This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa
File:                     3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa (raw, json)
Hash identifier:          w9P4SxGRsSfdzR304rlFectA+uHH3MtN6faKkxHV3qo=
Subject key identifier:   A0:CA:67:02:66:68:EA:BF:0E:83:30:03:B4:BE:6A:FA:1B:1B:58:93
Certificate issuer:       /CN=D7950E03D821895EF335736E8640695BA4F4AD3E
Certificate serial:       399250B95799A3CB1FAF562F79AFC598F6FEBB6C
Authority key identifier: D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa
Signing time:             Thu 25 Sep 2025 03:34:50 +0000
ROA not before:           Thu 25 Sep 2025 03:29:50 +0000
ROA not after:            Thu 24 Sep 2026 03:34:50 +0000
asID:                     270997
IP address blocks:        138.99.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:92:50:b9:57:99:a3:cb:1f:af:56:2f:79:af:c5:98:f6:fe:bb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Validity
            Not Before: Sep 25 03:29:50 2025 GMT
            Not After : Sep 24 03:34:50 2026 GMT
        Subject: CN=A0CA67026668EABF0E833003B4BE6AFA1B1B5893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:f1:2c:cb:3d:9c:01:d1:88:80:8e:e6:b4:
                    46:81:b6:4e:73:b7:34:78:4b:0a:a3:7a:c9:ce:fd:
                    0a:4d:6b:68:c9:94:0c:6d:94:ab:f5:76:05:20:f8:
                    40:7b:93:73:d8:58:a4:14:8c:43:a5:41:aa:39:07:
                    56:cf:28:eb:14:59:38:75:a1:0e:7b:39:89:3c:07:
                    70:99:31:5d:f9:e4:d0:5e:6e:e5:c0:c6:24:5a:ad:
                    5b:66:a9:4b:a0:23:85:45:9d:d0:0c:c7:35:b1:d1:
                    d8:92:d6:ed:2a:f7:50:21:63:3f:53:23:a6:2a:58:
                    8f:92:d1:e6:28:09:62:c8:5f:5c:cd:f3:66:85:16:
                    47:ee:11:36:73:b7:5a:ba:7a:64:e0:e8:62:b7:46:
                    fe:3d:1e:f7:49:f2:c2:18:6c:06:60:88:89:3a:12:
                    58:0b:4d:7e:67:6c:ee:87:3e:7e:ea:cb:60:69:54:
                    00:2a:57:af:1f:d9:04:ee:9a:57:11:72:ca:e1:03:
                    0a:ec:64:67:e6:d0:ac:47:76:a9:c7:26:45:ff:87:
                    34:40:a8:fd:f9:9f:3c:9f:48:67:67:fe:46:1f:68:
                    0b:0f:94:cc:ef:e4:93:60:da:5f:07:10:5b:7c:64:
                    a5:92:3a:4b:fa:fe:30:b2:c6:e9:e1:33:43:37:7d:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CA:67:02:66:68:EA:BF:0E:83:30:03:B4:BE:6A:FA:1B:1B:58:93
            X509v3 Authority Key Identifier:
                keyid:D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132362e302f32342d3234203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:44:6a:a6:50:cd:41:63:b7:70:97:30:ab:70:90:2c:18:93:
         35:21:ea:14:35:ce:98:09:41:16:85:2b:e9:6d:67:a3:d3:74:
         9d:93:ec:22:75:dc:64:c6:6c:3e:30:5b:81:49:d3:8e:2b:70:
         6e:4d:12:5b:dd:77:52:24:e8:65:4f:d4:67:05:ce:53:19:4b:
         08:dd:54:67:da:12:d4:53:ad:ff:1f:dd:55:96:de:9c:9a:a0:
         48:93:79:1b:2b:1b:a3:96:c0:27:51:76:a4:96:79:98:dc:92:
         49:e3:e6:83:16:bf:b3:ce:59:66:04:a6:ac:76:e6:54:c6:9d:
         f3:bb:59:fe:06:bf:00:e5:7d:a9:80:51:a2:f0:bb:07:bf:93:
         05:78:bb:45:54:31:17:d0:c1:96:db:53:f7:b7:27:2f:d6:c3:
         d1:e6:ba:88:a4:4f:7d:0e:4d:ee:df:b3:14:e3:8f:71:81:7b:
         8e:3a:51:91:8d:ce:d1:3f:25:80:56:23:8e:3d:5b:07:73:8f:
         b0:c5:07:e5:fe:3c:68:9f:b2:e3:cb:45:99:38:9c:c5:94:6e:
         c1:5f:64:b1:41:cc:99:2b:b2:ee:23:1d:b0:96:e9:74:0c:e2:
         b0:ea:5a:13:86:62:d7:01:7f:a1:7d:d7:57:ba:7b:ab:a9:49:
         8c:e8:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----