This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          sWLUrg/0RyFgnhHVNUzSve7N0DwgVfQHLJoNG32Ql1U=
Subject key identifier:   43:66:C1:8F:27:4D:1C:25:58:C8:5E:BF:DF:8D:CE:47:C7:50:1E:D1
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       3F267D31E4E0EA79A332EEF2047BABD6A428EFB1
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa
Signing time:             Thu 06 Mar 2025 18:54:59 +0000
ROA not before:           Thu 06 Mar 2025 18:49:59 +0000
ROA not after:            Thu 05 Mar 2026 18:54:59 +0000
asID:                     271111
IP address blocks:        192.140.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:26:7d:31:e4:e0:ea:79:a3:32:ee:f2:04:7b:ab:d6:a4:28:ef:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Mar  6 18:49:59 2025 GMT
            Not After : Mar  5 18:54:59 2026 GMT
        Subject: CN=4366C18F274D1C2558C85EBFDF8DCE47C7501ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:b1:b8:ea:4a:f9:65:73:90:50:1f:7d:98:
                    4a:34:a1:b0:9c:0f:e2:f4:8a:08:70:0e:68:23:e0:
                    82:7a:30:7b:3d:19:cf:59:03:97:90:61:47:2c:48:
                    26:f3:ac:dd:b9:2d:2f:55:c9:13:ea:83:a0:0b:99:
                    55:84:fb:1a:9b:4d:25:af:b8:c8:b4:0b:26:eb:3d:
                    61:9e:ef:bf:45:27:64:e9:08:88:74:1e:a0:0d:08:
                    d7:e9:37:43:50:ca:bd:84:9a:a3:4d:01:c4:32:56:
                    b9:8a:7f:68:55:8e:c6:ef:cf:66:dc:59:c3:a7:ab:
                    4c:23:d0:d6:ce:0f:c0:19:0e:16:0b:6d:2d:e9:24:
                    24:a2:ab:df:ee:9b:a8:c1:64:c9:e0:d9:68:7f:61:
                    bb:ac:13:fc:c0:4d:df:fe:a2:3e:45:72:f4:3a:87:
                    44:11:b9:df:8d:b9:d3:69:32:d0:78:e1:39:4e:43:
                    8b:d2:d0:cb:7d:da:61:79:c1:78:82:36:92:b5:c4:
                    97:ec:09:f3:3f:88:05:3d:8b:d4:6b:f6:72:5f:99:
                    f8:10:70:e5:8e:47:c0:ba:5b:03:fa:42:6e:62:07:
                    6b:34:05:26:fe:c2:e4:f5:bb:6e:ed:f2:e0:52:d3:
                    34:c4:a0:34:72:b8:75:cf:61:fd:9d:c5:79:f6:dd:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:66:C1:8F:27:4D:1C:25:58:C8:5E:BF:DF:8D:CE:47:C7:50:1E:D1
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:4a:99:07:87:c8:6b:49:e3:1d:2e:8e:88:7d:fe:1b:c7:d3:
         de:01:44:94:ad:15:78:04:3e:16:03:96:04:58:05:1a:d3:31:
         50:c4:9f:d1:3c:d5:cb:3e:6f:f6:2e:d2:12:f2:d2:7b:64:b0:
         c3:17:fb:d0:91:e1:b5:63:3c:92:7c:06:b0:91:83:fe:81:11:
         56:13:82:44:c2:ae:c1:6a:6b:ba:68:86:af:bd:b8:d0:7e:e3:
         ee:ae:0e:87:c7:59:7d:2f:b7:45:f7:aa:34:40:a2:03:7e:87:
         85:d2:1b:ce:b8:fc:24:d8:ca:f4:cc:06:a8:87:20:fa:db:a2:
         a5:14:a2:12:3e:1f:4f:3c:27:fc:a2:82:ad:13:f8:5c:19:01:
         ba:5f:4c:3a:1d:2d:b7:f3:20:5e:d6:2d:bb:ed:64:d3:e9:7a:
         bd:ac:b4:cf:31:bb:fc:ba:32:cd:08:c5:ee:da:6f:fc:79:5e:
         d7:c7:5e:43:5b:e8:03:a0:25:65:7a:7d:2f:49:96:84:26:27:
         3b:05:8b:31:52:ea:32:0a:c3:a5:76:2a:63:5d:e9:5a:60:dc:
         e5:ee:17:b4:c1:17:85:70:d8:fc:8b:54:17:60:30:9a:8d:54:
         a3:1e:34:bc:9b:33:8e:83:79:d2:69:0c:42:51:6b:24:70:44:
         6e:d0:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----