This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3132382e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3132382e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          qOEfVpezAAubSbIv6w7v5qh8zfUkO8wSp+IIfjsbrVU=
Subject key identifier:   9D:68:49:C3:2E:9E:16:9D:DC:20:9B:A0:EC:0C:A7:35:9F:BC:EB:1C
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       41018CD13ABB7CE46575B104E5B8423AA4C15866
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3132382e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 15:35:15 +0000
ROA not before:           Tue 01 Jul 2025 15:30:15 +0000
ROA not after:            Tue 30 Jun 2026 15:35:15 +0000
asID:                     28238
IP address blocks:        187.0.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:01:8c:d1:3a:bb:7c:e4:65:75:b1:04:e5:b8:42:3a:a4:c1:58:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 15:30:15 2025 GMT
            Not After : Jun 30 15:35:15 2026 GMT
        Subject: CN=9D6849C32E9E169DDC209BA0EC0CA7359FBCEB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:66:3f:31:4d:5c:61:d0:4e:0d:7c:c2:3b:
                    5e:2e:b0:03:45:7e:51:bd:02:d5:09:68:95:cd:51:
                    09:5f:be:1e:80:d4:f2:c5:68:8f:e1:ae:97:9f:8b:
                    b4:5a:be:6f:5f:56:b1:8e:5c:57:81:6a:ae:38:5d:
                    61:d9:9a:e0:30:ef:da:5f:56:e2:fe:ee:24:36:59:
                    10:9c:26:ee:b1:30:ad:4c:41:2d:65:b8:1f:65:8e:
                    f0:58:cc:70:33:ea:8e:40:02:5a:fd:0b:a7:9e:99:
                    55:3b:5b:fd:89:b8:10:d2:d4:60:a8:e5:22:a0:83:
                    f2:92:e7:25:ff:26:bc:68:b2:58:d7:cb:87:93:5e:
                    4d:60:fa:2f:22:94:d6:76:81:7a:3f:23:57:d3:df:
                    31:a8:7e:bb:a0:58:03:6f:60:f6:98:3f:5e:62:71:
                    97:75:52:6c:af:2b:93:34:d5:a6:8e:81:6b:46:38:
                    df:1b:ea:f7:4d:3e:8b:b3:ed:72:09:02:54:79:e4:
                    2f:64:af:d5:43:55:e4:5c:71:a0:a8:cc:d1:e0:5a:
                    20:3b:8c:0c:cd:0d:81:3b:22:f7:c8:e0:cc:53:4c:
                    66:90:46:8b:62:42:3d:48:47:c1:c1:6d:00:22:df:
                    cb:a2:4d:5f:97:a6:45:ae:2d:86:d0:7b:e3:7f:ec:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:49:C3:2E:9E:16:9D:DC:20:9B:A0:EC:0C:A7:35:9F:BC:EB:1C
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3132382e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:56:b2:1e:83:58:ed:ef:9f:78:8c:a4:ca:cb:c2:66:e9:28:
         d4:3f:80:80:b1:cc:c1:af:b0:e0:51:82:50:cd:eb:49:12:7e:
         d1:a9:4f:b8:11:61:2a:b9:f4:4c:de:f2:33:da:52:47:8c:7f:
         dc:bd:96:8b:25:2e:6a:95:05:1f:a7:8f:e7:45:d5:c0:77:b7:
         15:f1:46:81:cc:ae:d2:35:18:87:77:1c:56:7c:6c:16:ad:32:
         fd:3f:17:d4:71:51:f7:e2:cd:b2:ea:27:1c:db:37:3b:50:81:
         e5:b9:68:1d:b2:44:ac:99:76:fd:3a:42:44:9f:04:89:cd:e6:
         11:0f:13:2c:9f:89:9f:58:8d:ec:ea:d1:03:e9:d3:74:56:b6:
         d4:b5:28:eb:70:f3:fc:bc:a6:20:93:bb:ee:c0:51:52:d4:82:
         e4:19:66:5f:d3:ae:b8:b7:bc:6a:a1:b4:e6:7f:32:82:2f:90:
         60:50:db:4d:0b:77:d2:60:bf:d7:30:b1:e5:8b:25:01:1f:6e:
         51:fd:f4:85:79:90:a4:ff:23:27:f4:c3:a1:36:e1:dc:5b:e2:
         fc:06:f6:75:b3:21:9d:ba:83:ee:ae:25:1b:59:00:82:d4:f5:
         1f:0e:77:44:6a:5f:3c:bf:e0:37:ad:ca:b8:45:ba:be:a6:12:
         7d:d0:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----