This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39392e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          etUIt/G8bqGhwTLhDXmV5dIcVouIGnrqSoq0NWh3iJA=
Subject key identifier:   5D:52:8A:9F:44:58:9B:24:82:3F:77:97:F5:04:CB:19:54:E7:C0:23
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       0FCA03F47E817159AA419D74B1C104B369FCEBA7
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa
Signing time:             Fri 29 Aug 2025 14:58:41 +0000
ROA not before:           Fri 29 Aug 2025 14:53:41 +0000
ROA not after:            Fri 28 Aug 2026 14:58:41 +0000
asID:                     264137
IP address blocks:        138.97.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ca:03:f4:7e:81:71:59:aa:41:9d:74:b1:c1:04:b3:69:fc:eb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Aug 29 14:53:41 2025 GMT
            Not After : Aug 28 14:58:41 2026 GMT
        Subject: CN=5D528A9F44589B24823F7797F504CB1954E7C023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:44:5f:83:35:26:0e:5c:6b:0e:e7:f2:a0:
                    7a:8f:ec:b2:62:a4:94:2c:34:89:a2:d4:85:1e:6d:
                    bd:af:84:59:6b:48:d7:55:b2:77:29:0e:2a:9b:af:
                    23:0c:60:ce:ae:c5:8f:30:f8:0f:f6:96:f2:3f:bb:
                    be:3e:ea:34:b4:19:7c:29:d3:62:9e:bf:ca:35:92:
                    3b:e4:8b:da:3c:77:93:6c:fc:75:db:00:bb:5b:62:
                    cb:ea:58:8a:3f:15:a0:6e:0f:75:b5:70:e4:a3:9f:
                    0e:8e:a9:b2:47:63:58:af:3e:94:16:75:1f:e8:a3:
                    97:fb:4c:9a:46:f0:a3:b8:b2:18:88:12:07:43:73:
                    15:76:ab:22:62:29:69:4d:c6:8a:36:dd:40:69:9f:
                    e8:d6:7f:16:29:10:f8:1b:51:cc:6b:1c:15:75:58:
                    9f:12:00:91:30:22:63:17:42:fe:9a:4e:28:d9:bc:
                    5d:cd:60:bc:c1:46:01:e0:a7:08:98:bd:7c:83:80:
                    16:5b:91:a3:14:36:85:f0:48:23:4a:d7:78:a4:54:
                    00:fb:fa:fe:e7:62:c3:47:58:b4:07:75:16:2b:c1:
                    71:73:eb:40:48:91:9b:74:b8:0f:3b:ba:5b:57:57:
                    9e:e3:8f:61:dc:7c:b0:73:e7:4e:1c:51:fb:1c:a3:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:52:8A:9F:44:58:9B:24:82:3F:77:97:F5:04:CB:19:54:E7:C0:23
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:42:d8:4d:f3:67:16:11:64:95:1b:34:9f:01:bd:12:ab:4c:
         b1:a9:85:d6:68:40:aa:eb:bd:23:6c:21:45:cb:00:19:b3:04:
         07:f2:3c:a3:34:f8:5a:e4:85:92:70:08:88:d5:99:12:7e:7b:
         8b:f7:c8:7e:6e:bd:b6:f3:9b:47:4e:b1:5b:cf:65:d0:49:34:
         60:c3:0f:11:df:92:0a:3e:5f:09:25:6e:54:78:23:87:4d:b5:
         28:d0:7e:c4:3f:d9:83:68:8b:cf:ce:d9:8f:4b:6d:b4:4f:63:
         65:77:d6:a2:01:8d:2d:6d:df:b5:5f:ef:87:e1:86:0e:07:0e:
         e1:11:06:e8:6d:9f:af:57:53:b9:87:ac:05:f7:f6:0e:ac:c1:
         84:7b:93:70:01:20:4b:95:de:3b:e4:d6:a2:fb:c0:11:05:5c:
         f4:79:ce:30:86:f6:0d:ee:75:79:34:93:37:27:b2:92:8b:a7:
         33:44:81:c9:7b:9e:81:a7:96:1b:a8:77:a0:83:6d:6e:12:04:
         f2:79:0e:87:65:f6:d7:cc:b4:f0:9d:aa:e4:52:ab:84:00:4f:
         7f:ba:d7:78:da:d8:08:0c:73:01:c6:a0:db:b8:a5:2b:0e:95:
         17:b1:d9:e7:d5:b1:8a:0c:8e:fd:7f:ef:cb:89:c1:3f:44:93:
         a8:5e:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:00:45 2025 by rpki-client