This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa
File:                     3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa (raw, json)
Hash identifier:          dLMjWcwyet97M+fJdAPiqWvZhI/ddruE7QsU9fWumJ4=
Subject key identifier:   B2:94:30:56:B3:6F:58:7F:E9:0A:5F:F1:7A:F6:9F:B5:0A:BA:BE:E4
Certificate issuer:       /CN=482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA
Certificate serial:       19E15843BF1DBAC62360FDC1DFE6448C1B069997
Authority key identifier: 48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa
Signing time:             Thu 10 Jul 2025 14:06:03 +0000
ROA not before:           Thu 10 Jul 2025 14:01:03 +0000
ROA not after:            Thu 09 Jul 2026 14:06:03 +0000
asID:                     264177
IP address blocks:        138.94.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e1:58:43:bf:1d:ba:c6:23:60:fd:c1:df:e6:44:8c:1b:06:99:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA
        Validity
            Not Before: Jul 10 14:01:03 2025 GMT
            Not After : Jul  9 14:06:03 2026 GMT
        Subject: CN=B2943056B36F587FE90A5FF17AF69FB50ABABEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:ad:f1:1c:67:89:f5:8d:e2:7b:f4:40:da:
                    a8:6a:f1:ae:f1:e6:92:79:29:b6:76:97:9f:22:7d:
                    a3:49:c9:8e:c3:d5:49:23:99:59:85:36:15:58:0b:
                    f5:79:cd:08:c8:85:43:e0:28:6e:ca:0a:f9:0e:04:
                    ec:d7:7f:45:b7:c5:38:54:94:72:ff:ae:d8:f1:be:
                    d8:89:1a:98:d7:c4:1a:98:a0:ce:35:c7:7d:43:14:
                    5b:0c:ea:53:68:40:87:79:06:36:fc:35:4f:d7:47:
                    72:77:59:4b:de:4f:15:81:ea:a6:09:69:b4:8a:9d:
                    48:6e:b1:34:7a:25:df:59:a7:83:80:c5:e3:e0:c0:
                    44:ef:d6:ec:78:7d:d1:6f:3f:1a:5d:a5:32:f3:3d:
                    68:0d:3c:22:b1:bc:f7:53:94:3f:0b:10:3c:a7:04:
                    86:93:1e:62:3a:6c:e1:ac:e8:d2:00:dd:01:de:ff:
                    a7:c8:8f:b5:f8:8f:d3:ae:17:bf:59:32:be:c0:f7:
                    e9:60:6d:1f:dd:db:6b:68:c6:bf:e1:89:b2:4e:ef:
                    4c:70:f9:03:d0:a9:90:cf:f0:e3:54:4f:eb:58:c9:
                    09:46:08:ec:ee:5c:e3:27:af:66:f0:e1:bf:13:36:
                    29:b8:cb:23:93:bb:48:05:c3:04:e3:d2:6d:73:38:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:94:30:56:B3:6F:58:7F:E9:0A:5F:F1:7A:F6:9F:B5:0A:BA:BE:E4
            X509v3 Authority Key Identifier:
                keyid:48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:53:0e:84:42:a7:c6:ac:8f:8b:e9:66:d9:49:1d:75:0d:7f:
         96:ce:96:ea:2e:e6:b8:9e:6c:75:c1:30:43:57:d3:9a:a9:54:
         b0:ea:39:90:a3:f7:31:e2:98:b5:3d:d6:5d:73:50:1e:a9:f6:
         fd:da:35:72:0e:47:51:18:c8:39:8e:e8:32:f4:86:21:f9:ff:
         3c:46:f5:e4:97:95:43:da:97:ce:e9:18:82:ff:7e:fc:fc:f1:
         53:79:0d:79:e5:d0:6f:ce:7a:a0:87:4e:cb:78:56:89:55:0a:
         52:fe:49:a1:46:ae:47:cd:c0:b5:68:32:4c:08:49:9c:a0:c3:
         ca:2d:af:4b:1e:b6:98:76:0e:b2:ce:58:e8:72:a1:f7:2c:35:
         35:d7:4b:22:72:0a:91:cf:3a:33:77:b0:ee:41:ab:6f:80:ca:
         4a:6c:24:c9:c6:d2:52:cf:0e:09:52:01:59:2c:b1:86:31:4e:
         a7:a6:7a:57:71:2f:2b:b4:de:45:f0:42:d9:a1:a5:fc:a5:cc:
         4d:0d:29:fd:36:b0:31:0c:02:d8:f7:c0:06:f5:50:34:73:37:
         5d:91:4a:bb:d9:5e:e7:7d:c4:77:76:0e:41:fd:32:5e:c6:2f:
         85:49:04:2d:e6:08:e7:e2:a2:10:a4:32:f6:68:11:7d:91:5c:
         13:37:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----