This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138332e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3138332e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          dCKgv1OieXd4mfJcMHSVlwva4uEYY9gAuW4TCwQpo+U=
Subject key identifier:   1B:C2:D7:0A:AF:92:57:38:A6:9E:4A:88:03:78:1F:4B:3E:EE:40:B6
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       5A3CAA04724E69B155EE3C74D3A7F97ECB5E5AB5
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138332e302f32342d3234203d3e20323633333639.roa
Signing time:             Sat 01 Feb 2025 21:52:56 +0000
ROA not before:           Sat 01 Feb 2025 21:47:56 +0000
ROA not after:            Sat 31 Jan 2026 21:52:56 +0000
asID:                     263369
IP address blocks:        191.37.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3c:aa:04:72:4e:69:b1:55:ee:3c:74:d3:a7:f9:7e:cb:5e:5a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Feb  1 21:47:56 2025 GMT
            Not After : Jan 31 21:52:56 2026 GMT
        Subject: CN=1BC2D70AAF925738A69E4A8803781F4B3EEE40B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:90:5c:20:26:14:9a:da:69:16:04:8d:ea:
                    46:a7:8f:d1:0d:b5:40:23:aa:4a:f0:8f:e8:a5:50:
                    a3:c5:b5:d6:7c:63:b3:da:34:88:fd:31:ad:cf:a8:
                    6e:64:72:a8:b9:48:ea:38:13:d3:a8:39:38:eb:07:
                    0b:31:e1:a2:e8:f6:72:93:f8:cd:21:47:ad:12:0a:
                    76:21:da:05:fa:24:a0:c0:5d:b0:84:60:d0:32:59:
                    4a:b0:8c:d9:03:3e:7b:1a:f6:d4:f3:3c:56:ff:a2:
                    82:e6:d6:d8:0b:85:28:f2:d8:a7:4f:4a:cc:ce:00:
                    7e:f5:b9:a3:2a:13:70:87:bf:38:81:2a:6e:f5:75:
                    8c:bb:8d:9b:c3:79:23:de:fd:af:62:d9:0d:83:a3:
                    37:89:e7:19:9b:ca:62:57:74:ab:3f:6d:85:d8:a9:
                    e9:8a:eb:d8:32:f8:2a:49:01:d2:83:b1:c3:34:aa:
                    1c:e2:21:56:75:13:81:b7:62:e9:16:cc:de:67:88:
                    36:b2:09:66:6b:5a:be:32:24:4a:2f:98:86:8c:6d:
                    4e:73:62:8e:a4:f3:e2:2e:f0:4b:44:e9:ce:67:d9:
                    84:33:a4:d8:65:ac:4c:d9:eb:72:a5:10:e0:46:33:
                    8d:89:f4:da:4f:4d:bb:b6:d4:cf:7f:9a:d1:b1:6a:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C2:D7:0A:AF:92:57:38:A6:9E:4A:88:03:78:1F:4B:3E:EE:40:B6
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138332e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:20:ff:d8:28:54:cc:1d:5e:ab:b5:8e:44:01:a8:b9:89:
         95:12:e0:09:94:3e:d9:05:47:bd:f8:0f:80:05:00:03:e0:52:
         9f:f6:03:78:ca:1f:14:32:22:92:6d:ad:1d:3a:37:f9:7f:8d:
         a8:77:b9:b7:b7:01:21:dc:a7:06:02:d8:46:99:d8:bd:a7:11:
         ef:51:cf:fe:63:12:af:7a:d8:06:37:a2:79:c0:63:18:c7:1b:
         1a:81:c0:b5:67:a8:15:24:6d:7f:bc:64:24:5c:88:33:56:33:
         97:dc:3d:94:7c:6e:f2:a4:ca:e6:bc:2f:3d:fd:89:be:68:2a:
         05:26:60:0c:2c:dc:1f:42:e0:50:cc:99:1a:30:a9:64:e9:38:
         81:a2:c4:c0:88:ab:2c:16:90:16:de:80:9a:82:71:c8:04:e9:
         25:b8:54:3e:f3:6d:e7:0d:65:a0:59:82:0e:62:2e:71:28:2e:
         ed:d1:63:05:f7:12:e6:31:ec:43:6f:3a:05:41:e9:a8:25:10:
         4b:d6:89:f7:a3:57:12:01:3c:29:1e:55:71:95:4b:61:d5:f9:
         66:5b:e7:e3:3c:f7:c4:4f:be:78:02:cf:c0:6b:03:a3:99:7b:
         83:74:c4:5b:a0:65:9d:6a:5e:0d:95:3f:21:26:bd:1f:97:e8:
         dc:05:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----