This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39362e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          4Qn3QMDBL/i9GBxOLvVXSd2aG39SjB/G3Ys08LrVJpQ=
Subject key identifier:   9A:5E:29:CD:81:0A:A7:1A:A3:20:08:A4:63:68:8D:01:7F:61:DA:8E
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       6B1B508B889DB46F2C38FD059B7E54D9395A96AC
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32342d3234203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:47 +0000
ROA not before:           Thu 06 Mar 2025 08:04:47 +0000
ROA not after:            Thu 05 Mar 2026 08:09:47 +0000
asID:                     264137
IP address blocks:        138.97.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1b:50:8b:88:9d:b4:6f:2c:38:fd:05:9b:7e:54:d9:39:5a:96:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:47 2025 GMT
            Not After : Mar  5 08:09:47 2026 GMT
        Subject: CN=9A5E29CD810AA71AA32008A463688D017F61DA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:72:fe:a8:b6:39:14:72:cc:62:b5:71:b4:
                    f8:0b:bf:23:16:ae:0e:94:09:29:96:20:6d:9a:72:
                    9e:e9:9e:f0:ad:51:42:48:3f:18:bc:04:2b:7b:52:
                    9f:81:b0:f7:d1:01:48:b3:67:5c:cb:c4:cc:cc:44:
                    9a:0d:6b:b4:a3:e7:bd:e7:ac:62:b0:9c:b9:bb:6d:
                    0d:3e:e2:80:ca:ad:5b:a1:82:f9:e1:48:2d:cf:ed:
                    da:28:53:68:bd:11:3a:c0:ad:24:79:f3:a6:27:26:
                    bf:72:e9:60:c2:51:70:d4:ed:04:7a:1c:f1:2f:a4:
                    09:d7:a6:f6:ac:ee:6a:ec:07:4e:58:ef:e5:99:a2:
                    ed:54:c1:9e:c3:2d:fe:86:33:7a:9f:2e:33:4d:0e:
                    61:d1:8d:fc:c9:dc:a2:ca:e9:f5:30:5b:40:0f:34:
                    45:1e:38:20:65:5a:57:f2:6d:05:5b:7e:72:41:d1:
                    73:59:ad:94:fd:e9:1e:59:c9:96:f3:e7:49:d4:4d:
                    f6:83:0a:4d:06:23:b2:09:68:46:47:88:87:be:23:
                    79:5a:f9:0f:0b:79:fc:54:7f:36:25:47:be:19:72:
                    83:38:2e:d1:0e:a5:47:9f:00:37:0f:1c:da:7a:a1:
                    c1:a1:02:4b:93:64:28:68:69:61:51:da:16:76:54:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:29:CD:81:0A:A7:1A:A3:20:08:A4:63:68:8D:01:7F:61:DA:8E
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:33:b3:b6:fc:b8:e3:af:15:b0:d3:23:d2:25:47:1f:44:
         0c:05:db:fa:78:ef:03:ec:e0:47:77:17:3b:0f:f5:93:f8:0d:
         49:dc:3e:86:70:07:95:90:87:0e:08:cb:6f:f5:5e:01:63:f3:
         ce:52:8a:b1:a8:60:c3:54:28:87:10:68:25:8e:23:23:9f:f0:
         12:c1:43:41:77:c1:55:f0:c4:8a:5c:85:58:ba:7f:d5:d3:e0:
         0a:65:07:9d:8e:1f:8b:a6:7a:62:1e:6b:67:c7:8a:1e:61:18:
         30:dd:56:ea:55:0d:85:56:7b:4c:bc:8c:c4:2b:02:8e:6b:eb:
         ae:06:58:4f:bd:0b:62:19:04:c3:8f:62:b1:ca:06:86:0c:0b:
         23:41:f8:d5:91:35:22:e5:35:74:41:c8:57:27:4c:7f:cd:ba:
         24:13:8e:ee:21:1c:67:97:f0:86:e9:69:b0:93:d1:11:3e:5c:
         94:cc:6c:b1:66:39:97:ce:49:54:0f:fa:a8:d9:32:a0:af:84:
         66:c8:3c:53:10:0e:ce:fd:ba:ee:b3:35:3d:9f:29:5b:8a:1a:
         d6:d0:13:eb:8b:cb:4f:c3:0b:18:0b:a6:3f:97:05:ff:11:2a:
         0d:8f:25:1c:7e:dd:c5:40:3c:c7:2d:c5:84:60:2e:b2:40:06:
         49:b3:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----