This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa
File:                     3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa (raw, json)
Hash identifier:          dBBSz76AOKVeQUf0bYqxu/4SHu/O5ZdO+oYSiBXFTmM=
Subject key identifier:   E0:62:24:FF:FD:9E:E7:D2:45:BF:0E:98:18:0C:D2:C8:53:99:33:22
Certificate issuer:       /CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
Certificate serial:       46E5BCDFC12F4DF9F5FF3D88FD35E17AAD6BEEB6
Authority key identifier: FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa
Signing time:             Tue 01 Jul 2025 12:27:20 +0000
ROA not before:           Tue 01 Jul 2025 12:22:20 +0000
ROA not after:            Tue 30 Jun 2026 12:27:20 +0000
asID:                     270758
IP address blocks:        200.39.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e5:bc:df:c1:2f:4d:f9:f5:ff:3d:88:fd:35:e1:7a:ad:6b:ee:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
        Validity
            Not Before: Jul  1 12:22:20 2025 GMT
            Not After : Jun 30 12:27:20 2026 GMT
        Subject: CN=E06224FFFD9EE7D245BF0E98180CD2C853993322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:4a:ed:6c:05:d5:52:4f:a0:ab:3e:a7:9d:
                    81:be:ab:a9:b8:fd:6e:50:d8:fe:29:74:9a:ec:06:
                    18:9d:03:e0:48:6c:9f:28:07:a3:9b:4e:c8:b9:10:
                    f3:be:e7:05:97:8e:9e:00:ec:df:01:96:79:56:a5:
                    e8:e9:11:94:70:2c:c6:af:54:5b:35:47:25:f4:d3:
                    f3:ed:8d:62:da:03:d8:6e:c5:89:36:08:9c:02:0a:
                    70:b9:66:2a:4e:ed:1a:ad:11:15:22:25:e0:97:2c:
                    85:95:c1:3e:9f:55:ec:c4:1c:28:eb:04:87:bf:73:
                    0e:89:24:78:59:0b:cf:19:14:37:1c:f1:54:cc:a3:
                    18:9b:85:37:fe:6d:55:3c:a6:4f:3b:72:68:ac:d7:
                    0e:03:2b:98:3f:b9:32:3e:5d:4d:f1:cc:d2:76:d1:
                    c7:e1:8d:95:c4:ae:0d:08:51:dc:3e:f8:4c:2b:18:
                    9b:74:ce:35:c8:ee:27:2c:ba:c4:be:a6:e4:7a:70:
                    0f:2a:d5:71:48:94:92:2e:28:92:e5:96:97:96:51:
                    4b:52:b0:1f:f1:c9:fa:fd:c6:cc:fc:0d:4e:82:9f:
                    40:00:f1:57:63:c8:26:76:96:96:c9:ce:34:99:d6:
                    0f:a7:b8:17:76:e2:dd:6c:8a:89:10:6a:fc:c6:f3:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:62:24:FF:FD:9E:E7:D2:45:BF:0E:98:18:0C:D2:C8:53:99:33:22
            X509v3 Authority Key Identifier:
                keyid:FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:d5:81:84:3b:2b:8b:16:93:c3:34:a8:6c:e5:a6:f2:30:
         94:c5:1c:1c:83:cd:70:4c:0c:cb:0b:50:93:bc:41:cc:8e:59:
         5f:9a:8b:02:33:92:c0:4f:24:bc:2f:d2:4a:8c:35:dc:0b:f3:
         00:d3:76:a4:0c:97:6c:f3:e9:51:41:7d:86:42:87:30:c8:c2:
         d2:cb:84:29:a6:f6:6f:8d:7d:58:bf:cb:5d:93:de:f1:90:28:
         8a:39:e6:69:cc:b2:7f:82:3f:a4:aa:d7:1a:28:66:ce:40:02:
         c3:d1:ef:1d:9c:ef:39:28:f9:d9:37:90:da:06:ed:d3:8b:39:
         22:2a:8d:d1:ea:cb:ec:64:d4:8e:da:ed:e8:3e:df:01:3c:76:
         4f:2c:9a:05:80:be:f1:6c:16:de:43:19:9d:1a:67:0c:6b:53:
         0f:4d:e5:7f:33:a5:96:e7:fe:39:5c:aa:ab:36:36:93:b0:7b:
         ad:7b:7e:1a:d5:6c:0d:b0:51:a6:4b:50:c7:92:bb:b4:5c:4f:
         e0:d8:c4:80:1e:54:ae:4c:77:db:c5:19:f5:cb:08:e8:a1:89:
         7f:ce:0b:b2:a6:d0:5f:ad:35:fb:dc:df:a6:0f:69:68:f7:6f:
         e0:13:50:38:8c:fc:f1:d1:3b:d0:e4:60:eb:57:07:5d:e8:0c:
         51:bf:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----