This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa
File:                     3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          fFCTTZs7sHMZSvpTpMMyR2nHmCSYD6O0xECalJF3JWA=
Subject key identifier:   63:67:97:18:BE:B8:A3:0B:C9:77:4A:9D:66:40:56:7E:0F:8A:B9:B3
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       366B09C348BB8F3CB01271A1FF131295381CE56E
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:38 +0000
ROA not before:           Fri 25 Apr 2025 14:45:38 +0000
ROA not after:            Fri 24 Apr 2026 14:50:38 +0000
asID:                     52721
IP address blocks:        138.185.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6b:09:c3:48:bb:8f:3c:b0:12:71:a1:ff:13:12:95:38:1c:e5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:38 2025 GMT
            Not After : Apr 24 14:50:38 2026 GMT
        Subject: CN=63679718BEB8A30BC9774A9D6640567E0F8AB9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:f2:ef:87:b4:39:aa:b5:45:e7:f2:18:d7:
                    28:40:2c:17:6e:76:3d:78:50:34:3e:7a:db:c7:85:
                    f8:3b:a8:38:d1:8a:0a:6a:7c:2a:66:c0:09:cf:5d:
                    98:de:6c:ae:06:ef:86:01:54:c8:50:c2:fe:07:f9:
                    01:7d:3d:e6:1c:cd:be:2c:02:8e:3a:b9:6c:18:5d:
                    70:eb:a9:7f:b0:06:b5:db:0b:06:20:18:e7:d7:7c:
                    05:90:29:c5:38:31:cd:1e:ff:a7:58:29:5b:ce:b1:
                    43:ee:37:cd:31:8a:48:6e:eb:d1:d3:59:a5:fd:11:
                    c3:60:a1:86:9b:f5:4e:a1:24:28:04:9c:ee:fe:8b:
                    94:3a:87:95:29:52:7f:df:9b:01:3a:57:31:ba:4d:
                    77:ad:ee:08:32:4e:3c:6b:91:bb:a8:42:91:e2:f8:
                    56:cf:24:76:51:94:20:e1:3b:2a:83:c9:2e:7e:96:
                    d5:7b:6b:03:57:10:6a:d1:23:6c:b2:d9:34:83:4f:
                    f8:43:d9:50:b8:d0:dc:e4:56:6b:c5:16:b6:a0:32:
                    7a:03:e1:c6:01:25:5e:8b:0d:e1:80:0d:3d:55:3e:
                    ee:10:9d:93:cb:40:92:4e:99:09:79:91:5f:58:b4:
                    03:6e:5d:78:24:8d:24:3a:1d:59:91:d3:44:b4:d3:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:97:18:BE:B8:A3:0B:C9:77:4A:9D:66:40:56:7E:0F:8A:B9:B3
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:ac:26:b8:dc:af:c3:f1:77:bf:7d:5b:f0:f5:f6:bf:46:
         a7:89:05:b3:f0:b4:db:8f:93:16:c5:38:b8:07:4b:3b:46:39:
         22:e3:20:0b:bc:7d:70:0f:89:fa:17:e4:63:0c:d1:07:4b:e6:
         21:e7:c3:b7:2d:ee:1e:bb:4f:77:3f:20:ce:24:da:d9:81:8f:
         40:a6:94:6f:63:a7:fd:d7:37:0d:94:b1:54:3f:10:4f:1b:aa:
         d0:fb:81:38:5b:ca:fe:74:d1:81:fe:46:48:17:c9:ac:9e:ce:
         3d:71:9d:72:0e:7c:f9:3d:96:1b:08:c3:e5:b2:2c:11:ba:dd:
         5f:e9:90:c7:ce:71:9c:bf:cd:76:eb:94:48:0e:6c:2f:96:2c:
         50:c2:d6:76:01:b4:cc:f2:ed:d4:36:7d:96:7f:33:bf:81:5c:
         7f:88:53:41:ec:bf:99:c8:d7:ed:c4:24:24:38:aa:5b:26:25:
         63:73:bd:24:85:e4:39:16:0d:7f:99:61:45:ba:f1:80:9b:10:
         f4:ac:55:49:83:53:72:e4:ae:b4:a7:ed:97:f4:55:c8:d7:e8:
         ed:06:f8:c8:c9:1a:56:90:5f:d8:83:c7:26:8c:73:fd:47:75:
         b7:ad:41:fb:e8:4c:b4:95:74:c9:c1:dd:79:fa:94:36:6d:a3:
         5a:42:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----