This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36322e302f32332d3233203d3e20323730383034.roa
File:                     3230302e3231392e36322e302f32332d3233203d3e20323730383034.roa (raw, json)
Hash identifier:          3s2ElvPCtoxXerTkcyjyj160J0UwSn1K+7MsU/Mfqt4=
Subject key identifier:   8E:85:1E:E7:52:E1:D0:82:28:33:6E:0A:CC:89:67:51:2B:0F:71:47
Certificate issuer:       /CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
Certificate serial:       3D37CB7FEB2C89C8537DBDEE9DFB875B92C46D2F
Authority key identifier: 4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36322e302f32332d3233203d3e20323730383034.roa
Signing time:             Tue 26 Aug 2025 14:05:28 +0000
ROA not before:           Tue 26 Aug 2025 14:00:28 +0000
ROA not after:            Tue 25 Aug 2026 14:05:28 +0000
asID:                     270804
IP address blocks:        200.219.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:37:cb:7f:eb:2c:89:c8:53:7d:bd:ee:9d:fb:87:5b:92:c4:6d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
        Validity
            Not Before: Aug 26 14:00:28 2025 GMT
            Not After : Aug 25 14:05:28 2026 GMT
        Subject: CN=8E851EE752E1D08228336E0ACC8967512B0F7147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:61:78:b0:e6:5a:86:f6:a4:03:ed:a0:7d:
                    ab:7d:59:b2:95:f6:d4:52:9b:a3:bf:dd:24:77:d1:
                    a2:c9:39:6f:34:9d:24:ca:c4:6c:45:9e:81:c0:58:
                    4f:36:d3:8c:fa:89:01:2e:e4:b2:bc:75:d3:1e:3a:
                    26:c1:07:1d:0d:72:3c:cc:a7:48:93:55:4c:78:e0:
                    81:46:69:e6:77:f4:e3:bf:81:97:d1:f6:3f:39:fb:
                    92:42:32:cd:fe:6a:fa:84:53:20:18:07:ba:49:65:
                    86:fd:f9:f7:ce:b8:81:95:71:0c:50:81:d2:56:41:
                    46:8f:ac:3b:b5:78:09:9d:25:69:96:ce:2c:44:ec:
                    97:38:78:87:3a:95:58:25:11:50:c6:f6:b3:26:69:
                    80:e5:92:a9:db:65:a5:84:6e:bd:31:e7:3f:5d:86:
                    26:80:fa:1f:ed:6f:bd:99:24:81:f2:5b:0f:37:b2:
                    bb:92:4f:30:80:4e:06:57:eb:83:c6:2a:45:93:48:
                    90:e0:c4:74:9a:c0:99:d2:03:f3:1b:15:19:e8:bc:
                    59:1a:80:2c:7d:e4:d3:86:f2:f9:d0:a3:5d:1b:ad:
                    81:af:fd:16:58:43:12:3f:f1:54:6c:37:5d:42:c4:
                    6f:c8:9e:f4:09:e1:c8:9f:14:b9:49:c7:49:1b:e9:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:1E:E7:52:E1:D0:82:28:33:6E:0A:CC:89:67:51:2B:0F:71:47
            X509v3 Authority Key Identifier:
                keyid:4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36322e302f32332d3233203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:45:3d:85:6c:a8:bc:04:17:75:1b:0b:e2:8d:31:6e:a7:98:
         74:f3:ac:35:b3:c1:c5:af:25:37:ff:cd:c1:18:64:04:3c:6d:
         3e:39:fc:da:ea:65:ee:cd:9d:88:91:4b:7f:8b:2c:2c:13:f7:
         74:f3:cb:c4:92:7b:88:25:27:60:f4:5b:27:f2:2a:fd:3c:c0:
         cf:82:15:e9:e3:8d:9a:68:4b:06:9e:63:e2:47:b6:aa:fb:84:
         5f:56:0c:b8:be:6c:27:ca:15:90:15:ca:86:83:81:9c:a8:0a:
         34:7e:d7:ed:42:80:74:b4:b3:01:7b:b8:d4:95:ea:0f:2d:fa:
         92:dd:26:84:5e:be:6d:5f:e6:91:a3:f5:e1:ff:84:9b:e3:40:
         a6:bc:10:84:0f:82:a1:84:47:35:9e:80:c4:39:9f:5e:e2:7d:
         a9:2d:d1:1b:df:b3:9e:38:4e:ab:79:0e:ee:55:12:38:b4:de:
         77:fa:5f:3f:1e:64:d3:2c:f0:25:0a:b5:a5:2f:5d:ff:0b:41:
         64:f2:0a:f3:d3:9c:53:29:e1:a8:ca:c6:b7:60:a9:7c:b1:27:
         90:ab:e4:db:0e:9c:cb:e1:f2:ec:40:f1:59:d5:a8:9d:17:0c:
         cb:e3:28:0a:39:75:34:52:1f:f0:7f:2e:76:9b:e5:5d:a6:cb:
         84:f3:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----