This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          f78CudX0CX6SmtPvH/Hri6iBbig/t9roJDHnfVKdUm0=
Subject key identifier:   12:2C:C9:70:39:5D:67:B4:22:99:2F:A2:02:15:B8:F8:40:17:08:73
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       2E94CD3D8329B47A5A6771D38DC383DAED7A2096
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:36 +0000
ROA not before:           Fri 25 Jul 2025 20:43:36 +0000
ROA not after:            Fri 24 Jul 2026 20:48:36 +0000
asID:                     61689
IP address blocks:        131.108.126.0/24 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:94:cd:3d:83:29:b4:7a:5a:67:71:d3:8d:c3:83:da:ed:7a:20:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:36 2025 GMT
            Not After : Jul 24 20:48:36 2026 GMT
        Subject: CN=122CC970395D67B422992FA20215B8F840170873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4b:12:82:18:94:b8:47:56:61:0b:81:cf:2c:
                    03:bf:4f:aa:4c:21:e3:12:09:d8:f4:c2:7d:2a:b1:
                    9c:83:c6:08:51:08:32:10:55:0d:01:70:b8:ca:61:
                    44:1c:34:5f:e1:11:1d:c5:c6:94:0c:47:81:d6:3e:
                    6c:37:60:eb:6b:88:a2:ba:df:8b:78:68:d0:b1:60:
                    ae:18:79:6f:20:05:7e:02:e3:64:43:65:55:e6:66:
                    33:5d:27:c0:65:3e:dd:3f:16:17:39:33:9c:64:7d:
                    1c:7f:df:2b:da:4f:58:d0:a1:99:81:44:56:dc:75:
                    1f:01:b3:e2:b1:64:80:f6:65:4a:0a:64:53:60:b4:
                    1c:80:20:97:ad:2d:04:2b:4e:79:af:92:b0:c7:37:
                    4a:8c:fb:df:7e:e8:eb:f2:20:79:c0:32:4f:c7:15:
                    1c:47:42:54:cd:2c:ba:5e:5f:57:92:f8:74:f6:9d:
                    bb:1a:e5:78:80:cb:0c:01:44:15:e0:b0:fa:7a:9a:
                    4c:ed:8f:f7:b7:df:9d:bc:cf:b1:4b:a9:26:6c:15:
                    c7:f0:b0:5e:0e:91:ef:d1:0e:60:1e:6b:d6:b7:c7:
                    0f:50:6c:94:fc:da:c9:8e:7c:b9:18:28:ac:12:ab:
                    6b:9e:d4:51:c2:90:6c:7b:6b:82:d2:0d:3e:da:d9:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2C:C9:70:39:5D:67:B4:22:99:2F:A2:02:15:B8:F8:40:17:08:73
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:45:5e:ad:77:43:49:01:1e:e5:13:86:ed:93:9c:be:c9:
         73:3a:a8:2c:da:51:b8:47:a6:ae:ff:e3:30:f1:23:65:91:6c:
         ac:6a:c6:25:53:26:3e:85:73:41:c8:60:0f:ce:ba:3f:d0:8f:
         da:d8:80:45:d4:ee:33:b0:38:76:b8:8e:ca:80:5c:e3:83:ad:
         e1:8a:59:c1:fe:26:62:ff:62:d3:5e:36:0e:47:93:ce:9d:29:
         e2:bf:e6:fc:d8:ba:44:3b:67:a7:d7:f1:08:38:85:80:72:ec:
         ae:6c:26:bd:71:42:61:58:42:4f:8a:5f:4c:38:1d:70:f0:6b:
         1b:27:51:0a:7a:2c:71:37:9b:82:54:59:5f:ad:67:82:4c:c3:
         fe:b5:ef:e1:f0:97:31:7b:df:67:a5:fe:67:6a:a9:4c:f3:c5:
         61:f0:52:1c:1f:dd:e1:ce:95:80:12:f5:cc:7d:84:d2:01:db:
         2b:f0:ea:f8:ee:bb:82:4a:e1:c2:4f:64:a8:b8:72:8a:13:b3:
         36:6f:cd:6b:25:88:1a:0b:a3:e7:15:e9:3b:2f:8c:53:ed:53:
         d3:d1:8b:45:af:f4:4e:e5:c0:e3:ae:d7:a5:29:67:44:68:7c:
         22:0b:9d:da:f4:e9:ae:29:15:07:a3:9c:3c:b7:b4:5b:7b:7d:
         93:47:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----