This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39392e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          WkPpd6tAAyZXZGDsI44335FlgsBzZQga/rt3Jj2MKh4=
Subject key identifier:   CB:B8:7F:6B:C3:79:25:11:E2:A5:73:3B:DA:7E:87:CF:D0:2A:90:7C
Certificate issuer:       /CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
Certificate serial:       54C4155014D7243CAF4AF24D40FFDB80ED311B37
Authority key identifier: 23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 08 Sep 2025 20:26:09 +0000
ROA not before:           Mon 08 Sep 2025 20:21:09 +0000
ROA not after:            Mon 07 Sep 2026 20:26:09 +0000
asID:                     264137
IP address blocks:        138.97.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c4:15:50:14:d7:24:3c:af:4a:f2:4d:40:ff:db:80:ed:31:1b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
        Validity
            Not Before: Sep  8 20:21:09 2025 GMT
            Not After : Sep  7 20:26:09 2026 GMT
        Subject: CN=CBB87F6BC3792511E2A5733BDA7E87CFD02A907C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:2d:15:e2:49:89:0c:03:03:28:0c:55:e0:
                    97:a7:00:33:65:37:7c:5f:20:2a:b8:f4:1e:fb:b6:
                    ba:a2:c1:6e:89:3e:cb:4e:53:41:8c:01:84:a8:5a:
                    4d:23:c2:ff:4a:59:ed:03:e4:fd:39:46:bf:2c:9f:
                    8a:3b:10:e2:b9:bb:29:02:49:4e:ed:b6:af:9a:52:
                    fd:56:26:b8:14:39:d0:fd:ca:b2:31:22:7b:fd:56:
                    92:ed:79:6e:d2:2a:30:b1:d9:ac:36:81:4e:f0:35:
                    13:66:e5:9a:16:f9:62:70:e2:fd:27:10:88:63:6a:
                    43:b5:ba:e9:ed:2d:63:b6:9a:93:d9:26:7e:43:70:
                    6b:59:34:30:9d:11:a7:d2:02:52:f9:48:4a:15:33:
                    90:9f:10:59:62:ee:bd:53:7c:21:3a:5d:86:ac:ea:
                    37:22:a9:d5:b5:c9:76:c5:c5:c7:49:f1:db:61:ab:
                    df:59:1c:e3:44:f4:b7:a5:3b:84:f1:dd:2e:12:db:
                    aa:b2:0c:48:26:43:76:bc:4c:92:d0:7e:d1:6b:13:
                    20:99:20:9f:c3:74:6f:41:2d:e9:4f:b1:53:74:2c:
                    2c:de:c9:00:a9:ee:f2:21:0d:b1:cd:0e:74:4a:23:
                    c5:04:3c:8f:01:af:e9:5a:ca:40:10:1d:7d:9a:72:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:7F:6B:C3:79:25:11:E2:A5:73:3B:DA:7E:87:CF:D0:2A:90:7C
            X509v3 Authority Key Identifier:
                keyid:23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:72:7d:86:47:e3:39:f0:b8:86:07:d7:ed:b9:15:4e:bc:7a:
         71:49:33:3c:05:f8:62:6e:20:20:db:10:1a:26:30:88:e5:20:
