This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39382e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          vlyBEGpqjkPp1ujatqOS8nPpGuzBByLwdmXfbEJo98Q=
Subject key identifier:   F4:C7:D5:73:8B:74:6B:4E:BC:D6:E9:03:72:DF:17:2B:3D:36:53:42
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       630237EB63F6079A0062D38A136918D49EC1CE66
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa
Signing time:             Fri 29 Aug 2025 14:58:41 +0000
ROA not before:           Fri 29 Aug 2025 14:53:41 +0000
ROA not after:            Fri 28 Aug 2026 14:58:41 +0000
asID:                     264137
IP address blocks:        138.97.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:02:37:eb:63:f6:07:9a:00:62:d3:8a:13:69:18:d4:9e:c1:ce:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Aug 29 14:53:41 2025 GMT
            Not After : Aug 28 14:58:41 2026 GMT
        Subject: CN=F4C7D5738B746B4EBCD6E90372DF172B3D365342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:68:49:ce:56:9e:9e:bd:3e:65:b9:b0:d2:
                    93:a8:ab:27:df:cd:52:74:b3:56:fc:f8:64:b2:91:
                    40:af:72:7b:3a:92:fd:ad:67:0f:09:3b:b1:d2:8d:
                    5c:6e:22:de:6a:41:47:a7:82:d4:24:df:e5:b7:a4:
                    ac:3c:01:fb:d9:67:b0:bf:af:f8:75:0c:99:e4:b9:
                    8c:10:d7:82:d7:5d:3f:46:4d:e7:fd:56:17:c3:22:
                    1c:28:61:0b:97:6c:4f:a4:8a:74:8c:69:d7:40:56:
                    ba:2c:99:4b:83:47:82:01:4e:5a:4e:16:de:fb:b3:
                    36:aa:87:d1:fd:11:83:8f:62:4a:50:86:72:c6:03:
                    e8:52:01:0b:5f:e0:34:7b:ad:ab:bf:52:d4:b5:63:
                    08:8f:24:37:ea:c1:d3:43:29:86:17:56:27:71:31:
                    54:06:47:23:1e:41:6d:32:75:a2:10:41:b8:60:af:
                    42:8d:1f:4a:6f:9b:5f:a9:da:94:a8:70:fd:98:2e:
                    e8:92:53:e2:a9:9b:6c:01:d7:81:0d:e6:80:d0:e1:
                    88:98:8e:fb:3e:49:17:82:4c:ec:2d:c0:35:8d:d3:
                    16:9a:c8:60:4a:b3:bc:d5:89:a2:7d:d5:fc:03:89:
                    bf:b6:8e:a3:6e:6c:69:e1:c2:b5:f8:f7:e1:31:52:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C7:D5:73:8B:74:6B:4E:BC:D6:E9:03:72:DF:17:2B:3D:36:53:42
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e8:a9:2d:59:e5:f3:a7:70:45:3f:c9:c3:24:23:99:99:fe:
         67:e0:e3:ec:81:8f:6b:01:2f:d9:15:7a:bd:74:4c:59:c3:6b:
         eb:ed:0e:43:63:4a:b7:8c:a1:fc:8d:31:bb:f8:3d:d2:e5:c9:
         2a:bd:90:e7:cc:ab:79:c1:47:59:e3:62:1d:05:7f:d3:bf:23:
         82:25:6c:fb:5d:08:65:00:f4:62:0c:98:2c:78:d4:b5:bf:c0:
         f5:67:dc:fd:0d:30:4f:ec:7c:8e:28:a3:79:29:66:a5:4e:5d:
         c7:0f:56:18:9b:2e:1c:01:7b:41:22:40:eb:de:a5:08:85:38:
         9d:78:90:a4:10:77:c7:4d:13:ec:05:74:69:c5:e5:db:cd:66:
         01:de:c3:c7:26:f7:a2:60:d9:e3:9f:f2:e5:f2:63:cf:c8:39:
         e1:76:76:a5:6d:6f:fb:34:94:db:e4:c5:33:46:2a:ee:3d:7c:
         d4:9d:a9:e4:54:ef:fb:64:ca:d4:7f:a1:d5:53:e0:b2:23:b2:
         e2:a4:32:c4:2b:22:50:19:42:1e:95:1d:f3:b8:d5:de:04:ca:
         1f:09:7e:73:62:85:b5:86:07:6d:19:af:7d:98:8d:12:d2:0a:
         2a:0f:8e:39:1c:d3:ea:db:41:b5:d6:a0:03:cf:b0:06:0c:82:
         60:21:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:00:44 2025 by rpki-client