This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa
File:                     3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa (raw, json)
Hash identifier:          x0B3IqT2Krmi+WYhcVN0ryBDILnVpSLyMdt5mEDIOSo=
Subject key identifier:   FD:5D:A7:E1:D6:F3:CD:5D:69:3A:DB:7C:0B:51:06:D6:1B:5C:36:50
Certificate issuer:       /CN=D7950E03D821895EF335736E8640695BA4F4AD3E
Certificate serial:       5C0F66F1C7E17554E28834025C332FF4AC76D8F3
Authority key identifier: D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa
Signing time:             Thu 25 Sep 2025 03:34:46 +0000
ROA not before:           Thu 25 Sep 2025 03:29:46 +0000
ROA not after:            Thu 24 Sep 2026 03:34:46 +0000
asID:                     270997
IP address blocks:        138.99.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:66:f1:c7:e1:75:54:e2:88:34:02:5c:33:2f:f4:ac:76:d8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Validity
            Not Before: Sep 25 03:29:46 2025 GMT
            Not After : Sep 24 03:34:46 2026 GMT
        Subject: CN=FD5DA7E1D6F3CD5D693ADB7C0B5106D61B5C3650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:f0:f7:5c:4c:40:56:99:6a:e9:09:63:9e:
                    9e:ae:bb:c2:21:6c:79:1b:14:f7:ea:60:42:90:6f:
                    6c:15:45:f0:34:87:ee:78:7d:3a:46:54:8b:08:ef:
                    47:27:06:ce:74:a1:6d:e0:47:80:32:28:4f:8a:42:
                    9b:d0:15:22:ac:52:e7:83:cc:84:8c:6b:07:6a:3b:
                    f9:ee:f6:d4:bd:ce:17:7d:86:f2:02:d4:d6:c7:6b:
                    92:61:75:a1:9a:bb:f5:6b:c9:1f:4b:84:42:39:c3:
                    d3:89:40:13:35:a8:6c:36:7c:02:39:25:1b:28:4b:
                    20:e7:e0:f3:e2:e7:b6:91:b9:ea:5c:6d:4c:78:e2:
                    5a:98:f9:98:b0:77:94:a0:bd:a6:0d:e6:0b:ec:d5:
                    7b:14:07:08:a6:16:df:bb:6c:ea:e4:4d:c0:1f:a2:
                    f5:0b:fc:60:77:89:eb:3d:29:2c:17:2a:32:6f:ab:
                    f7:6d:30:d8:8b:2a:1f:e6:46:c5:93:e4:f6:8c:02:
                    78:50:17:57:7e:fd:d1:71:45:c9:27:fb:ac:4e:33:
                    7a:a3:0e:81:e2:ac:db:71:6e:3e:56:56:43:55:2e:
                    4c:66:62:9e:79:ac:3b:29:48:62:6a:1c:1c:bb:c2:
                    76:86:65:e0:7c:b7:9d:53:01:63:7b:a5:67:87:5b:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5D:A7:E1:D6:F3:CD:5D:69:3A:DB:7C:0B:51:06:D6:1B:5C:36:50
            X509v3 Authority Key Identifier:
                keyid:D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32332d3233203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:8e:7e:92:9a:0a:05:e3:6b:98:0a:91:40:76:e5:c6:40:
         cd:e4:b0:84:64:ef:17:ea:db:c8:89:46:4b:9d:3b:b9:f1:1e:
         e0:c7:27:73:f2:ed:ae:42:be:1f:b8:95:e7:a0:02:9a:1e:e6:
         2f:7b:4f:a3:d0:22:e4:9f:a3:28:c3:92:04:6e:5c:9a:a2:c3:
         d6:5b:b6:65:df:a2:90:7e:05:70:d5:e6:d4:ff:5a:bc:ed:4f:
         ec:51:26:cf:a4:95:9b:7a:c3:00:cd:77:d5:b3:ae:56:1c:29:
         56:96:9a:eb:29:a1:2d:05:55:7a:43:ee:e9:5d:e5:0d:5e:f8:
         fe:66:2d:e5:38:ff:7e:d0:a5:14:9e:a1:8f:d9:ac:7d:f3:00:
         1a:43:18:b2:6a:06:6b:50:70:66:df:1b:e2:02:2b:ea:77:e1:
         09:63:a6:7f:31:52:6b:e7:ef:60:28:0f:83:7d:40:24:03:38:
         3f:94:d9:21:2f:74:b1:fd:09:3c:91:e9:42:97:14:b9:ff:95:
         67:31:f5:ee:b3:61:8b:5a:a8:69:44:0a:38:80:23:8c:eb:51:
         68:0b:20:f2:04:3f:b6:15:7e:a6:eb:86:92:6e:d6:26:a1:af:
         5f:78:5c:5c:15:d1:d5:b7:41:71:1c:f9:74:46:39:32:e3:33:
         92:8b:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----