This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e352e302f32342d3234203d3e20323730383936.roa
File:                     3133312e3130302e352e302f32342d3234203d3e20323730383936.roa (raw, json)
Hash identifier:          FEFpnjkZXruWFK4QrQ+uT9IJeyn7iTg2ysJ7VHdqAAI=
Subject key identifier:   5A:F0:C9:D9:D6:55:EB:32:2F:26:96:14:A3:4C:A4:7E:DC:1C:AA:2C
Certificate issuer:       /CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
Certificate serial:       5A7D2266903F2F224CB4E09A6BCE568DB3A3AEE3
Authority key identifier: 16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e352e302f32342d3234203d3e20323730383936.roa
Signing time:             Wed 16 Apr 2025 12:18:33 +0000
ROA not before:           Wed 16 Apr 2025 12:13:33 +0000
ROA not after:            Wed 15 Apr 2026 12:18:33 +0000
asID:                     270896
IP address blocks:        131.100.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7d:22:66:90:3f:2f:22:4c:b4:e0:9a:6b:ce:56:8d:b3:a3:ae:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
        Validity
            Not Before: Apr 16 12:13:33 2025 GMT
            Not After : Apr 15 12:18:33 2026 GMT
        Subject: CN=5AF0C9D9D655EB322F269614A34CA47EDC1CAA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:f2:78:5b:cd:69:97:76:0f:ea:a3:74:b0:
                    d5:45:04:92:b0:9a:0a:8b:cb:cb:3a:7d:a4:36:55:
                    10:a3:04:ab:eb:55:2c:da:65:ec:8f:fc:19:7c:a8:
                    56:73:d0:e2:9e:b7:6e:98:1a:f1:ae:34:ea:06:5b:
                    80:76:5d:9a:12:1a:47:b5:9f:7d:89:04:49:55:e5:
                    6b:01:72:19:78:20:78:ce:b1:9d:65:8c:af:ef:0d:
                    5a:c3:4b:1e:f2:09:f2:75:9d:98:2e:c7:fa:03:1b:
                    1d:2b:df:4a:a6:7e:f4:54:34:af:0d:cb:ca:ce:ae:
                    db:79:e9:6a:aa:b8:1c:92:9d:f5:29:af:35:8e:22:
                    d9:8c:45:95:67:6b:94:bb:0e:c2:33:fd:08:9e:b4:
                    8d:2c:27:02:96:a2:7d:dd:bc:d7:ca:1a:d7:b1:ec:
                    fe:f2:7a:f7:4f:31:57:b2:80:81:b5:1b:86:3e:04:
                    4c:80:48:42:52:f8:c0:97:4b:64:7a:f0:1d:f3:30:
                    b7:ce:4d:fe:d5:3a:63:79:59:e0:00:b9:d8:24:88:
                    7f:7e:34:ee:62:3d:01:45:b4:cb:44:b9:5d:87:aa:
                    9a:32:7d:fe:51:09:31:ef:6c:3d:11:16:6a:8b:34:
                    15:64:13:88:b9:c5:98:b1:84:b1:9b:e6:84:7d:5c:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:C9:D9:D6:55:EB:32:2F:26:96:14:A3:4C:A4:7E:DC:1C:AA:2C
            X509v3 Authority Key Identifier:
                keyid:16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e352e302f32342d3234203d3e20323730383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:33:4f:39:c8:2a:47:69:07:c0:20:89:83:14:ab:c4:9b:5e:
         e7:28:cb:29:47:72:e8:84:e9:74:04:82:34:cc:61:4d:e3:4e:
         b6:94:3c:dd:80:17:a9:dd:ff:33:c5:00:89:e0:67:ee:60:cb:
         57:ff:7e:cb:88:00:aa:2b:55:22:f2:2e:8c:80:28:14:88:63:
         3a:db:c5:30:66:56:7e:37:c5:71:81:b2:46:0d:08:6e:d4:4d:
         0b:c8:30:12:59:3d:35:5d:4c:13:72:d0:f8:b5:0e:00:d3:08:
         26:62:9c:9e:6a:44:66:77:52:99:1d:cc:73:c6:8f:11:9c:d8:
         0d:38:17:83:b0:9d:a7:9d:52:2e:3a:49:34:93:2d:65:4b:07:
         fe:bb:3a:b9:69:f7:09:d7:fd:ad:85:0c:f9:74:a6:9e:ce:6e:
         9f:b3:6e:d2:2a:fa:f0:b1:99:38:63:c3:fd:47:14:dc:ab:c9:
         69:99:85:6e:35:3f:b7:f0:0e:7a:17:e4:b4:2e:f7:6c:68:69:
         00:11:7e:03:9b:7b:57:18:a6:4c:1b:b6:7e:2e:1a:71:bc:72:
         96:f2:8b:f1:de:29:d5:06:5d:8a:3c:61:d2:3d:5b:c2:d3:b1:
         a1:ea:ca:e0:b6:c1:f2:a0:9c:87:06:3a:a6:c9:71:dc:04:fd:
         de:ce:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----