         22:f2:1a:d3:fe:79:12:19:8f:02:5e:d2:e9:12:92:f5:8c:79:
         cf:36:77:23:d3:64:f0:57:47:98:27:3f:fc:44:65:ce:e2:64:
         01:c7:36:4a:74:8c:1d:92:53:dd:93:4a:7f:3b:87:0d:eb:59:
         e8:53:12:12:41:45:27:f7:ca:30:24:91:f1:fd:06:cb:01:d9:
         b0:6a:f1:9b:2d:1e:11:cc:46:d9:ef:d1:25:d4:8b:f4:b9:81:
         43:51:d7:14:79:72:59:bd:0f:d8:22:37:39:28:57:28:e1:29:
         2f:24:38:d0:b1:0e:a5:25:61:70:bd:f1:1d:6b:b0:dd:0a:61:
         4c:3a:d5:05:21:18:36:71:cb:4e:c6:53:ba:2e:49:da:0e:16:
         a1:58:09:97:df:6b:d8:2f:f7:e7:ce:74:ae:af:a6:ea:31:3b:
         a6:dd:39:ba:73:fc:bd:4c:67:d5:81:42:a4:a8:fa:3f:38:5c:
         46:e3:bf:0b:48:c2:4a:ec:d7:4d:55:10:df:4a:1d:69:06:40:
         73:a0:74:3b:0d:38:21:95:5d:c5:e9:bc:cb:1a:4a:b4:60:36:
         16:62:0c:bc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVMQVUBTXJDyvSvJNQP/bgO0xGzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM5QzI4M0FFOTVCRjc3NzA3REVENjBBMzVFRjAyREZB
MkFFMTkzMDAeFw0yNTA5MDgyMDIxMDlaFw0yNjA5MDcyMDI2MDlaMDMxMTAvBgNV
BAMTKENCQjg3RjZCQzM3OTI1MTFFMkE1NzMzQkRBN0U4N0NGRDAyQTkwN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7C0V4kmJDAMDKAxV4JenADNl
N3xfICq49B77trqiwW6JPstOU0GMAYSoWk0jwv9KWe0D5P05Rr8sn4o7EOK5uykC
SU7ttq+aUv1WJrgUOdD9yrIxInv9VpLteW7SKjCx2aw2gU7wNRNm5ZoW+WJw4v0n
EIhjakO1uuntLWO2mpPZJn5DcGtZNDCdEafSAlL5SEoVM5CfEFli7r1TfCE6XYas
6jciqdW1yXbFxcdJ8dthq99ZHONE9LelO4Tx3S4S26qyDEgmQ3a8TJLQftFrEyCZ
IJ/DdG9BLelPsVN0LCzeyQCp7vIhDbHNDnRKI8UEPI8Br+laykAQHX2acs9JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy7h/a8N5JRHipXM72n6Hz9AqkHwwHwYDVR0j
BBgwFoAUI5woOulb93cH3tYKNe8C36KuGTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE5RdVhBWFcxN3hSODQxdjlCYzVRbTVGZTZYRkNwQ3hjblllc3FhRm10
WXQvMC8yMzlDMjgzQUU5NUJGNzc3MDdERUQ2MEEzNUVGMDJERkEyQUUxOTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzOUMyODNBRTk1QkY3Nzcw
N0RFRDYwQTM1RUYwMkRGQTJBRTE5MzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROUXVYQVhXMTd4Ujg0MXY5QmM1UW01RmU2WEZDcEN4Y25ZZXNxYUZtdFl0LzAv
MzEzMzM4MmUzOTM3MmUzOTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAimFjMA0GCSqGSIb3DQEBCwUAA4IBAQAjcn2GR+M5
8LiGB9ftuRVOvHpxSTM8BfhibiAg2xAaJjCI5SAi8hrT/nkSGY8CXtLpEpL1jHnP
Nncj02TwV0eYJz/8RGXO4mQBxzZKdIwdklPdk0p/O4cN61noUxISQUUn98owJJHx
/QbLAdmwavGbLR4RzEbZ79El1Iv0uYFDUdcUeXJZvQ/YIjc5KFco4SkvJDjQsQ6l
JWFwvfEda7DdCmFMOtUFIRg2cctOxlO6LknaDhahWAmX32vYL/fnznSur6bqMTum
3Tm6c/y9TGfVgUKkqPo/OFxG478LSMJK7NdNVRDfSh1pBkBzoHQ7DTghlV3F6bzL
Gkq0YDYWYgy8
-----END CERTIFICATE-----
Generated at Tue Dec 16 23:02:10 2025 by rpki-client