This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          IBNH/bpHHjWAZ0wnVPTLuBDKYDmrAV9jt3clg5j4LHY=
Subject key identifier:   DC:19:6D:DD:BA:E8:89:75:87:82:00:9F:27:AA:E3:B0:25:B7:AF:8C
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       6F5C6E7987583D17AF2E88288EF33B96A81663DD
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 31 May 2025 16:01:49 +0000
ROA not before:           Sat 31 May 2025 15:56:49 +0000
ROA not after:            Sat 30 May 2026 16:01:49 +0000
asID:                     28572
IP address blocks:        200.192.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5c:6e:79:87:58:3d:17:af:2e:88:28:8e:f3:3b:96:a8:16:63:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: May 31 15:56:49 2025 GMT
            Not After : May 30 16:01:49 2026 GMT
        Subject: CN=DC196DDDBAE889758782009F27AAE3B025B7AF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:10:d0:a5:79:37:24:d3:ba:f9:2a:89:0a:
                    2a:fd:9a:de:fe:f8:c9:88:97:d6:14:69:91:b6:7f:
                    1f:99:4d:72:a7:b0:6c:16:99:f6:8f:91:a9:a2:03:
                    51:b6:d6:c8:f8:e4:e4:ef:2c:d1:ba:1b:29:91:4a:
                    57:57:6d:55:24:09:2f:b3:60:cb:3a:c2:2b:41:b1:
                    ec:4a:48:9a:f0:48:11:f8:bb:4d:e5:48:30:ef:d4:
                    d5:21:fe:af:62:09:0c:42:69:79:3c:bb:1f:1a:b7:
                    70:52:08:7f:39:a2:be:80:62:8b:82:bc:6e:cf:a7:
                    01:48:0c:26:09:d1:7c:59:ae:ca:ab:1b:e8:b9:2b:
                    8b:70:76:7d:33:03:75:50:b6:71:bc:09:46:09:a7:
                    ab:90:e5:54:ea:7c:bb:6f:05:b0:fd:b0:df:2e:3a:
                    f3:b9:1d:5d:45:0e:65:4f:69:d7:b8:7c:70:da:62:
                    03:53:63:3d:9c:8e:5e:40:a9:7f:93:1d:cd:56:31:
                    e6:ef:03:91:9d:11:b9:0b:05:39:a4:ec:b4:4a:77:
                    f5:e9:14:fa:99:4d:87:07:94:95:c4:e3:23:06:4c:
                    7e:08:1d:0b:36:5e:15:70:5b:93:10:5b:91:89:dc:
                    a4:ad:c6:75:71:b0:83:bd:cf:15:24:b8:01:68:fe:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:19:6D:DD:BA:E8:89:75:87:82:00:9F:27:AA:E3:B0:25:B7:AF:8C
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:69:8b:48:de:a8:e4:e2:99:a1:51:52:3f:84:02:3d:ae:1a:
         ad:95:a8:a6:54:c1:91:19:f4:13:3f:9d:c5:29:e2:cd:46:45:
         e0:6f:01:ac:8a:00:64:c0:ad:06:78:b0:61:a7:ce:7e:84:56:
         02:e6:f4:f2:b0:53:b5:43:e9:fe:a5:7d:32:98:1e:d3:fd:1d:
         a8:96:0e:6e:53:81:d4:1c:d5:2b:e8:a3:52:8f:3c:cb:68:92:
         f2:71:0e:26:b4:e6:c1:9d:92:64:32:46:7a:01:74:ce:0f:2f:
         a9:63:c4:db:77:ca:d8:8b:37:ed:ad:06:f2:ba:9d:c3:ff:af:
         64:2a:f4:e4:63:ed:03:60:b1:70:9b:1b:4a:11:d8:48:73:81:
         53:93:79:03:57:e3:57:2c:4a:25:4f:bc:11:d3:1e:d7:b5:53:
         d4:52:8c:d7:98:7f:03:79:f3:bd:ab:03:3c:10:6c:ca:ce:2e:
         11:da:29:1d:59:65:7d:20:79:d0:c1:df:ff:0e:c7:82:c8:41:
         f2:b2:ea:bd:df:f5:4f:8c:0b:2f:04:9c:05:d3:68:94:e0:f6:
         57:83:eb:d0:6d:6c:34:cb:6e:30:46:54:25:ef:67:69:06:c3:
         a5:ab:04:5a:ff:0e:51:c8:c6:85:70:26:f0:61:db:08:77:09:
         30:4b:c1:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb1xueYdYPRevLogojvM7lqgWY90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlFQUUzOEQxNUY1ODk5RDM2MDlDNDExRUIxQTFDNkI0
MkRGQjAwOTAeFw0yNTA1MzExNTU2NDlaFw0yNjA1MzAxNjAxNDlaMDMxMTAvBgNV
BAMTKERDMTk2REREQkFFODg5NzU4NzgyMDA5RjI3QUFFM0IwMjVCN0FGOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjBDQpXk3JNO6+SqJCir9mt7+
+MmIl9YUaZG2fx+ZTXKnsGwWmfaPkamiA1G21sj45OTvLNG6GymRSldXbVUkCS+z
YMs6witBsexKSJrwSBH4u03lSDDv1NUh/q9iCQxCaXk8ux8at3BSCH85or6AYouC
vG7PpwFIDCYJ0XxZrsqrG+i5K4twdn0zA3VQtnG8CUYJp6uQ5VTqfLtvBbD9sN8u
OvO5HV1FDmVPade4fHDaYgNTYz2cjl5AqX+THc1WMebvA5GdEbkLBTmk7LRKd/Xp
FPqZTYcHlJXE4yMGTH4IHQs2XhVwW5MQW5GJ3KStxnVxsIO9zxUkuAFo/gwdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3Blt3broiXWHggCfJ6rjsCW3r4wwHwYDVR0j
BBgwFoAUGerjjRX1iZ02CcQR6xoca0LfsAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5abWZjelg4eExwVUxDQVhXQnhhamt3QkhESkprc0poSks0UG9hd3hB
U1EvMC8xOUVBRTM4RDE1RjU4OTlEMzYwOUM0MTFFQjFBMUM2QjQyREZCMDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RUFFMzhEMTVGNTg5OUQz
NjA5QzQxMUVCMUExQzZCNDJERkIwMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOWm1mY3pYOHhMcFVMQ0FYV0J4YWprd0JIREpKa3NKaEpLNFBvYXd4QVNRLzAv
MzIzMDMwMmUzMTM5MzIyZTMxMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIwJEwDQYJKoZIhvcNAQELBQADggEBAEFpi0je
qOTimaFRUj+EAj2uGq2VqKZUwZEZ9BM/ncUp4s1GReBvAayKAGTArQZ4sGGnzn6E
VgLm9PKwU7VD6f6lfTKYHtP9HaiWDm5TgdQc1Svoo1KPPMtokvJxDia05sGdkmQy
RnoBdM4PL6ljxNt3ytiLN+2tBvK6ncP/r2Qq9ORj7QNgsXCbG0oR2EhzgVOTeQNX
41csSiVPvBHTHte1U9RSjNeYfwN5872rAzwQbMrOLhHaKR1ZZX0gedDB3/8Ox4LI
QfKy6r3f9U+MCy8EnAXTaJTg9leD69BtbDTLbjBGVCXvZ2kGw6WrBFr/DlHIxoVw
JvBh2wh3CTBLwew=
-----END CERTIFICATE-----