:b5:2d:67:56:1b:c1:bf:d4:55:5e:6d:e4:d5:a5:93:5b:df:
         d8:77:af:63:8a:bd:d5:29:d6:f3:43:22:f6:db:a0:95:00:ec:
         84:89:3c:1b:26:10:fb:02:d3:bc:39:87:d3:0d:fa:3b:bd:34:
         c1:11:8f:10:b5:50:15:b3:62:a2:ca:3b:11:26:df:6f:8b:03:
         45:6d:e8:f9:de:03:33:b9:20:a6:b3:44:2b:8f:8e:af:92:2a:
         c2:4b:ac:1c:05:b3:19:7a:60:a2:ec:86:5a:2d:3e:08:8d:ba:
         35:8c:7a:e3:75:4b:d3:26:0f:45:5a:ab:34:f1:69:cd:47:6e:
         d8:42:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----