This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39302e302f32332d3233203d3e20323634323330.roa
File:                     3139302e3130392e39302e302f32332d3233203d3e20323634323330.roa (raw, json)
Hash identifier:          6Fy4nXq8e6St88UfkiqbU+NuffILN4vYltFwI6vOS1k=
Subject key identifier:   DC:D6:C3:31:52:73:75:C0:33:92:39:0B:2F:85:CC:78:21:35:12:65
Certificate issuer:       /CN=ABB335C88F5D6007A917BB67CDDEC9741FA3ADEB
Certificate serial:       4C62FF89405270E9DE727696EBCFF4059952B679
Authority key identifier: AB:B3:35:C8:8F:5D:60:07:A9:17:BB:67:CD:DE:C9:74:1F:A3:AD:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB335C88F5D6007A917BB67CDDEC9741FA3ADEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39302e302f32332d3233203d3e20323634323330.roa
Signing time:             Wed 18 Dec 2024 22:16:48 +0000
ROA not before:           Wed 18 Dec 2024 22:11:48 +0000
ROA not after:            Wed 17 Dec 2025 22:16:48 +0000
asID:                     264230
IP address blocks:        190.109.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:62:ff:89:40:52:70:e9:de:72:76:96:eb:cf:f4:05:99:52:b6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB335C88F5D6007A917BB67CDDEC9741FA3ADEB
        Validity
            Not Before: Dec 18 22:11:48 2024 GMT
            Not After : Dec 17 22:16:48 2025 GMT
        Subject: CN=DCD6C331527375C03392390B2F85CC7821351265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a1:4a:2f:2b:7d:e0:9a:a6:be:71:3f:ea:7d:
                    14:19:ed:78:3e:bd:18:18:e7:33:d6:1d:98:96:97:
                    4f:9c:79:00:bc:e0:65:e4:d9:39:e0:73:1d:c5:71:
                    25:1d:cb:31:55:7d:c1:a8:4d:56:5e:4e:6e:9f:90:
                    1d:9e:bd:c6:32:12:aa:72:b6:44:be:a3:2c:57:a6:
                    04:3e:ef:29:d1:a7:af:a9:4a:0b:92:0b:3a:7c:55:
                    77:6c:36:30:17:7c:2b:b7:d1:62:c1:12:bf:d8:0b:
                    81:6b:c0:f0:47:a2:a6:a7:44:93:1c:de:ae:4c:9f:
                    90:ca:d3:7c:b7:db:14:74:f3:ed:9e:1e:e9:46:b3:
                    8a:a7:4e:a6:c1:4c:86:18:37:21:95:0f:ff:0d:fa:
                    3f:21:a6:40:c6:9c:8a:49:33:58:ac:7b:97:56:f0:
                    6b:1b:d9:30:85:e8:19:5e:7a:2f:ef:2b:30:2a:5e:
                    ea:4c:91:93:0b:0d:f7:95:e9:d3:c4:53:59:6e:0e:
                    a9:ad:ed:f2:d2:9d:89:d9:04:b9:5d:df:10:fb:3b:
                    fe:6d:83:e7:3b:2b:5c:d9:5f:67:ec:b7:48:59:33:
                    40:dd:5d:0e:fd:34:28:e6:bb:00:ef:28:35:7a:d9:
                    56:10:74:17:7a:39:13:cd:b6:ad:89:5d:8f:b3:b5:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D6:C3:31:52:73:75:C0:33:92:39:0B:2F:85:CC:78:21:35:12:65
            X509v3 Authority Key Identifier:
                keyid:AB:B3:35:C8:8F:5D:60:07:A9:17:BB:67:CD:DE:C9:74:1F:A3:AD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/ABB335C88F5D6007A917BB67CDDEC9741FA3ADEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB335C88F5D6007A917BB67CDDEC9741FA3ADEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39302e302f32332d3233203d3e20323634323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:a0:74:2f:a1:63:70:05:d1:e8:b5:ff:87:f1:06:af:53:
         93:8f:7d:8a:f8:f1:81:67:cc:82:7f:9e:b9:3d:e5:2e:fe:3f:
         36:24:95:18:42:d5:0d:c1:38:8d:7e:99:c5:af:6e:2f:ef:07:
         6c:10:aa:65:5d:88:4c:f4:a7:7b:46:13:5f:64:50:29:f5:5f:
         40:b1:bd:eb:8e:76:f5:89:57:7f:11:60:4c:4d:b4:cc:fa:29:
         be:36:74:1c:98:dc:7a:93:bd:15:36:26:6b:53:e9:80:1e:60:
         23:cf:7a:93:7d:28:76:9d:95:92:43:34:9f:3f:e9:2d:35:88:
         d3:f7:ab:73:03:4b:df:22:6e:93:c4:14:23:77:19:0e:eb:0f:
         f7:05:13:90:23:d9:fd:3b:5a:e7:50:70:29:17:0d:46:fb:ce:
         3d:d3:39:e8:0c:30:90:a0:c8:77:84:bb:0d:9d:11:d1:a9:da:
         d4:08:fe:33:ca:df:b7:b3:a1:27:a1:ce:6b:90:2c:00:b3:9e:
         b6:4f:6a:14:49:9a:ab:ef:b8:eb:b3:1f:0a:e6:10:41:28:22:
         59:93:a3:4e:f5:3b:8d:5c:5f:a7:39:12:97:ed:8b:ff:23:02:
         2a:72:80:0c:80:66:54:1a:49:d9:f2:a4:86:f5:a0:e1:c9:51:
         87:3a:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----