This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa
File:                     3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa (raw, json)
Hash identifier:          zB83DgGFStjvU+aix2aNmkBzVdHeo91wOxMAPdbCnAU=
Subject key identifier:   3C:9F:E7:FA:72:51:DF:A1:D2:DD:FB:0E:83:0F:C6:57:9E:3F:CB:0E
Certificate issuer:       /CN=5D8E291FC4CF478643AB7209C821075FDE56D7A5
Certificate serial:       5F214D8617F3B3379F6F03A417863BDA040FC5A8
Authority key identifier: 5D:8E:29:1F:C4:CF:47:86:43:AB:72:09:C8:21:07:5F:DE:56:D7:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8E291FC4CF478643AB7209C821075FDE56D7A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa
Signing time:             Thu 12 Jun 2025 19:00:35 +0000
ROA not before:           Thu 12 Jun 2025 18:55:35 +0000
ROA not after:            Thu 11 Jun 2026 19:00:35 +0000
asID:                     270795
IP address blocks:        189.36.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:21:4d:86:17:f3:b3:37:9f:6f:03:a4:17:86:3b:da:04:0f:c5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8E291FC4CF478643AB7209C821075FDE56D7A5
        Validity
            Not Before: Jun 12 18:55:35 2025 GMT
            Not After : Jun 11 19:00:35 2026 GMT
        Subject: CN=3C9FE7FA7251DFA1D2DDFB0E830FC6579E3FCB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:c6:56:b7:28:01:dc:05:1b:6f:23:98:fc:
                    bd:b1:d3:21:d8:dc:2e:cc:95:f7:53:5e:62:70:07:
                    13:05:40:46:db:63:19:f3:59:dd:25:8e:a4:88:46:
                    ed:bb:3f:df:3a:20:8e:35:7e:3b:0c:76:8a:3d:36:
                    6a:a4:54:bb:ff:0c:e8:ed:c1:78:35:e3:f6:2d:bc:
                    3a:e6:d6:a2:e9:9a:fe:80:77:89:eb:42:57:50:5d:
                    af:7d:b1:70:b5:3c:63:55:29:4a:9f:16:03:05:f9:
                    cd:60:19:af:48:69:85:90:7a:6d:2b:ea:97:42:ac:
                    75:4d:b3:f1:a6:8f:b2:f3:ce:e0:61:20:b6:a7:4e:
                    0f:7c:e4:0f:19:6f:ab:41:53:ff:87:07:70:41:c8:
                    93:af:da:3d:ce:a6:a3:ad:53:ce:56:b4:67:b8:ad:
                    e4:4d:34:54:f0:cd:ab:65:82:fa:86:ba:16:a5:e5:
                    2d:8c:73:03:28:bd:06:d0:46:50:10:88:b9:c1:d0:
                    b9:c0:18:31:ee:f0:d9:9e:5c:37:b0:2b:96:1a:eb:
                    2b:46:fe:68:f5:67:a5:95:b0:af:e0:e1:c6:d4:b8:
                    b1:66:22:92:7f:69:56:7c:d4:e6:64:32:19:32:49:
                    16:25:07:2b:e7:ae:1d:30:49:ec:c1:7d:0c:7c:5e:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:E7:FA:72:51:DF:A1:D2:DD:FB:0E:83:0F:C6:57:9E:3F:CB:0E
            X509v3 Authority Key Identifier:
                keyid:5D:8E:29:1F:C4:CF:47:86:43:AB:72:09:C8:21:07:5F:DE:56:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8E291FC4CF478643AB7209C821075FDE56D7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:42:20:69:b2:65:8d:38:39:fc:3e:56:41:e6:1f:47:2f:a6:
         c5:5c:5d:a3:ad:05:2c:a7:52:f8:1c:a3:f5:80:c4:f8:94:58:
         5b:06:e2:fb:38:85:27:18:6c:76:93:f1:92:47:24:50:5b:f1:
         ab:12:c0:52:6a:bd:ed:8b:64:e4:4a:f1:1b:fc:25:a2:27:ab:
         ec:65:61:a8:75:fb:0f:e8:b9:08:42:b0:a3:3f:92:ee:48:62:
         87:61:4a:44:31:7d:d3:4c:e6:84:c2:6f:9f:0d:04:9d:1f:12:
         27:24:a2:64:91:33:9f:40:ab:8b:2d:83:cf:89:77:46:15:68:
         7a:f9:c2:89:05:0b:8c:a6:bd:b1:ea:74:3f:7a:d8:84:ff:13:
         7c:a0:a7:0f:44:8e:4b:a6:12:83:48:37:c6:bf:4d:12:34:1a:
         81:ef:ae:b4:40:a9:28:53:e0:53:0c:ea:14:24:3b:98:0f:a4:
         f5:7e:19:13:2b:6d:68:24:6e:50:32:67:c5:7a:6f:6e:5b:3c:
         5a:b1:f7:3f:85:a2:a8:43:40:ff:33:8e:b4:6e:6b:66:06:c8:
         51:45:6b:d5:e3:96:fb:6c:aa:37:1c:f4:42:7e:d7:67:09:4b:
         64:9c:ff:e5:90:95:41:46:36:23:24:25:c5:49:ce:7f:43:53:
         a4:85:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----