This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa
File:                     3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa (raw, json)
Hash identifier:          mStZ1/7r1CjGAayneQ5L8RJ7M6k+X299LJFyPZa0x4A=
Subject key identifier:   D2:20:29:B0:86:09:81:6E:D5:62:E0:CE:3F:F5:1E:25:18:F1:B3:BB
Certificate issuer:       /CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
Certificate serial:       4BBDD24E47297B03A85CAC41CAEE6FD0DB15CCC4
Authority key identifier: 4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa
Signing time:             Tue 26 Aug 2025 14:05:30 +0000
ROA not before:           Tue 26 Aug 2025 14:00:30 +0000
ROA not after:            Tue 25 Aug 2026 14:05:30 +0000
asID:                     270804
IP address blocks:        200.219.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bd:d2:4e:47:29:7b:03:a8:5c:ac:41:ca:ee:6f:d0:db:15:cc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
        Validity
            Not Before: Aug 26 14:00:30 2025 GMT
            Not After : Aug 25 14:05:30 2026 GMT
        Subject: CN=D22029B08609816ED562E0CE3FF51E2518F1B3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:94:9b:01:aa:8f:0c:fe:89:5d:0f:1a:41:12:
                    fa:e4:b7:31:ba:ea:14:f8:6d:8e:70:86:1a:22:e5:
                    00:2f:b7:30:58:2f:15:06:21:7a:b3:b6:ed:12:03:
                    82:89:8c:0f:98:4f:34:fd:14:d1:63:b9:f6:3e:67:
                    cd:5f:9b:32:80:d8:d1:f0:f0:31:75:d4:f4:35:19:
                    9f:8c:46:95:c1:4c:f1:b3:c2:39:30:14:ed:48:2d:
                    22:38:50:ee:d1:de:87:22:d9:e9:83:de:f8:85:60:
                    45:05:6f:da:6f:1e:17:68:2a:bf:9f:b5:e4:ce:61:
                    71:77:ad:75:5c:c6:74:73:0a:28:60:f9:c5:44:78:
                    11:92:cf:d2:ea:96:b5:a8:c6:06:6e:2d:5a:52:8b:
                    ed:0a:81:c9:54:cf:c7:83:06:da:56:d0:94:bd:9b:
                    75:c6:62:a5:27:67:da:6c:f3:04:29:8f:0b:5f:47:
                    35:25:fd:5c:75:31:a8:4c:d3:6f:a7:24:0c:b4:5f:
                    7a:04:a1:3d:e2:11:33:31:2d:3a:8a:98:6c:ff:bb:
                    9c:47:3f:1d:35:d0:71:1a:81:e2:9e:dd:21:c7:4c:
                    11:f1:ac:7f:ef:56:ce:d4:a1:9f:00:8a:cf:a6:30:
                    f1:44:36:8e:fc:83:c3:6e:e0:6d:54:0c:c1:8d:63:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:29:B0:86:09:81:6E:D5:62:E0:CE:3F:F5:1E:25:18:F1:B3:BB
            X509v3 Authority Key Identifier:
                keyid:4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:7e:ae:66:ad:1a:8e:08:a9:69:c4:4e:b5:73:38:cd:9e:
         da:50:34:6c:d8:18:37:c8:5b:4a:28:c9:97:bf:c0:ef:18:ff:
         7e:70:ae:0d:66:d1:81:b4:5e:e5:b6:9b:e5:fd:a0:4b:02:83:
         d9:24:af:f4:6a:7e:eb:12:63:ab:43:a6:54:34:9c:a4:83:b6:
         42:31:78:4c:8b:a2:4b:6f:ff:d3:c1:59:87:d8:74:cf:a9:e8:
         9d:48:55:e8:56:2a:c3:a3:7f:88:85:06:2c:b2:4f:2f:0e:2a:
         33:20:aa:0f:a1:e4:c6:fd:11:62:82:4c:3b:2a:bf:97:98:87:
         77:71:78:31:ba:0c:ed:12:86:3b:38:51:49:dd:26:cd:c1:61:
         c9:d0:5b:bc:fd:07:35:e0:aa:6f:0d:b1:9c:a7:f4:0c:d9:32:
         56:97:6b:e0:61:e1:a6:e4:e1:b4:1b:db:8d:18:bd:66:a9:fc:
         0e:a8:80:0a:f4:d0:2d:17:9b:bf:98:90:4c:63:8c:e3:ae:fc:
         d4:11:35:be:d0:ff:7d:d1:a9:c6:e2:cd:d4:8e:59:e1:e7:bd:
         5c:7b:4e:53:b7:45:cc:48:cb:c5:db:8c:89:1e:8b:17:53:36:
         00:85:9a:b0:4f:10:20:d3:83:d5:74:c3:77:b6:ca:a7:eb:c6:
         14:4d:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----