This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39382e302f32332d3233203d3e20323634313337.roa
File:                     3133382e39372e39382e302f32332d3233203d3e20323634313337.roa (raw, json)
Hash identifier:          qz1m+VbMyn5RyDkQsUZupbw/WYECfXfGZF+SGSU2Aks=
Subject key identifier:   F5:A6:81:5E:C9:95:DB:AF:E1:E3:E9:17:F9:61:61:0A:3A:CA:50:4F
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       4A8CA4F8C469C1E0C7C4A231F2756342009D7E1F
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39382e302f32332d3233203d3e20323634313337.roa
Signing time:             Fri 29 Aug 2025 14:58:41 +0000
ROA not before:           Fri 29 Aug 2025 14:53:41 +0000
ROA not after:            Fri 28 Aug 2026 14:58:41 +0000
asID:                     264137
IP address blocks:        138.97.98.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8c:a4:f8:c4:69:c1:e0:c7:c4:a2:31:f2:75:63:42:00:9d:7e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Aug 29 14:53:41 2025 GMT
            Not After : Aug 28 14:58:41 2026 GMT
        Subject: CN=F5A6815EC995DBAFE1E3E917F961610A3ACA504F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:eb:5b:52:9f:16:84:b4:4e:5c:aa:c6:39:
                    54:cd:05:e9:79:01:b4:ac:fb:e0:7b:5b:28:7e:e5:
                    4a:68:06:7a:da:c4:75:88:c4:e1:09:e0:e5:86:ac:
                    47:57:13:6e:02:d3:e9:85:0f:ae:05:bb:76:5d:b5:
                    b5:78:25:b0:23:d2:e5:59:87:b4:0d:b6:1d:74:70:
                    e6:f2:18:fe:a8:ce:3b:e6:98:b7:6f:ef:63:6c:04:
                    5c:94:8f:d2:53:09:ce:da:62:13:3d:81:f4:d7:15:
                    2a:05:bb:68:ec:43:a9:5f:8f:5f:9b:e1:ed:27:b4:
                    ed:99:05:55:fe:e9:de:97:19:97:c7:93:5b:17:b9:
                    90:91:08:bd:02:89:c2:a7:10:73:43:6c:61:0e:b3:
                    87:fa:b0:9f:3f:18:79:c4:31:48:6c:01:b3:08:2b:
                    77:0f:92:b1:52:f0:67:5d:ca:cc:44:62:b6:df:5f:
                    be:c5:67:92:41:13:da:1d:fa:09:7e:c6:62:d3:69:
                    60:6d:5e:01:89:95:05:09:5b:5b:68:e2:85:19:98:
                    36:77:fc:c8:1c:70:20:72:6f:3d:8a:bc:1a:a1:95:
                    38:a8:a7:a1:61:83:31:7a:31:9e:d5:45:84:9c:2b:
                    0e:df:db:1b:be:f5:9e:76:10:e2:88:a1:4b:b9:7c:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A6:81:5E:C9:95:DB:AF:E1:E3:E9:17:F9:61:61:0A:3A:CA:50:4F
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39382e302f32332d3233203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:7a:8a:0d:ab:89:0c:64:bd:73:73:7a:bb:f8:e0:02:a4:8d:
         4e:6e:4f:c7:51:f5:62:31:a4:ea:99:b8:aa:68:25:a0:d9:11:
         fd:80:2e:d6:21:a0:db:24:5f:33:ae:12:74:c7:b3:37:34:d8:
         93:87:87:ac:14:a6:d9:6f:85:48:64:67:3f:06:6d:c2:aa:9e:
         06:77:08:2b:ab:86:a0:c3:e3:28:2e:7a:91:b4:e2:ee:32:6d:
         56:8d:7e:63:77:47:98:d8:b1:cd:05:b0:26:d9:27:5b:db:ea:
         e5:ae:c2:95:19:ab:42:a2:41:f1:74:d3:40:42:6f:e1:25:47:
         03:f1:c2:ca:29:76:c0:9b:06:ba:da:66:c9:02:bb:87:ca:f6:
         cd:87:e3:9c:d2:9e:2d:3b:80:ba:46:b3:3a:88:a5:8e:d0:e8:
         a1:81:5c:94:1a:cb:ec:c2:88:04:5d:e7:10:61:4a:1b:ef:67:
         91:b2:43:a2:e6:db:2d:47:1a:0a:dc:45:0f:00:36:5c:e0:26:
         44:6b:35:5b:e1:d0:30:2e:be:75:d9:e4:1d:94:dd:60:01:50:
         27:b2:df:e1:90:38:2a:9b:1e:53:3c:4e:48:64:58:50:73:6d:
         4b:3f:5c:84:db:a3:83:30:64:2c:fb:b4:27:9b:b4:f2:ac:87:
         84:37:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----