This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3133382e39342e3139322e302f32322d3332203d3e20323634313836.roa
File:                     3133382e39342e3139322e302f32322d3332203d3e20323634313836.roa (raw, json)
Hash identifier:          hMoZagbe9u9DNqTzszNAaXKzDZe6RnVWel/LV//GqkY=
Subject key identifier:   06:B2:98:B6:5C:D0:92:65:EC:16:56:22:11:44:72:91:24:17:15:6F
Certificate issuer:       /CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F
Certificate serial:       2C55B7CE870342952AD648928BABC4BC8EDC4D13
Authority key identifier: 1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3133382e39342e3139322e302f32322d3332203d3e20323634313836.roa
Signing time:             Fri 28 Mar 2025 10:14:54 +0000
ROA not before:           Fri 28 Mar 2025 10:09:54 +0000
ROA not after:            Fri 27 Mar 2026 10:14:54 +0000
asID:                     264186
IP address blocks:        138.94.192.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:55:b7:ce:87:03:42:95:2a:d6:48:92:8b:ab:c4:bc:8e:dc:4d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F
        Validity
            Not Before: Mar 28 10:09:54 2025 GMT
            Not After : Mar 27 10:14:54 2026 GMT
        Subject: CN=06B298B65CD09265EC165622114472912417156F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:11:d7:12:bc:7b:6f:35:d1:49:7b:72:a7:
                    79:7c:25:67:54:b1:9d:27:92:73:21:2d:17:8f:af:
                    5e:87:80:6b:f2:13:6c:cd:a2:50:88:b1:a6:e4:0e:
                    e6:ad:07:a4:4d:bc:4d:58:4d:d5:7d:dd:46:19:f9:
                    47:3c:97:9a:76:c0:77:d0:5a:91:54:1f:36:08:00:
                    f7:2f:2b:89:6b:c5:29:d5:f9:dd:4a:b5:c9:15:39:
                    ad:63:4d:8d:02:90:90:7b:09:a7:54:75:0f:24:df:
                    bc:c9:7f:85:78:dd:c9:20:a8:fa:7b:87:c4:73:4e:
                    eb:39:b4:d8:f1:f8:68:14:00:0e:a6:c3:a8:41:dc:
                    3a:23:90:b8:03:10:da:2d:25:7a:24:34:d4:27:4d:
                    8b:a1:20:f7:75:79:f9:1e:c7:b5:fc:c4:a4:98:d1:
                    2d:c2:dc:c7:21:3f:7e:10:cf:7d:8a:ac:e9:6c:79:
                    59:e8:c4:74:c8:65:e2:ae:9e:4a:75:47:ef:d1:93:
                    47:5c:bb:13:2b:7a:e2:48:7e:89:7d:03:de:43:83:
                    d6:9c:c4:e5:2e:88:86:d9:4a:84:e9:ca:e3:0f:d8:
                    96:6a:cd:6c:bf:ec:84:c1:c5:a3:27:ce:4f:33:be:
                    c9:b9:c8:e3:02:30:db:ef:86:84:aa:e8:b2:56:86:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:98:B6:5C:D0:92:65:EC:16:56:22:11:44:72:91:24:17:15:6F
            X509v3 Authority Key Identifier:
                keyid:1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3133382e39342e3139322e302f32322d3332203d3e20323634313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:b2:8d:a7:e7:76:da:0c:1b:24:c6:a5:01:13:7e:55:c5:
         2a:87:4e:7f:1f:2d:95:1c:00:d6:c0:52:f3:e2:63:35:f3:a7:
         91:ba:06:2a:63:4f:30:9a:bf:af:fa:e2:e1:02:07:ef:25:c4:
         09:0f:99:5a:c9:de:51:47:3e:9a:c0:9e:3d:5f:85:6c:4a:eb:
         5d:38:74:9a:41:a2:ab:73:4f:2d:a2:fa:0c:36:3c:be:c9:72:
         ea:ea:0a:81:fa:2a:c5:6d:9f:5f:5e:58:5a:a8:19:81:7d:42:
         63:ae:5e:73:c4:54:18:fd:36:fc:b7:6c:5e:f1:fa:16:70:8d:
         81:e0:24:65:b6:c5:49:27:1d:1c:3f:39:3e:64:73:34:92:3c:
         b7:ae:5a:3a:35:ee:b1:7f:55:8d:66:58:93:55:af:9c:9c:ba:
         36:35:17:b4:c4:b3:a4:ca:a7:c8:90:70:35:4a:c2:92:e2:66:
         a0:96:ad:94:0e:c0:f8:fb:a6:82:de:6b:90:c8:b9:c8:c4:1e:
         c8:b2:35:a7:f2:f2:a0:87:59:bf:79:b0:f6:98:02:cf:f8:14:
         1e:a1:95:8e:0e:8b:75:fe:71:ce:79:6b:c8:3d:77:f1:e2:40:
         51:42:a6:52:64:3c:ce:75:65:40:88:54:14:fe:6a:65:2a:d4:
         11:53:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----