This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa
File:                     3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa (raw, json)
Hash identifier:          EXr6rI8lMFcz7uVc7Id2fxWAz5FobEZ77zuwjbh/zI4=
Subject key identifier:   26:B1:3E:9E:9E:86:C3:85:DC:5E:36:F4:A9:F6:02:28:1D:E6:DE:C3
Certificate issuer:       /CN=D7950E03D821895EF335736E8640695BA4F4AD3E
Certificate serial:       7317B523963DFD8BF0F567202C465606A961E764
Authority key identifier: D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa
Signing time:             Thu 25 Sep 2025 03:34:48 +0000
ROA not before:           Thu 25 Sep 2025 03:29:48 +0000
ROA not after:            Thu 24 Sep 2026 03:34:48 +0000
asID:                     270997
IP address blocks:        138.99.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:17:b5:23:96:3d:fd:8b:f0:f5:67:20:2c:46:56:06:a9:61:e7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Validity
            Not Before: Sep 25 03:29:48 2025 GMT
            Not After : Sep 24 03:34:48 2026 GMT
        Subject: CN=26B13E9E9E86C385DC5E36F4A9F602281DE6DEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:ff:46:35:6b:4e:5d:41:4f:5c:d8:de:8d:
                    df:2c:87:4e:18:eb:0b:8c:56:25:bb:7e:6d:10:a0:
                    be:f1:bf:43:8f:ef:31:c3:4a:d6:c2:73:04:d8:c0:
                    b0:54:aa:89:d1:cd:f1:b4:71:3d:ae:56:a6:cb:64:
                    ff:2f:3a:4a:b8:e7:61:7d:e5:8d:c7:c0:7e:92:d3:
                    4b:d6:f4:7e:4c:25:56:e7:80:3b:47:a1:45:ce:b8:
                    b3:6c:fe:ee:18:c5:73:9e:c1:d5:dd:d8:c1:e8:12:
                    b8:72:0e:d5:0b:b7:de:87:da:81:ee:a8:dc:99:09:
                    f2:25:38:5c:30:46:92:b3:d8:68:75:a0:a6:65:34:
                    41:2c:f3:69:3e:6b:70:10:b8:36:23:6a:22:1c:50:
                    52:bc:0d:15:2c:4d:e2:79:44:c1:99:56:85:1f:5e:
                    e1:5b:43:bc:43:08:a8:8b:18:51:20:ec:f7:c0:e8:
                    d9:ac:4a:ce:6d:d1:47:0f:6c:40:15:c3:8a:f5:7c:
                    db:6c:eb:c1:99:b9:3e:eb:79:40:24:6d:02:26:4b:
                    62:cb:11:a3:56:58:9a:75:e2:0a:bd:43:31:5b:06:
                    20:02:f4:38:55:d8:8e:11:54:fd:eb:b4:a0:f8:45:
                    cf:a8:ca:7d:74:21:de:e7:57:e6:ee:f9:4e:87:a4:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B1:3E:9E:9E:86:C3:85:DC:5E:36:F4:A9:F6:02:28:1D:E6:DE:C3
            X509v3 Authority Key Identifier:
                keyid:D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:70:da:7d:52:db:7d:40:9c:a7:9a:7b:d4:21:04:5c:01:
         84:f4:e0:21:66:4a:e0:ec:5a:5c:3c:02:37:3b:1b:ba:74:26:
         3b:ff:6a:a1:0f:a2:b9:75:bb:25:b7:24:3f:61:99:38:b6:dc:
         48:e9:97:b5:a9:36:0a:a2:e4:ee:77:b9:c6:c2:da:ac:c4:f2:
         a2:e5:e0:4e:66:35:4b:d0:f9:fa:86:52:e3:1f:ee:47:37:6c:
         14:21:85:31:92:2e:ad:ff:6f:e8:b3:00:27:1c:82:1f:77:71:
         6f:04:51:86:d4:2d:f1:ff:fb:ef:ca:d4:3b:b9:ed:79:1c:e2:
         eb:e7:c0:62:4f:9b:72:c1:f7:c1:fe:90:bf:bc:4c:32:f6:c3:
         df:77:8f:64:09:32:2f:25:6f:d7:6b:26:05:e8:77:0c:a9:2c:
         a4:be:2c:e5:7c:16:53:3e:5c:54:d5:30:73:e8:11:96:c6:b1:
         34:cf:44:6f:2c:e4:60:3d:55:73:bb:8f:ed:71:d9:4c:c1:56:
         70:1c:83:8a:9c:b0:fe:df:bd:c6:bd:03:13:bb:da:6d:0d:b0:
         66:92:b4:9f:f8:a0:bb:c0:fa:a4:5f:4b:a6:39:43:1e:4f:8f:
         c0:3c:5f:9a:43:91:1f:ca:7d:1b:49:5e:1b:d4:a7:51:e7:d2:
         a3:d5:c7:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcxe1I5Y9/Yvw9WcgLEZWBqlh52QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5NTBFMDNEODIxODk1RUYzMzU3MzZFODY0MDY5NUJB
NEY0QUQzRTAeFw0yNTA5MjUwMzI5NDhaFw0yNjA5MjQwMzM0NDhaMDMxMTAvBgNV
BAMTKDI2QjEzRTlFOUU4NkMzODVEQzVFMzZGNEE5RjYwMjI4MURFNkRFQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTv9GNWtOXUFPXNjejd8sh04Y
6wuMViW7fm0QoL7xv0OP7zHDStbCcwTYwLBUqonRzfG0cT2uVqbLZP8vOkq452F9
5Y3HwH6S00vW9H5MJVbngDtHoUXOuLNs/u4YxXOewdXd2MHoErhyDtULt96H2oHu
qNyZCfIlOFwwRpKz2Gh1oKZlNEEs82k+a3AQuDYjaiIcUFK8DRUsTeJ5RMGZVoUf
XuFbQ7xDCKiLGFEg7PfA6NmsSs5t0UcPbEAVw4r1fNts68GZuT7reUAkbQImS2LL
EaNWWJp14gq9QzFbBiAC9DhV2I4RVP3rtKD4Rc+oyn10Id7nV+bu+U6HpM+5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJrE+np6Gw4XcXjb0qfYCKB3m3sMwHwYDVR0j
BBgwFoAU15UOA9ghiV7zNXNuhkBpW6T0rT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhXZTZCdnB3WkJLWjRUTFVWUnFEb0ZUYndSRGI4dXpnN3dqSnI4Vjlh
Q00vMC9ENzk1MEUwM0Q4MjE4OTVFRjMzNTczNkU4NjQwNjk1QkE0RjRBRDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OTUwRTAzRDgyMTg5NUVG
MzM1NzM2RTg2NDA2OTVCQTRGNEFEM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoV2U2QnZwd1pCS1o0VExVVlJxRG9GVGJ3UkRiOHV6Zzd3akpyOFY5YUNNLzAv
MzEzMzM4MmUzOTM5MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzOTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKY3wwDQYJKoZIhvcNAQELBQADggEBAC9NcNp9
Utt9QJynmnvUIQRcAYT04CFmSuDsWlw8Ajc7G7p0Jjv/aqEPorl1uyW3JD9hmTi2
3Ejpl7WpNgqi5O53ucbC2qzE8qLl4E5mNUvQ+fqGUuMf7kc3bBQhhTGSLq3/b+iz
ACccgh93cW8EUYbULfH/++/K1Du57Xkc4uvnwGJPm3LB98H+kL+8TDL2w993j2QJ
Mi8lb9drJgXodwypLKS+LOV8FlM+XFTVMHPoEZbGsTTPRG8s5GA9VXO7j+1x2UzB
VnAcg4qcsP7fvca9AxO72m0NsGaStJ/4oLvA+qRfS6Y5Qx5Pj8A8X5pDkR/KfRtJ
XhvUp1Hn0qPVx/g=
-----END CERTIFICATE-----