This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa
File:                     3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa (raw, json)
Hash identifier:          Db8sToV5ujds5q1beOvfPPCXTGcHwubMfh/VEsxLVhg=
Subject key identifier:   97:B3:BF:EF:F8:F2:A9:54:00:5F:5E:18:2E:4E:66:C3:9E:40:E3:DC
Certificate issuer:       /CN=AF4A2DB89E34555B8683D2189961132177B11C81
Certificate serial:       5C43E37C49B6FA3A6C70342DA0B6C9E8B2025530
Authority key identifier: AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa
Signing time:             Fri 09 May 2025 12:51:08 +0000
ROA not before:           Fri 09 May 2025 12:46:08 +0000
ROA not after:            Fri 08 May 2026 12:51:08 +0000
asID:                     264577
IP address blocks:        138.36.116.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:43:e3:7c:49:b6:fa:3a:6c:70:34:2d:a0:b6:c9:e8:b2:02:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A2DB89E34555B8683D2189961132177B11C81
        Validity
            Not Before: May  9 12:46:08 2025 GMT
            Not After : May  8 12:51:08 2026 GMT
        Subject: CN=97B3BFEFF8F2A954005F5E182E4E66C39E40E3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:25:d1:5f:9c:8a:a6:71:c1:1e:ec:58:f0:
                    4e:19:64:37:ac:c8:ea:88:08:99:47:df:3c:60:90:
                    0d:23:a4:27:36:28:08:c9:2c:18:c9:f1:7b:04:28:
                    1c:7d:1c:5a:69:0f:a7:79:2d:c8:d1:ba:ea:3e:1c:
                    d7:26:e3:bf:c5:1b:ef:ea:7e:73:e5:b5:8a:65:c7:
                    6f:f0:3e:5d:85:32:ae:52:bc:de:f7:0b:b7:74:cc:
                    b0:92:44:a5:b8:3d:fb:16:9b:d7:59:69:9a:9b:ca:
                    45:2d:35:c6:42:b5:f1:42:b3:c8:11:c1:7c:2c:2d:
                    07:4b:fe:f8:18:1d:70:e6:81:da:ed:54:9f:54:9b:
                    98:84:91:75:31:f4:c7:5b:93:0d:42:7b:9e:e7:a9:
                    ed:d9:38:55:9b:c7:ab:aa:d1:ee:75:97:bc:90:26:
                    69:ee:ee:0c:4b:10:d2:b6:25:3b:ae:bf:e1:0a:75:
                    d5:b9:97:9d:e2:f5:96:0a:5d:4e:b7:51:0f:ea:67:
                    c2:64:c5:19:55:6d:ca:19:44:86:54:c9:39:30:8c:
                    5a:e1:d7:fd:80:fb:f6:28:96:7e:de:c8:30:22:5f:
                    c4:66:82:31:73:84:9f:0f:08:8f:76:cc:a0:b9:1b:
                    72:e0:e1:04:c8:04:6c:65:07:58:af:28:af:cb:14:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:BF:EF:F8:F2:A9:54:00:5F:5E:18:2E:4E:66:C3:9E:40:E3:DC
            X509v3 Authority Key Identifier:
                keyid:AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:91:e9:44:96:d8:10:61:60:9f:55:c6:e6:6b:c7:03:93:3d:
         01:aa:05:44:71:f3:2f:e2:03:c0:f4:38:20:e8:cf:14:41:46:
         ed:e5:0e:36:ff:43:61:17:85:8c:1d:f4:1d:85:e7:5d:76:4f:
         eb:15:88:75:e9:f5:d0:0f:f4:8b:3c:4e:50:31:b8:74:6c:17:
         5a:7b:73:d8:32:8d:fe:c7:3c:5d:71:20:7f:e1:4e:da:33:7c:
         51:6b:f7:2d:88:26:59:02:78:c9:a6:68:07:2c:34:2a:66:1e:
         0c:1a:bd:4e:18:c0:3d:0d:ef:e7:85:74:40:e5:d9:ca:81:61:
         22:b0:5b:d5:fa:68:6d:d1:79:76:0a:3c:aa:98:cf:34:f2:6d:
         4b:f7:de:14:6e:16:88:05:1a:6f:1f:4a:51:a6:83:42:77:2b:
         f3:ab:04:e8:09:22:60:a0:f4:0f:bb:79:c9:f0:35:90:42:f5:
         de:ce:5c:80:b3:36:ff:d7:b5:4e:42:b1:4f:c0:d7:84:43:3b:
         31:dd:26:43:fd:2b:8f:26:11:44:db:8c:5a:5d:b0:20:76:22:
         92:2f:53:2f:83:75:ab:a6:a4:f7:be:d7:92:de:cd:3d:25:8a:
         eb:7b:b7:c6:76:12:b7:e1:9d:25:85:5f:ba:ea:49:4d:ad:f7:
         1c:e9:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----