This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          1lOlaGhLqRgs7p5WDyeJzBrutfbRkCAFWROaPl3m1MQ=
Subject key identifier:   E9:B5:0E:30:48:30:D3:7A:5D:F7:04:2F:B2:86:45:EA:29:34:F8:A4
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       58E6AA88E5A895DD794284EC241CFC291BC7AE14
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:55 +0000
ROA not before:           Fri 25 Jul 2025 20:43:55 +0000
ROA not after:            Fri 24 Jul 2026 20:48:55 +0000
asID:                     61689
IP address blocks:        131.108.125.0/24 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e6:aa:88:e5:a8:95:dd:79:42:84:ec:24:1c:fc:29:1b:c7:ae:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:55 2025 GMT
            Not After : Jul 24 20:48:55 2026 GMT
        Subject: CN=E9B50E304830D37A5DF7042FB28645EA2934F8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:b8:db:b6:9f:38:6e:7a:d4:86:81:9a:d5:
                    27:f3:22:b8:d7:15:bf:b3:bb:a1:3d:d5:13:99:e3:
                    b9:48:6a:97:50:4d:94:55:ef:fa:90:03:23:be:6e:
                    c4:93:c6:aa:03:23:4c:84:90:ec:7a:7b:fc:96:0c:
                    05:cb:e0:b6:8b:78:62:d4:d0:41:f9:83:cf:07:f7:
                    f3:be:2f:a5:36:98:b9:31:d4:36:e2:fd:12:33:c1:
                    bd:8a:a3:da:bc:88:7e:f8:19:a9:b4:6c:f4:b0:4f:
                    77:6a:bd:f8:2f:b6:d2:a6:9a:a1:07:a4:b3:de:b9:
                    f9:43:dd:7b:08:9b:7e:a1:26:a4:c4:f5:e2:17:fd:
                    65:af:ce:32:69:8c:b6:a7:24:5a:c4:50:ba:79:11:
                    9d:6f:5e:61:b3:81:c2:b3:46:80:1e:1b:c8:f5:b4:
                    83:01:d6:e8:52:b5:75:45:c0:57:01:53:66:52:6f:
                    38:78:15:af:56:34:63:7d:26:21:6f:25:19:60:a6:
                    82:8d:37:86:73:4b:87:12:da:e5:c2:59:41:6c:31:
                    9c:d6:d6:74:f9:3e:6d:e1:8f:f2:8c:b5:da:5c:37:
                    5c:fd:64:90:7a:ea:44:13:df:27:c5:8d:9a:f7:c8:
                    38:a5:3b:d8:fa:35:dd:dc:41:51:1a:45:60:f5:91:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:0E:30:48:30:D3:7A:5D:F7:04:2F:B2:86:45:EA:29:34:F8:A4
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6a:bf:e2:6a:4e:0d:47:ed:65:81:c5:98:5b:d6:33:be:81:
         5b:65:ec:32:18:2f:ce:64:7b:fa:db:07:79:ce:47:55:46:d5:
         a3:19:00:bc:32:4a:ea:89:3b:3e:a1:a7:c1:98:de:f4:4f:5a:
         5b:98:f8:42:4d:7d:52:72:d7:59:7c:4c:ec:d6:b5:f3:ad:08:
         08:7c:b3:9a:d8:1a:24:b9:ea:84:f1:d7:e3:75:1d:be:28:11:
         64:93:71:cd:a9:f9:d2:6c:2f:0d:36:9c:d2:21:af:ef:22:15:
         a2:8e:1e:ea:67:5a:56:30:67:b9:1a:1e:c1:ae:ed:0b:db:ad:
         da:5c:0a:e2:38:a0:5b:56:06:ea:d0:f1:12:6c:01:f9:8c:f4:
         f5:2a:c1:99:3b:b4:3b:97:02:63:e7:bb:92:24:74:86:26:d4:
         d9:9b:55:4c:07:6e:06:47:6e:0f:15:9e:8d:c1:92:d2:e2:51:
         54:c9:0e:26:f5:ac:82:35:4a:68:e0:52:9a:2d:3a:d6:31:44:
         03:32:f7:90:81:a4:2c:9c:6f:db:b2:23:e4:8e:bf:3f:52:a2:
         d5:95:ff:73:58:34:91:08:6e:fe:d0:3b:e1:fd:a2:44:8a:64:
         fd:7f:82:27:0a:b8:09:29:3d:2c:31:5b:ad:9e:22:f0:54:8c:
         ba:2a:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----