This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          KcLTrdznGTF9iHI2gIG9X4RWhm6RIKnoNvO0CinSdUM=
Subject key identifier:   B3:6F:1C:BD:57:D2:6F:1B:47:53:90:38:1D:2B:4D:6B:60:2D:FD:11
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       03AF9C9881D1BEE245CDCD7897C82A0C70204C2F
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:19 +0000
ROA not before:           Thu 06 Mar 2025 01:34:19 +0000
ROA not after:            Thu 05 Mar 2026 01:39:19 +0000
asID:                     28594
IP address blocks:        200.218.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:af:9c:98:81:d1:be:e2:45:cd:cd:78:97:c8:2a:0c:70:20:4c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:19 2025 GMT
            Not After : Mar  5 01:39:19 2026 GMT
        Subject: CN=B36F1CBD57D26F1B475390381D2B4D6B602DFD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:42:f5:47:85:65:6b:73:b0:25:d0:31:49:
                    69:eb:87:71:1a:d5:a8:86:c6:c4:70:ba:50:8b:63:
                    52:4e:42:81:5c:fb:08:05:d3:70:38:18:32:7b:08:
                    32:ce:9f:93:98:22:5b:e4:bf:0e:fa:f2:08:80:ad:
                    58:12:5c:34:84:77:ed:0e:bc:4e:55:f2:64:da:e8:
                    d9:eb:6e:02:bb:c0:5d:e3:69:0e:37:cb:b2:c4:ed:
                    24:7e:d3:5f:01:f3:4f:64:74:62:7a:cb:7c:36:21:
                    55:c0:19:64:63:dd:04:bb:25:1f:a5:be:35:d1:d4:
                    ad:d0:18:ac:ff:bf:ae:3c:22:b3:bc:88:e5:b7:5f:
                    8f:bf:6b:06:2c:56:c5:37:13:23:74:c2:ce:64:63:
                    ea:cd:0a:c5:b5:7f:05:59:4d:09:eb:c7:35:d0:0d:
                    fd:1f:bb:84:f3:18:b2:6c:23:05:b1:10:e0:d6:b4:
                    db:58:dc:70:40:1d:91:28:06:35:90:9e:40:74:56:
                    07:bf:99:f2:da:e5:b9:53:50:aa:3b:c8:56:ad:54:
                    e5:72:81:5d:2a:cb:7c:b9:4e:d2:b4:89:b7:b4:d9:
                    6b:0f:63:7d:f7:c9:ed:0b:78:3c:b2:e3:35:80:53:
                    6e:8e:bc:cf:4b:7d:8e:64:fb:5c:f0:02:39:c4:27:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6F:1C:BD:57:D2:6F:1B:47:53:90:38:1D:2B:4D:6B:60:2D:FD:11
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:1b:9a:d2:58:5d:b7:b9:47:c0:f4:9f:7a:9d:df:f7:d2:b3:
         23:00:fa:6d:8c:98:a4:1b:4b:a3:2e:39:44:54:3f:95:59:7c:
         4e:ce:86:80:7a:22:34:36:e7:01:50:d2:73:0f:94:9f:5b:8b:
         9e:fc:86:be:86:25:51:8c:09:2b:c7:b2:81:34:1b:85:36:c5:
         8a:05:ca:a0:e0:56:c6:14:d6:d4:06:07:e5:28:82:9c:d6:01:
         d6:00:87:9c:04:1e:6b:9a:e9:32:fd:ab:da:3c:c4:8d:59:cd:
         0c:57:5f:ae:91:01:8f:20:40:ac:03:c5:84:d3:8a:92:99:75:
         d9:56:90:a7:14:a5:b4:30:06:70:f9:7b:39:8e:e3:11:74:9d:
         81:68:f1:a7:08:23:5b:c0:af:25:d3:cd:f5:a2:aa:29:36:60:
         56:fa:1a:23:bb:22:45:a6:4e:57:6a:21:c0:89:02:4a:2a:f0:
         6b:c1:df:73:63:f9:1e:79:b6:56:6a:be:00:fc:5d:9a:ec:fe:
         c0:3b:04:00:cc:71:f0:95:71:8f:fd:6a:c9:8a:c1:01:36:50:
         65:80:86:c2:31:87:9e:04:9c:f2:94:d4:57:db:26:86:1a:89:
         f5:a1:e6:67:a6:00:1e:ab:7c:7c:1f:ac:c0:21:bd:80:39:eb:
         90:dd:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----