This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa
File:                     3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa (raw, json)
Hash identifier:          3szuhmk400bVVR5Hdy33e2ROnDuMTy/lFxXTKBNpWnA=
Subject key identifier:   FB:D2:39:BC:18:0E:E1:62:D4:CB:58:12:9B:74:4C:6D:E1:B7:35:82
Certificate issuer:       /CN=D7950E03D821895EF335736E8640695BA4F4AD3E
Certificate serial:       7B68FBF209EC379264AB624C37F66FC5445DF869
Authority key identifier: D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa
Signing time:             Thu 25 Sep 2025 03:34:50 +0000
ROA not before:           Thu 25 Sep 2025 03:29:50 +0000
ROA not after:            Thu 24 Sep 2026 03:34:50 +0000
asID:                     270997
IP address blocks:        138.99.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:68:fb:f2:09:ec:37:92:64:ab:62:4c:37:f6:6f:c5:44:5d:f8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Validity
            Not Before: Sep 25 03:29:50 2025 GMT
            Not After : Sep 24 03:34:50 2026 GMT
        Subject: CN=FBD239BC180EE162D4CB58129B744C6DE1B73582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:5b:74:f1:31:d5:8b:0f:81:76:e0:3f:af:
                    02:45:92:3d:8f:32:a7:d8:b4:4d:6e:b0:da:af:2f:
                    f3:dd:fb:f8:f0:6b:c5:97:74:ee:96:55:24:ec:8e:
                    65:3e:4f:70:48:b0:68:bc:5c:7c:f8:b9:03:74:d2:
                    25:8d:ef:12:40:85:47:7f:7c:0c:4d:35:e5:e3:94:
                    fe:12:3c:88:79:99:ab:fb:b7:bd:f4:5a:87:0d:07:
                    48:a8:80:21:31:25:f1:ce:e2:aa:bf:cc:4d:b0:f7:
                    44:39:1c:7f:10:68:6a:83:41:e1:1f:71:b0:ce:62:
                    49:33:96:40:70:08:d2:2c:38:30:4d:86:54:22:08:
                    1a:f6:47:5c:70:77:a2:32:85:39:d2:18:e7:68:95:
                    86:b4:e9:2a:41:6e:d3:88:c8:79:4e:e9:fd:b5:a2:
                    91:13:e6:ac:0e:de:92:9d:c6:e0:83:45:f4:06:96:
                    2b:46:37:ab:b4:0e:08:c8:9d:58:2d:58:b7:d8:15:
                    42:d0:82:84:ca:a5:74:97:de:cf:af:92:84:c8:d5:
                    ff:6c:25:29:b8:c4:41:c2:36:c4:5d:af:e4:04:61:
                    48:6e:be:0c:b8:ec:78:ad:ea:b2:d2:16:3c:a3:d1:
                    53:15:82:36:62:0f:b2:84:4e:1e:73:a5:a0:7a:56:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:39:BC:18:0E:E1:62:D4:CB:58:12:9B:74:4C:6D:E1:B7:35:82
            X509v3 Authority Key Identifier:
                keyid:D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:bf:5c:1c:49:80:ed:b4:c1:23:91:ba:9b:0c:6a:d0:ce:
         f0:f1:b5:8c:6e:9e:0a:f2:de:47:6a:ba:3e:7d:16:f7:fe:f8:
         ba:be:e5:da:c1:15:4e:df:ec:57:08:78:53:05:51:34:24:d8:
         88:fa:8d:70:b6:7e:74:e6:7c:42:0d:5a:12:7f:44:c6:5c:ed:
         b3:64:9a:3d:6c:30:92:e6:84:2c:53:47:f2:b8:b1:00:ba:a5:
         47:20:1f:d9:fe:44:eb:ee:23:d1:09:b7:7d:df:43:ac:50:9b:
         d7:42:d3:84:bb:91:72:46:db:b4:ab:8f:29:1a:6e:9c:f0:88:
         57:12:ae:6a:2d:d6:ce:29:e1:09:2f:b8:d7:d7:cb:bc:a3:0b:
         71:85:4d:f7:7d:bd:f3:4b:0d:17:e8:3f:77:f0:a9:2f:c4:95:
         2a:db:77:10:9f:ad:ef:e3:fc:de:b8:2c:c1:c4:97:cc:95:65:
         58:7e:11:a4:2e:85:ab:35:f4:b4:40:4a:cb:4a:5c:8f:6f:65:
         cd:86:72:89:e8:e9:a1:20:70:32:fe:56:f6:6e:3e:30:be:b6:
         f3:57:4c:5a:09:0a:95:b7:ff:4b:09:68:e9:82:f8:40:c2:09:
         73:3c:27:35:f2:3f:e0:ce:9b:d3:e3:3b:e2:fd:e0:52:8a:81:
         90:11:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:56:14 2025 by rpki-client