This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          tmd2zgLXGxju+NzCY6LbyT/FQQikb4H42J5xhw9V90s=
Subject key identifier:   2C:49:CC:DF:70:6C:BA:3D:A3:69:39:88:7C:D5:5D:01:DF:6B:66:EE
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       1B1EBDF6F6A5AB0E768DAB1781FEFA7F45625C57
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:32 +0000
ROA not before:           Fri 25 Jul 2025 20:43:32 +0000
ROA not after:            Fri 24 Jul 2026 20:48:32 +0000
asID:                     61689
IP address blocks:        131.108.124.0/24 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1e:bd:f6:f6:a5:ab:0e:76:8d:ab:17:81:fe:fa:7f:45:62:5c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:32 2025 GMT
            Not After : Jul 24 20:48:32 2026 GMT
        Subject: CN=2C49CCDF706CBA3DA36939887CD55D01DF6B66EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:b9:05:93:30:0b:81:0f:5a:56:b6:8f:a9:
                    14:53:5e:ef:73:4d:9e:7a:aa:15:11:be:2f:0d:30:
                    1e:6d:4e:e2:ec:c1:1e:a8:43:99:53:4a:06:29:44:
                    7c:e9:3d:c7:6b:cc:a8:32:8f:14:38:61:75:a6:8d:
                    9c:a2:ac:4f:c6:89:ad:b1:9f:45:48:f3:e8:52:2f:
                    6b:67:cf:70:ab:38:e2:3e:b4:fa:db:c5:1b:56:70:
                    dc:9f:60:02:7d:54:51:d5:2f:ac:ca:41:ec:11:56:
                    cb:b8:16:28:7e:c2:0b:4b:4b:81:bc:04:6a:8d:f5:
                    3c:89:58:fd:16:e0:06:0d:e8:89:26:50:4e:9d:5c:
                    95:8a:d1:70:66:93:03:06:80:f2:94:ab:69:86:1d:
                    4e:d4:7f:b4:52:ff:1e:ed:9e:28:12:a1:a8:19:b0:
                    f5:32:4a:0e:6a:e9:80:5e:1f:52:aa:96:46:76:92:
                    a4:eb:4e:71:b5:39:81:7e:6d:72:a4:f4:e6:7d:c6:
                    11:01:a8:f6:4c:39:be:b2:d0:ff:43:6d:ca:b1:7b:
                    ff:7f:6b:4b:df:c7:49:73:bf:ab:77:45:a4:b3:06:
                    d6:15:68:db:23:64:87:23:30:91:8e:88:51:f8:ad:
                    b2:aa:38:38:59:b3:4b:4b:1d:2b:14:28:c9:76:0f:
                    d1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:49:CC:DF:70:6C:BA:3D:A3:69:39:88:7C:D5:5D:01:DF:6B:66:EE
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:b1:12:7a:7d:4f:67:36:23:3f:91:47:4e:5c:bd:c2:8b:bb:
         31:13:02:78:f8:76:24:9a:16:d4:07:60:53:07:37:7a:17:8e:
         78:97:0f:76:76:91:31:12:c6:00:83:e5:c7:47:6e:2a:f1:9b:
         aa:71:c7:e7:43:11:45:2b:71:9f:fd:3e:4e:f9:ab:e8:31:03:
         06:4a:5c:84:16:4c:f8:5a:3f:64:ef:a6:5e:6a:7c:80:80:5d:
         da:08:df:38:66:35:f3:2e:81:c1:d9:8a:0b:dd:c4:c8:4a:ec:
         bc:f2:76:86:16:f6:96:08:06:d9:8a:eb:c3:dd:87:21:fb:a0:
         bf:f6:08:45:96:dd:14:d8:bb:92:7b:a7:09:26:78:ad:6e:fe:
         ee:a0:0f:69:2d:aa:5d:46:27:62:dd:06:5d:e7:d7:aa:e4:5f:
         92:c9:7b:50:2c:ee:90:6f:4a:ba:ff:41:be:5c:14:b0:96:33:
         7a:49:37:55:34:51:8a:c4:20:9c:b9:dd:3b:42:f3:f4:79:c6:
         b8:93:d7:15:35:25:cb:04:d1:e3:34:f2:9c:08:25:c0:28:da:
         ca:c0:59:16:a4:b1:0c:fa:ee:ab:a5:67:a6:21:87:ba:ad:5f:
         67:9c:b1:08:1d:23:06:b6:b1:73:e7:51:47:28:58:17:dd:3a:
         6e:15:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----