This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa
File:                     3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa (raw, json)
Hash identifier:          m6bFa5dlbGKKR0IF3CiT/JB11GMI0BiYuEg1ciV7b7k=
Subject key identifier:   2D:F1:C3:62:8F:C7:3C:D1:4D:0B:4F:E3:50:91:12:5E:BA:1F:1A:71
Certificate issuer:       /CN=D7950E03D821895EF335736E8640695BA4F4AD3E
Certificate serial:       503FEBAE9861424D2A3FBCBF2D87678CD63E6DD1
Authority key identifier: D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa
Signing time:             Thu 25 Sep 2025 03:34:47 +0000
ROA not before:           Thu 25 Sep 2025 03:29:47 +0000
ROA not after:            Thu 24 Sep 2026 03:34:47 +0000
asID:                     270997
IP address blocks:        138.99.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3f:eb:ae:98:61:42:4d:2a:3f:bc:bf:2d:87:67:8c:d6:3e:6d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Validity
            Not Before: Sep 25 03:29:47 2025 GMT
            Not After : Sep 24 03:34:47 2026 GMT
        Subject: CN=2DF1C3628FC73CD14D0B4FE35091125EBA1F1A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:1c:e0:c3:7d:6b:e3:4b:f6:04:5b:a6:79:
                    37:01:04:c3:c9:aa:d8:75:9b:14:34:5b:8d:29:6d:
                    2c:51:97:62:8d:08:54:d7:83:84:d0:ed:57:50:6b:
                    98:5b:8f:41:43:54:5c:4c:cf:fe:41:0f:2d:ac:b3:
                    8f:31:30:01:f8:24:27:81:fa:ef:da:a1:d8:2d:5c:
                    e2:e5:82:08:ff:29:f4:9e:f1:d2:9f:58:64:0d:38:
                    0d:a9:9e:6e:d4:03:f2:be:80:7f:63:5f:61:41:23:
                    06:7a:6a:66:74:21:34:56:8e:44:bf:7c:98:b8:69:
                    3b:bb:ab:b1:02:ec:e8:d8:14:70:b4:49:c7:20:a0:
                    b0:50:3d:b1:21:5c:32:88:39:bb:e8:df:07:d4:87:
                    20:29:12:5d:d1:56:10:68:33:da:09:31:fb:50:57:
                    22:22:4a:08:b4:a9:90:d9:ae:92:d4:7a:39:b2:56:
                    a6:cb:5f:f7:77:4f:dd:22:60:7e:ca:2f:6b:c3:8b:
                    e4:a5:de:95:b0:7e:4d:3b:37:bb:b9:eb:f9:b9:ad:
                    4d:ac:43:ac:6c:b3:3d:49:93:08:e2:02:40:14:03:
                    bb:9c:88:4d:f6:e6:bb:e3:ab:86:c1:e7:3f:ad:02:
                    be:c1:18:7e:ea:e8:b7:55:f7:bf:05:d6:ab:c5:3c:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F1:C3:62:8F:C7:3C:D1:4D:0B:4F:E3:50:91:12:5E:BA:1F:1A:71
            X509v3 Authority Key Identifier:
                keyid:D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132372e302f32342d3234203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:2d:4d:32:1d:14:e1:37:9e:9e:6e:e1:23:d5:ed:4a:b7:
