This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/3134332e3133372e3230302e302f32322d3332203d3e20323634303433.roa
File:                     3134332e3133372e3230302e302f32322d3332203d3e20323634303433.roa (raw, json)
Hash identifier:          jJkpBMPzykQw11LpabGQ2kABmwNh89EuJ2MrvV9SQdo=
Subject key identifier:   E4:52:C1:CE:6E:17:63:6E:4B:C9:EC:16:EC:E0:9E:25:D1:D0:B5:E0
Certificate issuer:       /CN=9FC891638522D1DF8FFBB3CB155F0717F8A0091F
Certificate serial:       03130749C5BCDA9C7DA9C7A25B9872845C6A0D31
Authority key identifier: 9F:C8:91:63:85:22:D1:DF:8F:FB:B3:CB:15:5F:07:17:F8:A0:09:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC891638522D1DF8FFBB3CB155F0717F8A0091F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/3134332e3133372e3230302e302f32322d3332203d3e20323634303433.roa
Signing time:             Mon 03 Mar 2025 18:21:15 +0000
ROA not before:           Mon 03 Mar 2025 18:16:15 +0000
ROA not after:            Mon 02 Mar 2026 18:21:15 +0000
asID:                     264043
IP address blocks:        143.137.200.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:13:07:49:c5:bc:da:9c:7d:a9:c7:a2:5b:98:72:84:5c:6a:0d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC891638522D1DF8FFBB3CB155F0717F8A0091F
        Validity
            Not Before: Mar  3 18:16:15 2025 GMT
            Not After : Mar  2 18:21:15 2026 GMT
        Subject: CN=E452C1CE6E17636E4BC9EC16ECE09E25D1D0B5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:56:cb:a5:e7:6f:8a:70:00:dc:d5:85:8b:
                    61:6f:d1:7b:d1:d7:f8:fb:75:3e:50:db:8e:72:d9:
                    b4:82:40:3b:34:b2:f6:b8:46:bc:b5:9e:e6:95:12:
                    64:09:30:c2:20:8f:69:af:b4:c0:15:78:21:9d:bc:
                    2f:e2:42:ab:14:9a:97:c5:eb:cf:82:1c:b9:c8:33:
                    65:de:16:7f:f5:e0:d5:bd:d6:8d:27:45:0b:47:a7:
                    7d:88:7b:8e:22:1d:2c:cd:f9:d9:42:10:9e:8b:28:
                    cf:a1:70:15:60:21:80:94:71:cf:51:58:ac:19:6c:
                    d6:5e:fb:35:cf:c2:08:f8:10:ab:75:3c:f1:08:0e:
                    3d:6d:ad:ed:e0:b1:cf:b3:54:db:6e:56:05:1f:81:
                    5e:19:0c:fc:46:36:ab:aa:d0:c0:de:aa:af:5a:08:
                    a0:9f:49:64:e1:43:75:01:ec:48:68:d9:c9:c8:44:
                    a5:1e:14:44:42:0d:fc:4f:a9:42:bb:a0:7d:94:87:
                    d4:10:12:e2:ac:6c:47:9a:6e:b4:3b:68:8f:dd:49:
                    c6:77:11:b0:cb:ef:78:54:18:75:f3:dc:43:d0:4a:
                    d5:53:da:be:77:3f:a4:af:1a:ea:7a:34:e3:b3:2f:
                    92:e3:ea:31:65:59:f3:6f:b4:e4:a5:3d:8a:4a:cc:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:C1:CE:6E:17:63:6E:4B:C9:EC:16:EC:E0:9E:25:D1:D0:B5:E0
            X509v3 Authority Key Identifier:
                keyid:9F:C8:91:63:85:22:D1:DF:8F:FB:B3:CB:15:5F:07:17:F8:A0:09:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/9FC891638522D1DF8FFBB3CB155F0717F8A0091F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC891638522D1DF8FFBB3CB155F0717F8A0091F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/3134332e3133372e3230302e302f32322d3332203d3e20323634303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:fd:26:dd:f0:34:26:5a:22:bb:60:7f:df:9c:19:1e:b9:
         7a:21:5a:37:b7:dd:0e:5e:5f:09:ce:42:17:58:7c:31:dc:3f:
         d7:64:f2:e7:1e:46:4e:29:74:e4:a9:7b:fd:f4:3d:5b:cd:83:
         aa:25:f7:a7:40:df:ee:9b:d6:ff:2f:49:a7:d7:58:be:9c:12:
         c2:01:60:09:66:79:59:7c:75:3f:f0:7b:da:c3:74:91:59:2c:
         80:77:5f:7e:44:4b:cd:cb:66:30:c2:77:d5:b7:8e:8e:85:fb:
         44:b6:4a:f9:e8:73:67:2e:ca:3c:13:3d:95:1e:d4:6e:8c:aa:
         c5:7b:68:40:ba:44:7d:ca:7b:16:12:48:3d:57:c0:04:42:36:
         0e:21:99:2b:fd:a3:f5:45:b0:3a:34:ae:4c:a3:07:9a:71:dc:
         16:1d:ba:bc:32:38:3f:b2:ba:1f:08:66:af:93:91:90:aa:bc:
         27:45:9f:cb:38:28:cb:ff:fb:d7:b7:61:ad:e8:db:5e:68:4b:
         13:7c:ae:12:d4:f4:61:88:cf:99:de:81:bf:14:f3:54:4c:08:
         41:db:82:f8:ba:b0:35:19:04:d9:52:0f:7b:0f:33:f1:41:d1:
         31:39:2c:67:8c:09:69:74:1c:ed:ad:4c:c4:92:d9:b5:8b:0d:
         59:86:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----