This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/3133312e3232312e3133322e302f32322d3234203d3e20323634343239.roa
File:                     3133312e3232312e3133322e302f32322d3234203d3e20323634343239.roa (raw, json)
Hash identifier:          a27Kyl8uwoD3BNv5lWKqfWcw5mbVizuhYvOIPwoPNw0=
Subject key identifier:   11:52:3B:F6:98:F5:F3:8D:45:41:A9:2E:5D:C0:F5:98:43:CA:4D:B4
Certificate issuer:       /CN=A524FE3F2C38E55657BE6FF4933831B625A9332B
Certificate serial:       0DC8111E0C6DF9CCE41941FF951A992AC63FB426
Authority key identifier: A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/3133312e3232312e3133322e302f32322d3234203d3e20323634343239.roa
Signing time:             Thu 06 Mar 2025 06:13:06 +0000
ROA not before:           Thu 06 Mar 2025 06:08:06 +0000
ROA not after:            Thu 05 Mar 2026 06:13:06 +0000
asID:                     264429
IP address blocks:        131.221.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c8:11:1e:0c:6d:f9:cc:e4:19:41:ff:95:1a:99:2a:c6:3f:b4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A524FE3F2C38E55657BE6FF4933831B625A9332B
        Validity
            Not Before: Mar  6 06:08:06 2025 GMT
            Not After : Mar  5 06:13:06 2026 GMT
        Subject: CN=11523BF698F5F38D4541A92E5DC0F59843CA4DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c5:d5:2d:8a:33:c0:18:05:87:90:d1:fa:70:
                    c0:c7:7c:b9:14:e0:eb:d2:4c:88:3c:1a:cd:76:89:
                    a3:7f:82:2d:82:49:7d:e0:1e:21:b3:b4:47:52:17:
                    e6:4a:40:73:75:12:f9:b2:de:37:5a:10:d2:8c:1c:
                    35:6f:78:4b:92:4d:a5:2c:36:21:39:0c:bb:47:12:
                    bc:0f:3a:5b:8f:35:6f:3d:5f:bd:20:af:47:fe:0c:
                    6c:9e:4d:2a:37:b8:d8:3b:79:01:da:78:2f:47:05:
                    44:56:6d:40:ce:46:1e:bd:1e:0c:c4:90:63:57:41:
                    c1:74:b8:13:c4:e1:eb:06:bd:3d:ca:71:21:f2:f6:
                    94:f0:f7:44:dc:16:22:2e:82:52:d9:85:aa:92:7c:
                    22:80:ef:aa:13:50:21:3d:81:7e:e1:83:d2:5d:c4:
                    39:a7:23:6b:66:30:94:f9:97:d6:ae:0a:40:8d:e3:
                    db:64:8d:11:da:0b:7d:f3:10:92:ad:4b:93:d5:f3:
                    4f:d1:c2:07:9d:5b:60:4a:66:ce:a2:3d:e6:9c:7f:
                    ed:22:6a:1a:31:fb:b8:f0:d9:2e:b6:61:4b:3f:37:
                    69:c6:bc:29:0c:fb:f9:40:cd:5c:e4:7c:75:8f:9a:
                    08:bd:9c:e5:d2:e9:07:b4:4e:0d:33:98:13:67:f2:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:3B:F6:98:F5:F3:8D:45:41:A9:2E:5D:C0:F5:98:43:CA:4D:B4
            X509v3 Authority Key Identifier:
                keyid:A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/3133312e3232312e3133322e302f32322d3234203d3e20323634343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:73:12:c7:60:bc:b7:49:58:15:a7:b7:ce:b2:3c:82:c1:
         71:68:3f:b1:1e:9b:b0:8d:4b:52:05:fd:52:81:3e:94:af:ee:
         38:b5:75:1a:34:69:b5:81:62:58:bf:bd:5e:4a:d8:73:8b:a5:
         3f:f3:5f:b3:3a:0b:d8:f7:4a:78:cc:e4:49:2d:03:46:c6:77:
         4d:a2:de:a2:66:87:88:67:d8:b4:9a:26:fc:f1:db:62:25:43:
         a7:c9:8f:d0:40:18:ee:4d:51:55:88:f8:5e:23:a0:79:8b:63:
         fe:3f:31:3d:cb:fb:31:f7:6e:d6:18:c7:67:b8:62:29:66:da:
         88:37:09:c5:c6:23:ad:3b:45:17:ff:fe:05:e2:92:b9:77:c1:
         f1:3b:59:7b:4e:44:00:c8:fa:cf:bc:08:a3:10:07:ec:cd:1c:
         90:6f:ab:1e:00:9d:86:4d:0b:72:0c:ca:af:28:cc:ee:56:5a:
         c6:19:81:75:50:da:2c:ac:87:1c:67:f7:b2:3f:e3:52:e4:5c:
         65:47:4e:6d:bf:12:41:a1:4d:d5:b2:57:1b:85:3f:fe:e3:6c:
         cd:9d:58:8d:f7:9a:ce:e8:4a:8c:dc:ce:63:6c:99:25:77:2e:
         df:16:40:77:c6:15:de:0f:d3:14:5b:ef:5f:fa:41:d6:b7:cb:
         da:e8:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----