This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa
File:                     3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (raw, json)
Hash identifier:          s2m/rSCGWtXFgQ0ZfdSHKZmWkAcKxBcAVuMFFal50mU=
Subject key identifier:   C4:22:CF:2D:6B:ED:62:9B:B1:18:BA:EF:34:80:34:B4:C9:30:9C:2F
Certificate issuer:       /CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
Certificate serial:       47B17B724AAFB1E41EA4E383296B27D146983FEE
Authority key identifier: 6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa
Signing time:             Tue 11 Mar 2025 18:18:25 +0000
ROA not before:           Tue 11 Mar 2025 18:13:25 +0000
ROA not after:            Tue 10 Mar 2026 18:18:25 +0000
asID:                     264402
IP address blocks:        131.161.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:7b:72:4a:af:b1:e4:1e:a4:e3:83:29:6b:27:d1:46:98:3f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
        Validity
            Not Before: Mar 11 18:13:25 2025 GMT
            Not After : Mar 10 18:18:25 2026 GMT
        Subject: CN=C422CF2D6BED629BB118BAEF348034B4C9309C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:97:19:8b:a3:a8:f8:46:a2:6c:ac:82:b7:
                    7c:91:e8:38:48:e5:48:46:b5:4f:75:d1:7b:de:9e:
                    82:62:08:25:05:2c:8e:d3:7f:48:89:d5:ef:43:c3:
                    8f:9f:69:43:1f:23:1f:cb:ab:29:36:a8:e3:17:1c:
                    40:b9:d0:87:aa:44:91:eb:c4:aa:3f:47:40:3d:aa:
                    9f:bc:cb:20:ed:42:91:65:6e:df:40:d1:8c:38:81:
                    19:56:cc:04:dc:e9:47:39:8f:be:03:c6:19:b1:86:
                    7c:86:b0:0b:30:3a:d6:83:2f:b3:0a:0e:e8:a0:be:
                    6a:13:68:69:c1:1e:af:44:a9:10:c2:40:4b:bc:12:
                    fb:dc:18:ce:50:2c:27:8b:74:98:6d:eb:2f:bc:e3:
                    7d:c3:9b:a7:8c:5f:52:e9:64:71:76:1d:2f:47:10:
                    4c:cb:a9:e0:36:da:f4:37:7d:a1:db:dd:01:6b:bd:
                    3d:3d:bb:f9:1e:95:ae:62:d3:97:1d:c2:b8:ca:bf:
                    6b:65:12:07:95:1d:8d:f3:21:75:39:76:00:11:da:
                    f3:25:17:39:43:b6:c2:68:09:36:4c:d9:bc:de:aa:
                    a5:11:f9:6c:0f:11:5b:b5:96:90:95:a8:1e:f8:36:
                    69:3f:7a:75:49:14:95:21:09:0e:09:cc:e6:a2:88:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:CF:2D:6B:ED:62:9B:B1:18:BA:EF:34:80:34:B4:C9:30:9C:2F
            X509v3 Authority Key Identifier:
                keyid:6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:da:a6:a6:5d:f3:7f:a9:92:fa:b4:a9:57:28:aa:ad:47:
         2d:40:30:3d:e8:a0:50:0a:fa:8f:7b:14:9f:20:a2:a7:47:e0:
         97:3a:34:e3:c6:d8:13:0e:7a:b0:89:bd:e8:06:3b:93:55:7a:
         a8:db:a4:da:bf:37:7a:fe:8a:02:19:5b:4e:f0:27:52:23:fc:
         02:e6:d4:5a:24:34:ed:74:6c:f6:d6:bf:29:0a:df:eb:99:49:
         7c:e1:02:6d:bf:ff:d6:29:ec:93:7f:91:69:14:8f:1d:eb:0d:
         85:6f:96:3c:cb:0a:10:09:71:e6:fd:1c:af:c9:02:b2:a4:7c:
         c6:65:23:dd:94:de:67:61:85:de:4e:ed:0c:9f:9b:ea:da:41:
         06:cc:f2:58:c4:d9:50:c7:f0:fd:66:4c:d4:05:8b:1e:63:5a:
         28:37:5f:36:5d:eb:66:49:36:16:52:65:2e:58:a1:3c:10:c9:
         e0:da:4b:69:5f:f3:b3:3a:f9:df:17:0b:6d:db:89:a5:b5:7a:
         4a:1c:0c:3f:93:c2:b0:63:ad:35:5a:d6:f3:66:ee:a9:d0:92:
         30:64:b7:5f:d6:fc:db:63:64:87:a7:ed:0e:26:64:4b:37:6d:
         ff:f5:da:ee:3c:6b:7f:4c:4e:ac:a2:a7:e5:65:c9:0a:67:f9:
         21:0c:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----