This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3332203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32302d3332203d3e20323632383636.roa (raw, json)
Hash identifier:          Iq+dyQ3/cyCcI33q/r46f83mfakU0XpdISbUkNrzoPo=
Subject key identifier:   16:29:EE:38:EB:62:63:00:3E:C0:46:8D:77:6B:E5:58:F0:AB:F2:77
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       338127C3C74CA4C463CF1B20AEECE84E4E888814
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3332203d3e20323632383636.roa
Signing time:             Thu 27 Nov 2025 10:35:55 +0000
ROA not before:           Thu 27 Nov 2025 10:30:55 +0000
ROA not after:            Thu 26 Nov 2026 10:35:55 +0000
asID:                     262866
IP address blocks:        177.12.240.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:81:27:c3:c7:4c:a4:c4:63:cf:1b:20:ae:ec:e8:4e:4e:88:88:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Nov 27 10:30:55 2025 GMT
            Not After : Nov 26 10:35:55 2026 GMT
        Subject: CN=1629EE38EB6263003EC0468D776BE558F0ABF277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:76:ee:b5:5a:18:c6:97:94:30:21:92:e1:52:
                    57:4a:8f:2b:f6:aa:7b:c2:a8:00:14:d5:0b:5f:c1:
                    84:4d:07:b8:02:48:2d:b1:2a:4a:5b:fd:d5:42:8f:
                    ae:8a:00:c0:25:99:d7:f8:15:13:2e:4e:b7:61:b1:
                    2a:db:9a:ec:e3:e0:91:f9:e5:13:9a:73:22:3d:41:
                    81:c0:ac:1b:a2:72:87:46:fc:30:6e:2f:c1:fc:ff:
                    09:67:27:74:be:34:10:09:36:0d:91:ca:79:d5:d7:
                    b5:07:c3:ef:00:59:0d:55:85:88:7b:88:cc:1e:b0:
                    09:3c:9b:ca:dd:2e:72:15:22:14:2d:01:73:3a:2b:
                    67:09:a8:52:ff:0b:a2:d6:4d:6e:0d:bd:e8:1c:4d:
                    47:91:0d:b3:e1:ad:56:00:93:12:d4:7f:93:d4:61:
                    22:d2:34:72:b7:b0:c5:25:3f:2c:cc:74:26:54:02:
                    6d:ba:d8:76:c6:30:ba:d3:37:2f:5b:b2:e0:db:0b:
                    8f:80:f1:98:c7:a2:b4:0a:1b:f3:8f:ae:e9:46:06:
                    2c:70:44:40:88:67:da:e0:03:fd:c9:f6:fe:63:b0:
                    ba:c7:6a:f4:30:85:be:72:07:23:30:35:61:68:9c:
                    50:4f:4a:f3:7f:3a:6f:52:f9:29:cb:a8:4c:d1:90:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:EE:38:EB:62:63:00:3E:C0:46:8D:77:6B:E5:58:F0:AB:F2:77
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3332203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:8e:a0:f9:c3:91:48:86:37:78:aa:32:bf:14:ec:05:24:
         22:c8:83:8c:f0:b1:1d:2f:35:6f:1c:e2:8e:90:9e:2d:93:78:
         78:1c:a0:82:16:34:90:89:eb:bf:3c:b7:77:13:fe:2b:d7:dd:
         f5:6e:dd:3e:75:5b:31:f5:7e:a8:63:73:c5:87:c2:da:ae:8e:
         0d:36:0c:22:b0:35:97:80:9f:af:3b:7f:db:76:9b:51:39:e4:
         cc:35:5d:4e:68:15:be:18:f3:1a:b7:04:3b:ba:b8:11:c9:84:
         b0:65:eb:48:4e:f0:ed:52:65:e4:a0:7c:ec:a1:8a:8a:a1:7c:
         7c:61:04:1b:95:49:19:0e:49:15:39:95:17:d1:79:5d:21:25:
         9b:db:31:46:a1:03:31:fe:66:d0:2d:9a:98:3f:0e:d5:49:34:
         ca:cd:d8:6b:2f:47:27:ec:9e:62:b6:19:d9:ca:62:97:1e:a7:
         6d:b6:ea:bd:a8:7b:41:5d:08:66:77:b0:8e:03:6c:08:a9:0f:
         c8:60:6c:d9:d0:a2:31:2d:6f:61:6a:40:1a:fc:23:2f:b5:e4:
         5f:8e:85:65:0d:e5:b3:78:88:0a:c4:84:0c:ff:fa:2c:c7:23:
         43:ff:b0:21:fd:98:13:54:8a:d5:99:bd:95:1b:46:52:0f:0f:
         47:58:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----