This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135302e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3135302e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          XYgm2M43qcowbO4WDflBmllBAhdwU+Gw1uO6e7Ub5bQ=
Subject key identifier:   E2:A3:EB:49:CF:34:7F:36:CF:FA:83:1A:ED:E4:63:FA:45:B7:C3:F1
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       70DA7F1541307FA41D7DC6FDC8BAAD5FDCD5A76D
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135302e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 31 May 2025 16:01:50 +0000
ROA not before:           Sat 31 May 2025 15:56:50 +0000
ROA not after:            Sat 30 May 2026 16:01:50 +0000
asID:                     28572
IP address blocks:        200.192.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:da:7f:15:41:30:7f:a4:1d:7d:c6:fd:c8:ba:ad:5f:dc:d5:a7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: May 31 15:56:50 2025 GMT
            Not After : May 30 16:01:50 2026 GMT
        Subject: CN=E2A3EB49CF347F36CFFA831AEDE463FA45B7C3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:c5:72:ee:eb:15:51:60:e7:60:cc:da:27:
                    fa:11:9a:9f:f3:c1:91:d2:2c:ed:ec:c2:cb:28:0e:
                    c7:bd:13:ff:c4:ca:40:5b:27:4b:1e:79:c7:41:b5:
                    f8:c0:bf:9e:4d:5e:10:8a:df:74:67:91:a5:2a:11:
                    c1:ca:1a:5a:a6:3d:c8:d2:36:08:36:01:9e:9a:57:
                    f0:d0:eb:44:12:0f:ef:41:c7:83:a1:68:28:b2:17:
                    4f:dc:82:a4:5e:17:24:f9:02:4f:a8:00:ea:8b:5a:
                    76:37:dd:db:b0:ff:75:13:0d:28:5e:31:26:b9:28:
                    f4:c8:f3:ec:db:7f:53:9e:58:d6:f6:52:25:de:7e:
                    0d:ec:1f:d2:ce:d1:52:4e:5e:be:de:d0:a8:ff:dd:
                    37:bd:0e:ce:e0:07:ac:13:ab:57:f9:7e:dc:3d:16:
                    4a:be:6c:3b:95:52:b7:0f:91:5e:88:7b:48:5e:b9:
                    e8:7b:28:ba:6b:92:b8:99:44:ce:68:30:54:35:00:
                    7e:27:b8:c1:81:34:7b:39:0e:5d:6c:a1:6e:8c:e0:
                    30:d0:fe:c6:e6:31:0d:23:3a:84:34:7c:a9:6b:b0:
                    0f:44:0c:1f:3a:16:73:72:62:6a:8f:ff:5f:9d:4b:
                    cf:0f:a8:cb:d7:7d:b6:7f:92:58:73:c3:79:74:34:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A3:EB:49:CF:34:7F:36:CF:FA:83:1A:ED:E4:63:FA:45:B7:C3:F1
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135302e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:39:16:4c:1e:27:ad:ab:3e:e3:cb:f9:61:4c:c8:5a:28:78:
         6b:bc:4c:eb:b2:ab:83:9b:ab:29:c8:8d:3e:73:4f:77:70:f2:
         ba:1b:bd:f0:01:8f:71:34:0f:66:fd:1f:8f:85:bd:5f:43:be:
         9c:be:5d:fe:e3:93:45:41:95:28:92:be:d7:ea:79:21:21:7e:
         fd:13:27:25:50:81:83:43:00:46:3e:e8:eb:60:e8:29:46:2d:
         e7:2d:03:f6:45:8c:f1:7d:85:c7:40:5d:7f:bd:81:27:4f:bf:
         f0:a2:db:e7:c0:86:c2:98:f7:e2:3c:c2:e3:8c:d6:53:80:08:
         80:6e:80:80:f9:34:f1:fe:8f:e7:55:5a:a1:30:36:5f:30:e8:
         bf:3d:9d:57:cd:46:98:8a:c1:c5:ef:a2:64:84:9c:6b:95:b9:
         c3:1f:54:a9:b5:1a:eb:35:ff:3a:a4:3d:83:c6:86:ea:bd:28:
         85:b4:1f:f0:b9:00:7a:47:6c:1b:01:a7:48:a7:82:db:a7:5f:
         66:46:9f:6a:49:25:46:04:56:da:e3:22:32:23:69:85:c3:cc:
         f0:cf:15:96:a8:93:f3:a7:d9:93:3e:82:28:08:b1:4c:6d:68:
         ad:90:a6:49:d4:c3:61:1b:a6:cf:38:0b:0a:bf:1d:dc:92:ea:
         19:23:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----