         80:ce:05:4a:9d:06:a4:2b:60:27:7a:13:89:6b:4e:74:30:3e:
         ed:e0:ff:ef:fe:65:96:fd:22:61:f3:1c:14:06:76:33:1f:27:
         4a:21:56:7e:ea:74:ef:38:e0:53:9e:12:1e:df:5f:37:77:52:
         a2:98:ab:54:7d:ac:dc:4a:26:cd:29:ff:ba:36:c0:16:50:a4:
         a6:57:e7:42:a8:02:c5:01:88:f4:26:af:bf:99:9f:c2:db:e3:
         8c:7e:49:07:4e:33:6f:bd:f4:81:b6:c8:30:0e:5f:3a:3b:3c:
         b1:e0:82:61:68:ef:80:de:d5:d8:70:79:7c:70:d9:f4:9e:ab:
         79:fe:4e:c2:19:63:e8:22:d8:0b:b5:5b:d0:d6:47:e8:c9:9b:
         de:80:0b:99:3c:5b:37:6c:e6:ff:83:38:d4:d0:9e:97:8c:0f:
         0f:0b:4b:6f:20:bd:3f:e7:cc:fb:23:d6:37:d3:17:cc:fe:14:
         19:6f:03:ef:37:43:42:82:99:15:71:12:2d:3c:05:ac:15:27:
         df:d6:97:26:bf:62:51:0f:5e:b6:2b:0e:35:f9:dd:62:0f:f0:
         41:ed:6f:41:ef:05:34:4b:9e:dc:19:64:6d:6f:11:14:1f:a0:
         fd:15:7c:97
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUD/rrphhQk0qP7y/LYdnjNY+bdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5NTBFMDNEODIxODk1RUYzMzU3MzZFODY0MDY5NUJB
NEY0QUQzRTAeFw0yNTA5MjUwMzI5NDdaFw0yNjA5MjQwMzM0NDdaMDMxMTAvBgNV
BAMTKDJERjFDMzYyOEZDNzNDRDE0RDBCNEZFMzUwOTExMjVFQkExRjFBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEghzgw31r40v2BFumeTcBBMPJ
qth1mxQ0W40pbSxRl2KNCFTXg4TQ7VdQa5hbj0FDVFxMz/5BDy2ss48xMAH4JCeB
+u/aodgtXOLlggj/KfSe8dKfWGQNOA2pnm7UA/K+gH9jX2FBIwZ6amZ0ITRWjkS/
fJi4aTu7q7EC7OjYFHC0SccgoLBQPbEhXDKIObvo3wfUhyApEl3RVhBoM9oJMftQ
VyIiSgi0qZDZrpLUejmyVqbLX/d3T90iYH7KL2vDi+Sl3pWwfk07N7u56/m5rU2s
Q6xssz1JkwjiAkAUA7uciE325rvjq4bB5z+tAr7BGH7q6LdV978F1qvFPJElAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULfHDYo/HPNFNC0/jUJESXrofGnEwHwYDVR0j
BBgwFoAU15UOA9ghiV7zNXNuhkBpW6T0rT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhXZTZCdnB3WkJLWjRUTFVWUnFEb0ZUYndSRGI4dXpnN3dqSnI4Vjlh
Q00vMC9ENzk1MEUwM0Q4MjE4OTVFRjMzNTczNkU4NjQwNjk1QkE0RjRBRDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OTUwRTAzRDgyMTg5NUVG
MzM1NzM2RTg2NDA2OTVCQTRGNEFEM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoV2U2QnZwd1pCS1o0VExVVlJxRG9GVGJ3UkRiOHV6Zzd3akpyOFY5YUNNLzAv
MzEzMzM4MmUzOTM5MmUzMTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzOTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKY38wDQYJKoZIhvcNAQELBQADggEBAA4DLU0y
HRThN56ebuEj1e1Kt4DOBUqdBqQrYCd6E4lrTnQwPu3g/+/+ZZb9ImHzHBQGdjMf
J0ohVn7qdO844FOeEh7fXzd3UqKYq1R9rNxKJs0p/7o2wBZQpKZX50KoAsUBiPQm
r7+Zn8Lb44x+SQdOM2+99IG2yDAOXzo7PLHggmFo74De1dhweXxw2fSeq3n+TsIZ
Y+gi2Au1W9DWR+jJm96AC5k8Wzds5v+DONTQnpeMDw8LS28gvT/nzPsj1jfTF8z+
FBlvA+83Q0KCmRVxEi08BawVJ9/Wlya/YlEPXrYrDjX53WIP8EHtb0HvBTRLntwZ
ZG1vERQfoP0VfJc=
-----END CERTIFICATE-----