This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138362e3231362e3232342e302f32302d3234203d3e20323634303936.roa
File:                     3138362e3231362e3232342e302f32302d3234203d3e20323634303936.roa (raw, json)
Hash identifier:          0jDdOz4zTT/xf2Yknu+l/3wCSZ4d8QNf5ffJzriJqsI=
Subject key identifier:   70:83:21:A2:23:1B:8A:6C:7C:10:7A:AB:79:AC:7D:8D:FA:CC:CA:83
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       58002A3EEB91C3C921D11DD476C85680A5231739
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138362e3231362e3232342e302f32302d3234203d3e20323634303936.roa
Signing time:             Fri 05 Sep 2025 14:04:05 +0000
ROA not before:           Fri 05 Sep 2025 13:59:05 +0000
ROA not after:            Fri 04 Sep 2026 14:04:05 +0000
asID:                     264096
IP address blocks:        186.216.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:00:2a:3e:eb:91:c3:c9:21:d1:1d:d4:76:c8:56:80:a5:23:17:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Sep  5 13:59:05 2025 GMT
            Not After : Sep  4 14:04:05 2026 GMT
        Subject: CN=708321A2231B8A6C7C107AAB79AC7D8DFACCCA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:a0:7d:f8:8f:23:7f:e8:00:6c:02:f2:55:
                    a9:26:25:63:05:c6:de:1c:64:54:5e:dc:7a:98:6c:
                    8f:ad:4b:3b:e9:5c:e8:4c:9d:6e:75:e2:36:ed:07:
                    53:06:3b:96:ba:6a:f0:93:a5:76:6d:84:8d:f9:52:
                    e3:09:7e:bb:69:c6:b3:64:26:58:35:f7:6d:bc:c8:
                    a7:02:51:45:e8:53:a1:51:2e:6e:c2:21:f4:fa:5b:
                    c9:7f:8d:2b:7f:f8:fe:07:a4:db:03:11:56:9a:32:
                    11:45:85:e4:3f:8f:b6:c7:97:40:d3:83:36:0e:a3:
                    0e:2d:fd:58:c8:6d:34:4a:c2:9b:3a:03:00:f5:31:
                    d0:e7:a9:94:76:6b:38:2b:f1:b9:05:c4:37:f3:6c:
                    40:f7:ec:79:bb:84:40:58:c9:24:89:cc:00:e3:6b:
                    94:03:df:7d:2f:fd:de:c8:6a:d8:7d:b6:7a:cd:a4:
                    a8:4f:15:17:32:0d:d2:55:3d:de:c2:e4:7f:0f:e8:
                    0c:38:0a:cc:46:6f:86:ce:61:21:a4:35:4b:a2:2b:
                    e2:e0:d1:c7:c1:1b:ca:6e:3a:81:90:33:0c:52:15:
                    89:c3:b0:9b:22:8b:be:56:7f:f8:76:b1:9a:bd:99:
                    18:63:55:79:b3:1e:cd:b4:bf:aa:91:42:88:81:c7:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:83:21:A2:23:1B:8A:6C:7C:10:7A:AB:79:AC:7D:8D:FA:CC:CA:83
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138362e3231362e3232342e302f32302d3234203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:07:00:fc:e9:45:35:74:c0:08:90:a5:bc:8e:a7:a9:d0:ea:
         3a:48:22:3b:1a:7e:00:6d:0e:db:01:ed:87:2b:9d:e3:dd:36:
         b2:42:c5:ac:52:08:ac:d4:a4:1d:48:75:c0:71:0f:fd:7d:b6:
         55:35:43:bf:62:39:b7:ac:3f:59:d3:9b:d9:7a:45:93:4d:8a:
         56:b3:94:1f:c6:7f:74:8a:7c:5b:40:75:ff:54:92:a1:0b:09:
         85:f4:63:67:67:30:50:ac:21:28:a5:77:e4:03:17:a2:c4:19:
         3d:5a:b1:34:23:53:aa:ac:71:7b:91:21:3a:2b:ad:81:07:c4:
         d0:b2:82:28:40:6e:96:8d:d5:01:2f:88:67:bf:ad:29:5b:e5:
         ed:a4:5a:68:fd:46:6d:f7:23:4a:52:f2:2c:dc:97:ef:9b:cf:
         7c:1a:45:f1:43:04:c9:35:27:49:69:1e:71:49:86:c3:60:c2:
         66:79:df:73:d0:1a:b4:0c:78:bd:cc:ee:a7:90:0d:6f:54:fd:
         e5:b0:5c:e9:26:c5:05:5f:c5:50:32:89:9e:4a:78:0d:31:61:
         e1:50:2d:c7:38:42:0c:7c:c1:19:31:5e:26:14:7e:e1:73:07:
         8c:4e:67:d4:ab:51:8a:06:4b:84:06:3a:e6:43:ee:1c:e1:c8:
         d1:9d:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----