This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa
File:                     3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa (raw, json)
Hash identifier:          0HcgdqpyYZdO1kT85oLc8qbGHD0Si8hR53JWoDDa1Sg=
Subject key identifier:   5C:A8:3F:C8:D5:58:05:0E:DF:43:68:89:53:D4:B4:57:F7:16:A2:87
Certificate issuer:       /CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2
Certificate serial:       7F250334F52F91CB25600C3AB6D3EB4C1FC1E627
Authority key identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa
Signing time:             Thu 24 Apr 2025 22:27:38 +0000
ROA not before:           Thu 24 Apr 2025 22:22:38 +0000
ROA not after:            Thu 23 Apr 2026 22:27:38 +0000
asID:                     53115
IP address blocks:        187.109.192.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:25:03:34:f5:2f:91:cb:25:60:0c:3a:b6:d3:eb:4c:1f:c1:e6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2
        Validity
            Not Before: Apr 24 22:22:38 2025 GMT
            Not After : Apr 23 22:27:38 2026 GMT
        Subject: CN=5CA83FC8D558050EDF43688953D4B457F716A287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:47:44:89:c6:6f:b9:5a:75:9e:76:eb:95:
                    48:2c:66:c9:b0:57:51:ca:e4:14:ab:76:9a:6d:40:
                    b8:4f:30:b4:6f:8f:bf:c1:a0:b5:e9:2e:8c:fc:7f:
                    30:78:3d:72:f1:da:f0:ae:df:76:92:41:8c:9a:70:
                    15:8c:37:87:e6:2c:37:66:4d:0d:99:e5:d2:96:6d:
                    ad:35:08:4f:37:75:9c:cb:9c:d4:f7:25:bd:ca:6c:
                    de:e8:e1:5d:dc:8b:bd:72:92:97:92:92:ce:34:36:
                    c5:74:24:fd:d2:b4:64:a7:35:e4:4f:da:a5:ab:eb:
                    5c:50:b4:d1:99:ea:9c:76:88:59:27:ca:0d:19:a5:
                    fb:5b:df:ac:1a:1a:e4:70:65:83:03:51:f8:01:4d:
                    79:58:97:6a:b2:60:1e:5f:0e:d9:a2:45:d3:d1:2a:
                    ab:21:5f:08:f5:2b:6f:73:50:99:91:ac:5e:d8:a8:
                    d3:32:c4:1d:a3:69:e9:f4:b7:a9:56:28:00:58:75:
                    08:52:f2:cc:d6:29:8b:aa:28:e2:c6:84:4b:16:8a:
                    c7:6d:c8:41:11:26:dd:a1:1c:44:38:02:1a:4a:46:
                    dd:ea:bc:68:cb:9d:3a:c2:fc:36:c7:22:35:30:d5:
                    df:d1:ff:02:cf:a3:50:5a:5f:ae:8c:be:b6:16:58:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A8:3F:C8:D5:58:05:0E:DF:43:68:89:53:D4:B4:57:F7:16:A2:87
            X509v3 Authority Key Identifier:
                keyid:83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:d5:5f:cd:64:51:4f:c3:8f:8a:14:1e:e2:25:aa:d2:96:
         cc:08:1d:e1:20:b0:bf:60:90:30:be:31:c6:dc:6d:b7:c8:e2:
         88:78:c3:91:7b:3e:2a:07:93:d2:06:d2:10:bf:b1:1f:08:53:
         7f:54:11:89:03:52:e5:0a:c3:0f:2e:74:46:9a:25:1b:c7:38:
         fc:a7:27:b7:2e:c0:c4:dd:5d:00:35:04:5c:31:8d:b3:ce:d1:
         e8:38:61:6c:1c:24:dc:95:4b:2f:01:2f:e0:5e:0e:6d:ce:ea:
         18:02:fa:8e:73:38:32:d1:61:f3:07:e5:af:43:d1:28:b7:8a:
         51:2d:d4:80:e5:bc:1b:5b:cd:5d:a6:ed:5c:ee:91:bc:2b:85:
         1c:75:8d:0d:b3:82:b9:f0:5a:4a:21:70:ab:c2:4f:f1:a2:07:
         18:e1:17:14:96:52:d9:8f:35:f9:e0:3c:fb:7b:26:31:d7:73:
         7f:22:8b:c0:de:48:51:95:08:24:c2:de:31:7d:44:ed:47:d1:
         d6:59:0b:47:9a:ab:a0:ef:53:dc:38:29:08:01:75:1d:05:fe:
         4b:ae:b1:76:c6:cf:49:4a:d4:db:db:4a:65:17:9b:98:c9:fd:
         5c:3f:ad:7e:8f:f8:60:75:cc:04:84:6b:30:b9:fc:02:79:ec:
         c1:51:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----