This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/3138362e3232362e3230392e302f32342d3234203d3e20323633303038.roa
File:                     3138362e3232362e3230392e302f32342d3234203d3e20323633303038.roa (raw, json)
Hash identifier:          E4N9soQ7JMlxbC9lfx7Dnrs4GdlHM2y4rnQ36G33ACg=
Subject key identifier:   BE:6D:4B:B3:84:2C:3E:C8:FA:C9:88:50:2C:93:C9:87:18:47:5A:4D
Certificate issuer:       /CN=5B580CCE691441B11E4F2101E95A2D2B6FA6B679
Certificate serial:       49A788DB27DBF0CCA408D1D8BA30427F84606028
Authority key identifier: 5B:58:0C:CE:69:14:41:B1:1E:4F:21:01:E9:5A:2D:2B:6F:A6:B6:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/3138362e3232362e3230392e302f32342d3234203d3e20323633303038.roa
Signing time:             Mon 16 Dec 2024 11:38:22 +0000
ROA not before:           Mon 16 Dec 2024 11:33:22 +0000
ROA not after:            Mon 15 Dec 2025 11:38:22 +0000
asID:                     263008
IP address blocks:        186.226.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a7:88:db:27:db:f0:cc:a4:08:d1:d8:ba:30:42:7f:84:60:60:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B580CCE691441B11E4F2101E95A2D2B6FA6B679
        Validity
            Not Before: Dec 16 11:33:22 2024 GMT
            Not After : Dec 15 11:38:22 2025 GMT
        Subject: CN=BE6D4BB3842C3EC8FAC988502C93C98718475A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:59:0a:ca:c9:af:4b:97:4c:45:6c:f2:dc:
                    dd:09:66:4f:37:b1:98:ce:02:61:c6:12:09:db:88:
                    c4:08:d8:2d:b9:b6:8e:37:4d:08:ea:52:03:9d:0f:
                    fc:18:a5:52:f2:f4:21:d4:d1:ef:ce:ce:19:c9:58:
                    ee:43:06:2f:b9:4d:37:fb:b2:dc:6f:aa:54:39:68:
                    7d:ae:30:8f:61:a5:08:a0:cb:ad:7e:46:c8:4f:8b:
                    4c:44:65:ad:4f:75:7c:da:66:b1:ff:2f:c8:9d:a8:
                    0b:b9:77:40:a6:59:34:e7:05:03:f8:84:92:51:5f:
                    87:89:29:57:a2:6e:7e:ff:8b:6d:a4:ee:0c:a0:b4:
                    53:d4:e4:88:1c:1a:46:38:68:7e:f8:02:17:2b:2b:
                    b0:be:02:dc:01:56:51:bb:f7:93:54:b8:93:cd:ce:
                    6b:63:86:8d:b1:fe:03:84:b4:70:f2:06:b0:86:e8:
                    bf:07:e4:14:7a:70:26:ca:17:12:de:1e:4d:5f:7f:
                    f5:16:ec:e5:4f:4c:57:b1:3b:19:1b:20:f4:4d:a0:
                    01:23:75:47:07:14:48:11:59:b4:69:3c:69:a3:65:
                    e1:af:bc:1a:c0:db:45:33:41:b5:c1:a4:0d:dd:69:
                    5a:44:ab:47:90:22:9c:b6:51:80:dc:9b:c8:af:ef:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6D:4B:B3:84:2C:3E:C8:FA:C9:88:50:2C:93:C9:87:18:47:5A:4D
            X509v3 Authority Key Identifier:
                keyid:5B:58:0C:CE:69:14:41:B1:1E:4F:21:01:E9:5A:2D:2B:6F:A6:B6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/3138362e3232362e3230392e302f32342d3234203d3e20323633303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:8e:00:aa:ac:0e:8e:d3:0b:65:44:ab:ed:5e:18:d4:9b:
         e8:6d:f6:de:a8:cc:68:4b:c6:ae:65:c4:7f:3a:10:e4:5a:5e:
         f6:ad:f6:0f:3a:61:b3:b5:a9:0c:38:42:2e:f4:0e:3f:fa:42:
         2b:d8:76:f7:de:bb:30:0e:d1:59:02:f1:a7:15:18:7d:c9:67:
         8f:e8:c1:02:b3:68:05:99:55:33:02:65:91:d7:1a:01:50:ce:
         96:53:71:93:1d:5f:be:fd:cb:65:84:f8:7e:6d:42:b6:15:d3:
         ea:c9:12:17:a8:87:9e:24:91:4f:f4:a8:72:94:29:50:6c:19:
         d8:11:bf:97:00:51:4d:80:e8:a6:4f:5b:0a:d1:7e:97:6b:67:
         55:14:f6:d3:75:86:6b:95:f1:21:a0:e5:42:a9:0a:64:43:0f:
         65:63:a8:9b:6c:b9:c0:66:4d:48:ae:a8:e9:95:8b:ac:9f:af:
         48:58:ee:a1:6f:bb:05:25:fb:f5:3f:b6:73:ed:86:a8:49:23:
         3e:4a:be:55:0f:4b:6e:08:df:c2:96:b0:f9:9e:ff:6b:9e:66:
         e2:83:d6:d7:62:0b:cc:17:ca:2c:e2:ce:2f:8b:61:62:10:e4:
         19:2b:bc:58:a8:5d:ad:9b:ec:4d:25:c5:89:5f:2c:60:b1:fa:
         20:31:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----