This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3232203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32322d3232203d3e203631373536.roa (raw, json)
Hash identifier:          Kq1NYgqt7BBJXm6gv+qAVQNNtlsiDlad2EARZ4g408M=
Subject key identifier:   5C:79:AF:EE:52:65:F2:3A:A7:52:86:53:21:67:0F:98:E7:7F:5F:E7
Certificate issuer:       /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial:       46B2AD388DFF16099F2B9EFFEEC459ADE75E6131
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3232203d3e203631373536.roa
Signing time:             Thu 12 Jun 2025 20:44:41 +0000
ROA not before:           Thu 12 Jun 2025 20:39:41 +0000
ROA not after:            Thu 11 Jun 2026 20:44:41 +0000
asID:                     61756
IP address blocks:        131.100.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b2:ad:38:8d:ff:16:09:9f:2b:9e:ff:ee:c4:59:ad:e7:5e:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
        Validity
            Not Before: Jun 12 20:39:41 2025 GMT
            Not After : Jun 11 20:44:41 2026 GMT
        Subject: CN=5C79AFEE5265F23AA752865321670F98E77F5FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:b5:f5:a5:a7:68:69:69:c3:5d:b6:6b:21:
                    29:e9:8e:69:69:38:e5:68:62:3a:d3:68:d1:d6:1b:
                    24:85:e9:56:18:3a:8b:98:3e:64:9f:38:23:80:61:
                    8c:0c:e4:b8:f4:63:b5:a6:8c:58:65:bd:04:ae:ad:
                    1a:1d:46:2b:5c:ab:e3:de:30:4a:20:85:b0:ba:7c:
                    2e:e7:bf:cf:09:0e:f2:68:b5:05:41:57:76:65:d0:
                    d7:a7:98:a7:a8:42:7c:ae:f0:cc:4f:83:65:e6:73:
                    52:ff:f0:cb:d3:24:69:f9:49:34:a0:99:3d:b6:24:
                    91:90:36:e3:fc:ec:40:1f:04:05:ce:fe:9e:22:dc:
                    62:7a:05:c5:57:60:ad:17:3f:f0:a6:99:a9:66:c5:
                    27:07:58:e4:56:bf:7b:88:d1:35:37:05:ac:3a:b7:
                    a1:59:be:68:b2:45:7e:51:bd:20:76:75:d9:5b:84:
                    8f:9f:5f:03:cd:c1:2c:93:dd:e1:7a:fa:ae:cd:2e:
                    8d:7a:38:2b:83:49:f2:47:aa:82:a4:53:e6:50:c4:
                    7f:f9:08:e5:e6:86:e4:da:31:ac:17:69:44:51:e2:
                    4a:a6:5c:38:6e:26:87:34:6f:94:52:e2:43:58:63:
                    7f:45:68:04:0c:28:ca:c3:8e:e7:98:75:c4:7f:8d:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:79:AF:EE:52:65:F2:3A:A7:52:86:53:21:67:0F:98:E7:7F:5F:E7
            X509v3 Authority Key Identifier:
                keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3232203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:49:7e:d5:72:76:44:fc:36:25:04:49:bc:c1:f9:5e:bb:32:
         ef:63:4f:0c:0e:4f:13:d5:dd:f6:bc:2b:2d:f5:d7:94:bd:f0:
         ff:76:8a:13:9e:2b:ee:46:12:e0:1a:85:18:fe:1b:9f:a2:ca:
         09:54:eb:e1:90:3c:60:9b:ed:6b:f0:05:60:99:fa:b3:3a:77:
         c3:60:94:2a:6e:f5:4c:35:56:81:76:55:43:3b:09:6d:3b:64:
         4d:c3:5d:88:bc:2c:9b:e2:ac:62:52:f9:39:44:0d:e3:ad:e2:
         19:91:fd:69:81:40:7c:89:99:39:9f:a3:c8:b4:6b:92:11:29:
         e3:60:57:84:62:d3:65:d1:5c:b8:62:bb:c2:22:5e:51:1e:21:
         29:72:27:34:bf:c6:6c:b8:fe:06:42:b0:cc:7d:5e:6a:43:cd:
         af:dc:d6:36:1b:f9:c7:0e:fa:f9:c5:ce:65:44:42:12:bb:21:
         e7:10:f6:8d:c5:c1:7b:cc:0b:9c:65:db:27:ff:ae:ec:93:29:
         76:7a:69:3e:cd:b1:80:98:af:a8:44:33:c0:61:42:22:00:3a:
         cf:d7:14:62:80:71:39:55:60:b6:d1:c1:98:ef:c8:fb:48:2f:
         74:8a:b0:78:63:ff:1c:a5:6f:09:79:51:a1:c9:67:1f:2c:e2:
         fb:be:d7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----