This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3134302e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3134302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          K0AREQNL7uT7X+XPo+PkWjTLufiBJwCPmEYjVKq4tag=
Subject key identifier:   28:90:67:E9:5F:C8:A3:C7:B0:DC:3F:7C:B3:BF:6A:8F:27:78:28:BF
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       66C3ED661718E56AD216A049ECAA6419B9E7C81C
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3134302e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 21:37:15 +0000
ROA not before:           Tue 01 Jul 2025 21:32:15 +0000
ROA not after:            Tue 30 Jun 2026 21:37:15 +0000
asID:                     28238
IP address blocks:        187.0.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c3:ed:66:17:18:e5:6a:d2:16:a0:49:ec:aa:64:19:b9:e7:c8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 21:32:15 2025 GMT
            Not After : Jun 30 21:37:15 2026 GMT
        Subject: CN=289067E95FC8A3C7B0DC3F7CB3BF6A8F277828BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:39:1a:a6:0e:c2:e7:b1:2e:16:15:24:0a:
                    56:cb:11:fb:40:85:f5:ef:b3:31:dd:d0:6b:a2:13:
                    4f:3e:fa:21:c1:1f:f9:81:b1:d8:f4:b1:42:6b:d2:
                    12:7d:17:1b:32:47:2b:40:ac:ee:67:e5:2c:59:9b:
                    fa:2d:71:69:5c:6b:ab:74:0f:e6:bd:d0:24:e1:28:
                    be:69:9f:ac:5e:21:d7:99:2f:5d:e5:0c:4e:24:bc:
                    36:ec:82:af:7c:ab:23:62:ef:61:d6:57:1e:ec:ec:
                    1e:c5:32:3d:d4:9f:ea:ca:cf:ba:32:23:78:a3:80:
                    17:93:20:62:a7:99:d2:6f:bf:69:6d:d2:00:2b:c5:
                    20:65:f9:8a:33:13:98:91:e1:0f:f3:ae:36:d3:18:
                    a9:b4:95:90:a0:0b:3a:e8:86:6f:7a:5f:24:41:98:
                    c0:6e:45:86:06:6f:bb:20:7a:07:aa:99:4d:72:77:
                    bb:58:a4:5a:c5:3e:66:cd:f9:48:95:9a:0c:19:f7:
                    bc:88:8b:0d:cd:83:79:aa:18:e4:82:6f:88:83:80:
                    71:13:05:bf:30:c2:96:04:6e:a4:f3:d3:9c:e8:d4:
                    6d:8a:c3:32:16:fc:af:b9:99:65:73:29:bd:5a:ff:
                    a6:7b:6d:40:b8:54:74:2d:ca:47:34:2d:7a:50:5c:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:90:67:E9:5F:C8:A3:C7:B0:DC:3F:7C:B3:BF:6A:8F:27:78:28:BF
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3134302e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:a2:38:26:e7:1a:3e:ca:35:44:68:b9:61:16:21:dd:41:
         24:e3:c8:6d:8b:1d:a5:a1:b4:ef:4c:a8:3e:20:70:bd:21:51:
         ee:ba:8b:a6:9d:42:65:3b:dd:7e:b1:ed:e5:76:3c:14:8b:1f:
         43:7b:95:b9:b8:42:c5:97:67:d8:21:e0:6d:77:de:ad:0f:d9:
         83:ea:0f:09:a4:ae:ab:40:a8:41:2a:9f:f0:dd:1a:2f:83:7f:
         0d:ee:fc:4f:a8:78:52:78:f0:59:f9:d0:86:17:49:a8:07:8c:
         22:f8:93:c8:81:4a:b9:1f:af:78:81:3d:d7:5f:b6:7f:f6:23:
         99:30:3c:7e:af:05:7c:4d:82:db:c0:1b:f3:f2:5e:c4:ae:bf:
         48:3c:9f:be:60:68:09:5f:1a:56:7c:fb:0d:26:e3:ce:04:f7:
         64:53:ba:86:9f:98:27:32:d3:20:ed:bd:4c:5b:a5:6a:6d:31:
         5b:eb:9b:ef:8e:6a:22:2f:c5:a5:5a:31:c6:91:3d:8e:a8:83:
         ce:13:93:04:c0:b8:22:37:10:02:33:71:88:49:59:44:bc:86:
         63:cb:1e:76:e9:53:f9:26:ed:b4:6b:fe:ab:6d:7c:09:f7:36:
         d0:2f:7b:3f:02:84:5f:1f:a6:37:6e:5e:ce:21:2d:df:6e:4e:
         66:af:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----