This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32342d3234203d3e20323634353434.roa
File:                     3133382e302e3131322e302f32342d3234203d3e20323634353434.roa (raw, json)
Hash identifier:          FriyvMuM2Bn8ExDDkWWQoFeDMO0TuUK6ItfCsloK8xo=
Subject key identifier:   31:6C:60:26:42:8D:10:E9:76:C7:86:7D:61:8D:A8:FE:27:B8:56:77
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       3AF12E9DCDFAC3E0D22833E297E8C8547179C19F
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32342d3234203d3e20323634353434.roa
Signing time:             Mon 22 Sep 2025 21:37:32 +0000
ROA not before:           Mon 22 Sep 2025 21:32:32 +0000
ROA not after:            Mon 21 Sep 2026 21:37:32 +0000
asID:                     264544
IP address blocks:        138.0.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f1:2e:9d:cd:fa:c3:e0:d2:28:33:e2:97:e8:c8:54:71:79:c1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Sep 22 21:32:32 2025 GMT
            Not After : Sep 21 21:37:32 2026 GMT
        Subject: CN=316C6026428D10E976C7867D618DA8FE27B85677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:e3:92:13:48:b5:33:83:49:8c:d5:53:d5:
                    08:f1:bc:6d:ef:84:9c:97:6c:0b:76:8c:54:2f:e2:
                    c0:b2:43:dc:38:bf:42:28:06:29:15:9e:e8:17:44:
                    9c:97:52:de:5e:a8:cb:b3:8c:68:0b:90:4c:09:99:
                    93:26:f9:32:8c:0f:e8:23:f5:a5:9b:c9:e8:54:01:
                    92:5c:6b:ed:a1:9c:b4:b0:9a:4a:a8:fd:ef:c3:11:
                    88:35:b0:36:7f:2b:2c:19:07:5f:6e:ac:5e:7a:46:
                    58:9b:4a:30:8f:d3:d0:0d:3d:25:47:54:ef:fc:a3:
                    ed:38:11:10:35:be:06:6c:66:46:a1:b0:80:e6:fc:
                    bb:5f:f2:ea:8e:78:23:d5:ed:b5:8a:38:98:ae:14:
                    63:08:50:95:91:f8:0d:b0:d1:90:17:e8:07:22:fe:
                    84:13:2e:a0:30:99:ff:14:18:a0:2b:e5:22:78:2f:
                    7b:03:54:e6:f9:04:ee:8e:b6:7c:ea:56:d3:c3:ef:
                    75:cd:a9:a5:6c:f9:07:7a:e6:b3:55:65:58:aa:a8:
                    db:5d:d6:06:51:a3:04:7c:9c:e5:3e:0a:de:94:ca:
                    e6:c6:99:49:5d:f8:a6:ad:c4:45:ce:01:d8:99:22:
                    06:d1:96:66:5f:a2:66:1e:32:51:36:8a:54:d3:c3:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6C:60:26:42:8D:10:E9:76:C7:86:7D:61:8D:A8:FE:27:B8:56:77
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32342d3234203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f8:2d:af:68:e1:cf:e2:01:08:4e:ed:fa:b2:60:65:29:fd:
         0e:67:95:76:14:d9:d5:0f:f7:1a:fb:21:aa:ea:90:98:a5:59:
         62:a2:e2:14:15:f1:1f:00:38:0d:d2:57:a3:99:9b:14:ba:0b:
         4c:d5:15:88:9b:4b:75:64:20:56:a2:9d:33:8f:03:2c:5c:c6:
         3a:c8:63:67:8b:11:ad:0a:21:c8:f0:26:b7:70:c3:e7:fd:32:
         a2:03:82:d3:3c:f0:fb:33:1d:35:48:d9:6f:b5:9f:d6:6e:55:
         a7:65:f8:25:d4:49:08:6b:b1:1b:09:8e:61:98:8c:33:b3:74:
         a0:53:b5:cd:f3:97:f8:aa:c8:6b:ea:93:e3:33:36:ab:9a:b7:
         c3:42:25:35:61:73:8a:3f:50:75:a9:c2:ad:71:74:f9:a8:f2:
         75:f1:c9:bc:89:7d:2c:f3:08:23:98:e8:8b:3a:6a:1c:35:a2:
         0c:0b:b5:b6:ee:95:35:21:66:d0:0c:23:17:c0:4b:ea:2b:d5:
         d2:0c:f4:b4:2c:55:03:eb:d0:cc:39:9f:bb:e0:2e:9d:f4:21:
         60:f0:43:f9:90:35:d1:16:fe:39:18:f3:c3:65:d6:a2:39:9b:
         34:04:cc:dc:84:0f:13:f7:94:58:2d:2c:b7:76:0f:38:de:37:
         17:f2:0f:49
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOvEunc36w+DSKDPil+jIVHF5wZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE3QzMyNTdGQTE5NjNDRUI3Q0UxNEU5NTk5RENFOTJF
NzM2NjJGOTAeFw0yNTA5MjIyMTMyMzJaFw0yNjA5MjEyMTM3MzJaMDMxMTAvBgNV
BAMTKDMxNkM2MDI2NDI4RDEwRTk3NkM3ODY3RDYxOERBOEZFMjdCODU2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLeOSE0i1M4NJjNVT1QjxvG3v
hJyXbAt2jFQv4sCyQ9w4v0IoBikVnugXRJyXUt5eqMuzjGgLkEwJmZMm+TKMD+gj
9aWbyehUAZJca+2hnLSwmkqo/e/DEYg1sDZ/KywZB19urF56RlibSjCP09ANPSVH
VO/8o+04ERA1vgZsZkahsIDm/Ltf8uqOeCPV7bWKOJiuFGMIUJWR+A2w0ZAX6Aci
/oQTLqAwmf8UGKAr5SJ4L3sDVOb5BO6OtnzqVtPD73XNqaVs+Qd65rNVZViqqNtd
1gZRowR8nOU+Ct6UyubGmUld+KatxEXOAdiZIgbRlmZfomYeMlE2ilTTww5tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMWxgJkKNEOl2x4Z9YY2o/ie4VncwHwYDVR0j
BBgwFoAUCnwyV/oZY863zhTpWZ3Okuc2YvkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY
OWIvMi8wQTdDMzI1N0ZBMTk2M0NFQjdDRTE0RTk1OTlEQ0U5MkU3MzY2MkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBN0MzMjU3RkExOTYzQ0VC
N0NFMTRFOTU5OURDRTkyRTczNjYyRjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NhcWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzIv
MzEzMzM4MmUzMDJlMzEzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAigBwMA0GCSqGSIb3DQEBCwUAA4IBAQAs+C2vaOHP
4gEITu36smBlKf0OZ5V2FNnVD/ca+yGq6pCYpVliouIUFfEfADgN0lejmZsUugtM
1RWIm0t1ZCBWop0zjwMsXMY6yGNnixGtCiHI8Ca3cMPn/TKiA4LTPPD7Mx01SNlv
tZ/WblWnZfgl1EkIa7EbCY5hmIwzs3SgU7XN85f4qshr6pPjMzarmrfDQiU1YXOK
P1B1qcKtcXT5qPJ18cm8iX0s8wgjmOiLOmocNaIMC7W27pU1IWbQDCMXwEvqK9XS
DPS0LFUD69DMOZ+74C6d9CFg8EP5kDXRFv45GPPDZdaiOZs0BMzchA8T95RYLSy3
dg843jcX8g9J
-----END CERTIFICATE-----