This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa
File:                     3139302e38392e32302e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          +hvmchxLAvriRpJ4zjutvpKqAHCEUs7+pzE4UcROnMc=
Subject key identifier:   32:F0:57:97:C8:95:4E:90:43:C4:EF:84:09:AB:49:5C:44:59:EF:6E
Certificate issuer:       /CN=08576EBE085579A61538173A7DB502AD54876CD9
Certificate serial:       084CE5810E458F76BDA19FFE0F1AAE648BE864D7
Authority key identifier: 08:57:6E:BE:08:55:79:A6:15:38:17:3A:7D:B5:02:AD:54:87:6C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08576EBE085579A61538173A7DB502AD54876CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa
Signing time:             Tue 24 Jun 2025 14:08:43 +0000
ROA not before:           Tue 24 Jun 2025 14:03:43 +0000
ROA not after:            Tue 23 Jun 2026 14:08:43 +0000
asID:                     270350
IP address blocks:        190.89.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4c:e5:81:0e:45:8f:76:bd:a1:9f:fe:0f:1a:ae:64:8b:e8:64:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08576EBE085579A61538173A7DB502AD54876CD9
        Validity
            Not Before: Jun 24 14:03:43 2025 GMT
            Not After : Jun 23 14:08:43 2026 GMT
        Subject: CN=32F05797C8954E9043C4EF8409AB495C4459EF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:eb:2a:70:c7:9c:9e:44:49:22:1f:1a:10:
                    fb:c7:ff:97:f5:c4:7b:d4:e7:f4:ba:e0:85:fa:57:
                    94:fc:f4:e8:7b:3c:fe:a3:5a:97:06:c9:6a:65:05:
                    53:02:17:04:1b:2f:f8:19:aa:aa:d6:27:02:5f:d8:
                    d9:01:43:32:ba:fd:a9:18:7c:a1:45:2a:2a:59:86:
                    8a:53:2f:87:ff:54:4c:b2:d0:db:ba:b6:02:96:9b:
                    17:a3:87:b9:90:f0:9d:c2:ef:31:55:26:11:88:dd:
                    38:96:60:0f:da:3f:15:c1:de:1c:5f:37:7d:c1:b5:
                    4c:d0:f2:85:cf:d6:49:90:ff:5a:71:ef:40:db:49:
                    b3:7a:ab:28:cd:38:ed:09:17:b6:f8:bf:4a:12:74:
                    82:07:fd:5a:e1:e2:66:9f:3b:b1:4f:e8:b4:a1:3a:
                    7a:62:a7:51:0d:ed:88:68:4b:46:7c:dc:fc:4e:ba:
                    97:e8:2e:b2:8d:89:81:65:c6:d7:c1:85:70:f6:8f:
                    23:36:56:47:d9:52:22:09:6d:a0:a6:25:70:4c:dc:
                    21:82:4c:db:e3:e5:8e:44:5b:90:52:ae:28:7f:96:
                    9a:4d:50:5a:fc:ca:ac:4f:c1:46:d5:6e:22:0f:42:
                    8e:c5:32:3e:9d:b2:da:7d:32:86:6c:f7:37:12:f1:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F0:57:97:C8:95:4E:90:43:C4:EF:84:09:AB:49:5C:44:59:EF:6E
            X509v3 Authority Key Identifier:
                keyid:08:57:6E:BE:08:55:79:A6:15:38:17:3A:7D:B5:02:AD:54:87:6C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/08576EBE085579A61538173A7DB502AD54876CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08576EBE085579A61538173A7DB502AD54876CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:d5:a1:ec:b9:4b:0f:03:a0:15:4a:0d:26:fd:42:57:fc:
         11:2c:c5:20:4e:46:7e:d5:1a:ba:ed:31:88:ad:73:6a:84:b5:
         26:38:91:02:df:5f:7f:73:7b:1f:bf:72:a1:0c:d3:c0:ad:07:
         76:88:d1:8e:74:95:f8:c3:70:25:39:80:e5:de:65:33:9d:7b:
         4d:77:1f:00:0e:83:4e:06:8d:c1:02:24:33:1b:94:05:c7:5a:
         82:91:02:da:53:d2:7f:ff:f0:bc:59:f5:8c:79:0a:a7:ad:da:
         a9:38:4f:e0:28:64:ad:d7:59:58:61:8b:84:a1:c0:9f:34:c8:
         28:ad:99:ad:35:a1:48:af:09:c4:f3:1a:4c:6c:9d:26:b2:fc:
         86:a3:1d:2e:b9:44:01:83:c2:7b:77:e9:b2:72:ce:3e:f1:01:
         c6:4d:d6:b2:98:e7:e7:fc:38:53:dd:c3:93:76:91:28:93:ed:
         b9:8a:28:cb:62:f9:ea:b3:20:49:98:f7:38:f2:65:74:ad:90:
         95:f3:21:26:3e:cd:a6:c0:65:fd:42:68:59:d1:32:17:c8:f2:
         40:14:6f:b7:14:5b:08:37:44:3f:42:6f:76:02:ba:d4:8a:4e:
         81:01:09:a2:1f:d6:c8:f6:3d:2f:14:5e:9e:e9:9c:12:08:87:
         01:1c:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----