This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa
File:                     3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier:          rKyrb6asNCIAqw1p7eQpRd/UThOBpOYNqpMytGRiuFc=
Subject key identifier:   1C:B4:0E:7F:10:A0:5F:A0:3D:CA:43:E7:E1:CD:29:45:8D:85:3A:88
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       547FA20BF2C485D300378352AF20F780C2E1632B
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:19 +0000
ROA not before:           Thu 06 Mar 2025 01:34:19 +0000
ROA not after:            Thu 05 Mar 2026 01:39:19 +0000
asID:                     28594
IP address blocks:        200.218.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7f:a2:0b:f2:c4:85:d3:00:37:83:52:af:20:f7:80:c2:e1:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:19 2025 GMT
            Not After : Mar  5 01:39:19 2026 GMT
        Subject: CN=1CB40E7F10A05FA03DCA43E7E1CD29458D853A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:0c:86:3a:a0:3c:83:07:87:86:ce:b2:f0:
                    a4:e7:fc:42:18:8b:1d:81:55:a0:ee:b2:1d:d9:58:
                    ba:c9:d6:d5:84:32:42:ec:e8:2c:4f:fa:92:db:60:
                    f1:d1:17:fd:a0:e4:25:3a:48:8a:ed:3c:21:40:5b:
                    34:e8:0c:b5:0d:9d:c1:39:3a:d7:a1:3d:f9:76:92:
                    cc:de:1b:11:ba:4d:f0:f2:18:e8:e4:eb:bd:bf:c5:
                    0e:05:ca:66:b0:4c:ce:77:ed:90:6c:1d:98:c6:79:
                    08:20:04:38:4a:02:16:40:b0:a8:5f:5e:18:7c:af:
                    5f:fd:65:29:0e:ba:1a:81:5c:5a:17:e3:ca:09:2d:
                    59:11:ee:07:8a:ca:86:60:b3:39:90:22:36:66:85:
                    46:a3:2b:c5:8a:45:73:ec:46:bd:56:34:84:2c:cf:
                    77:00:5e:fb:9b:6e:6d:95:39:8f:c0:45:00:b8:7c:
                    0a:22:b1:3b:03:67:05:b0:a1:19:62:29:50:5f:d0:
                    ed:72:2a:11:2b:be:e9:3e:8a:fd:a8:fc:4a:b5:e2:
                    f0:c6:57:cf:1c:07:02:6a:74:4e:69:a3:d0:b4:9f:
                    d8:48:a0:a5:cb:0b:50:dc:51:4d:a5:77:1c:48:34:
                    ed:68:b9:f1:d2:0f:07:a8:c7:47:88:60:9e:e7:9b:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:0E:7F:10:A0:5F:A0:3D:CA:43:E7:E1:CD:29:45:8D:85:3A:88
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:84:20:33:14:36:01:1f:c6:b3:35:af:16:59:57:8a:48:
         d0:71:1c:0f:36:c0:35:0c:08:e9:2f:b2:14:72:e9:15:54:be:
         1d:63:36:df:79:e7:cd:28:f7:67:18:b4:a3:e4:95:5d:06:73:
         39:09:ca:14:8d:60:ae:15:c5:82:05:0c:bd:17:e8:89:63:97:
         27:91:04:53:85:56:26:0b:1f:eb:e8:bd:5e:d0:64:49:70:f8:
         74:88:88:cf:e8:cc:90:ba:b1:75:27:0e:42:23:3b:49:d6:8b:
         99:55:93:54:48:76:d7:6c:d0:2d:63:eb:01:31:66:82:4c:a0:
         d3:a4:36:bf:88:ae:5e:53:c1:94:1c:61:70:0e:e1:b8:76:d6:
         d9:18:6a:c2:31:3f:dc:eb:75:44:7f:3d:69:ff:61:57:1d:c9:
         2e:1b:f9:50:c9:a5:51:c3:b7:01:47:63:2e:32:2f:4a:fa:ff:
         df:2d:19:61:c8:a9:e5:e2:dd:fb:41:52:26:7e:9d:d1:4f:4f:
         63:ce:a2:86:f4:d6:69:e1:a5:f7:22:6a:c7:10:70:a9:61:3e:
         4a:ea:6d:81:a8:8b:97:c0:46:25:1a:34:d7:ed:c2:4e:e9:09:
         c0:ce:e4:36:35:79:6c:1e:d8:69:55:98:7e:de:69:87:49:96:
         c0:26:c3:ff
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVH+iC/LEhdMAN4NSryD3gMLhYyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNTAzMDYwMTM0MTlaFw0yNjAzMDUwMTM5MTlaMDMxMTAvBgNV
BAMTKDFDQjQwRTdGMTBBMDVGQTAzRENBNDNFN0UxQ0QyOTQ1OEQ4NTNBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbGAyGOqA8gweHhs6y8KTn/EIY
ix2BVaDush3ZWLrJ1tWEMkLs6CxP+pLbYPHRF/2g5CU6SIrtPCFAWzToDLUNncE5
OtehPfl2kszeGxG6TfDyGOjk672/xQ4FymawTM537ZBsHZjGeQggBDhKAhZAsKhf
Xhh8r1/9ZSkOuhqBXFoX48oJLVkR7geKyoZgszmQIjZmhUajK8WKRXPsRr1WNIQs
z3cAXvubbm2VOY/ARQC4fAoisTsDZwWwoRliKVBf0O1yKhErvuk+iv2o/Eq14vDG
V88cBwJqdE5po9C0n9hIoKXLC1DcUU2ldxxINO1oufHSDweox0eIYJ7nm/ABAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHLQOfxCgX6A9ykPn4c0pRY2FOogwHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzMDMwMmUzMjMxMzgyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI2vwwDQYJKoZIhvcNAQELBQADggEBAHvYhCAz
FDYBH8azNa8WWVeKSNBxHA82wDUMCOkvshRy6RVUvh1jNt95580o92cYtKPklV0G
czkJyhSNYK4VxYIFDL0X6IljlyeRBFOFViYLH+vovV7QZElw+HSIiM/ozJC6sXUn
DkIjO0nWi5lVk1RIdtds0C1j6wExZoJMoNOkNr+Irl5TwZQcYXAO4bh21tkYasIx
P9zrdUR/PWn/YVcdyS4b+VDJpVHDtwFHYy4yL0r6/98tGWHIqeXi3ftBUiZ+ndFP
T2POoob01mnhpfciascQcKlhPkrqbYGoi5fARiUaNNftwk7pCcDO5DY1eWwe2GlV
mH7eaYdJlsAmw/8=
-----END CERTIFICATE-----