This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131332e302f32342d3234203d3e20323634353434.roa
File:                     3133382e302e3131332e302f32342d3234203d3e20323634353434.roa (raw, json)
Hash identifier:          OAmXF31zLO06yKNszL07VO/Wb1+gmN/BDQ88ZztC1wE=
Subject key identifier:   AF:62:F9:50:7E:DB:CB:33:5D:0E:81:91:7D:3B:35:89:80:D8:1F:03
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       4F3F78221A289EACB4EC762B04BBA8122D14AE72
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131332e302f32342d3234203d3e20323634353434.roa
Signing time:             Mon 22 Sep 2025 21:37:45 +0000
ROA not before:           Mon 22 Sep 2025 21:32:45 +0000
ROA not after:            Mon 21 Sep 2026 21:37:45 +0000
asID:                     264544
IP address blocks:        138.0.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3f:78:22:1a:28:9e:ac:b4:ec:76:2b:04:bb:a8:12:2d:14:ae:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Sep 22 21:32:45 2025 GMT
            Not After : Sep 21 21:37:45 2026 GMT
        Subject: CN=AF62F9507EDBCB335D0E81917D3B358980D81F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:f5:43:38:7d:81:1d:c0:6d:32:93:c7:61:
                    55:25:0b:b4:ba:84:ad:e5:02:53:00:c1:96:fe:2f:
                    8f:2a:6a:f6:d3:b9:21:69:ad:d5:5e:77:61:4b:ff:
                    3e:94:ee:cf:3a:cd:3e:34:8b:c6:0b:fb:30:49:0d:
                    be:18:d5:af:c3:ac:39:b8:93:62:c0:ea:f7:45:78:
                    68:14:a4:1f:95:d1:4f:50:a4:95:94:7f:15:53:a6:
                    6b:40:b1:0d:52:e5:67:ac:cc:8f:c2:86:fa:cd:1d:
                    7c:38:6e:1f:1b:a6:03:47:f6:83:a0:a5:56:0a:26:
                    a7:0a:3a:1b:c1:ac:27:99:9e:69:f0:47:8c:64:4b:
                    53:42:f1:ff:30:ef:82:ab:c8:08:2e:10:87:6b:cd:
                    34:bd:56:77:68:d6:8b:b3:6d:c1:6e:ba:4c:31:5c:
                    43:1b:09:d5:8d:d9:7a:a3:8d:26:12:3c:ac:3c:50:
                    a2:d5:b7:62:7c:58:7d:a0:50:ec:d0:b4:69:48:06:
                    60:e5:0d:c5:00:74:11:06:b4:05:80:4f:76:18:58:
                    96:c0:8a:50:c7:53:74:8a:78:00:71:64:63:4e:17:
                    10:3f:3d:a2:0f:21:6e:fc:18:07:f1:d9:ac:51:7a:
                    9a:92:44:d1:b1:97:09:92:76:b9:5a:52:bd:e1:96:
                    02:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:62:F9:50:7E:DB:CB:33:5D:0E:81:91:7D:3B:35:89:80:D8:1F:03
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131332e302f32342d3234203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d0:72:17:e5:d9:57:3f:f0:41:7f:df:31:67:ae:4f:db:f1:
         71:3b:96:27:4f:73:5f:55:df:15:2e:1a:44:3b:e3:b0:be:2b:
         fd:91:40:b9:53:1e:02:c4:72:96:a0:51:ca:27:b4:51:0b:46:
         3b:92:5a:bf:3d:cf:3f:a5:83:b2:b0:34:4a:52:c4:cd:e1:df:
         a7:f2:7b:60:10:9e:97:be:79:f6:5b:67:6a:a7:82:8d:8d:89:
         e1:e0:d5:f3:67:73:ef:ce:4d:82:7f:62:9b:17:c8:bb:e5:ea:
         66:78:16:60:c4:7f:d6:b7:8a:d9:1f:51:47:08:e9:80:98:c7:
         59:fd:6d:a2:ba:a6:b4:2e:d2:0e:3b:11:93:b5:97:51:23:20:
         90:be:a3:8f:1d:62:f1:34:98:bc:c1:47:c6:2f:02:62:bd:c5:
         64:c0:d2:00:b7:7d:a7:00:83:dc:39:15:ad:c7:a4:3a:5c:66:
         a8:21:c1:88:f5:d7:5d:22:62:c8:76:05:68:36:84:86:e9:3d:
         03:da:e1:28:1e:50:b5:42:d8:e9:73:5b:2e:69:e0:ea:3a:e3:
         21:e4:87:d1:b9:11:0f:75:a9:19:9e:51:18:f8:2f:51:94:0f:
         81:b7:16:0f:ed:60:2a:29:8b:dc:eb:e9:29:a7:d5:55:1c:0d:
         09:10:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----