This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132302e302f32332d3332203d3e20323733353930.roa
File:                     3138392e38352e3132302e302f32332d3332203d3e20323733353930.roa (raw, json)
Hash identifier:          ZEQU3eLw5Bh0aBVtys9bm6d9YxEOwYno7TCTK6cR+a0=
Subject key identifier:   02:F0:C5:76:FA:45:17:73:F1:81:C1:BE:62:82:FB:B5:CD:F5:7B:9C
Certificate issuer:       /CN=8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C
Certificate serial:       0804DCE0664AA4E69612D87782D6E26F00D33B68
Authority key identifier: 8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132302e302f32332d3332203d3e20323733353930.roa
Signing time:             Mon 24 Feb 2025 14:41:56 +0000
ROA not before:           Mon 24 Feb 2025 14:36:56 +0000
ROA not after:            Mon 23 Feb 2026 14:41:56 +0000
asID:                     273590
IP address blocks:        189.85.120.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:04:dc:e0:66:4a:a4:e6:96:12:d8:77:82:d6:e2:6f:00:d3:3b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C
        Validity
            Not Before: Feb 24 14:36:56 2025 GMT
            Not After : Feb 23 14:41:56 2026 GMT
        Subject: CN=02F0C576FA451773F181C1BE6282FBB5CDF57B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:37:ea:e9:f7:5c:05:d9:2d:f3:1f:76:06:
                    3e:12:56:b3:90:cf:a5:98:08:1e:45:f8:3a:63:c3:
                    f0:b8:d3:a5:42:83:12:f9:51:71:ad:b1:e4:27:16:
                    76:eb:92:bc:09:76:08:08:a8:87:71:8e:ac:fa:47:
                    a8:28:51:ca:2e:8e:9e:4f:cc:7e:51:53:18:7a:78:
                    cc:12:64:64:eb:9e:23:df:de:c2:61:18:7b:89:0b:
                    e3:e0:93:7b:ae:77:da:9c:43:a3:9c:06:2d:35:62:
                    c0:a2:cd:61:46:64:31:02:c0:72:98:62:e1:5c:1c:
                    71:da:4b:10:64:5c:ee:51:d2:51:23:cd:0c:f9:79:
                    fc:47:1e:87:ad:81:d6:58:5a:f7:48:fb:61:fc:19:
                    6a:55:50:02:c8:17:38:e6:aa:1e:7a:bb:0b:18:30:
                    df:00:38:12:7d:61:c8:dc:4c:f4:66:5f:9f:51:a7:
                    e5:0e:e4:d0:39:86:fc:cf:3e:15:07:5c:95:3d:66:
                    44:24:9f:5b:bd:5b:e0:99:78:f0:ba:97:ac:20:6f:
                    a4:12:8b:55:b7:97:8c:45:98:87:76:4c:2f:aa:3a:
                    7e:65:b9:57:65:db:c1:25:ff:5b:6a:bf:d7:af:80:
                    f7:1e:e2:20:8a:ee:6a:6b:68:30:19:bd:8c:e6:c9:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:C5:76:FA:45:17:73:F1:81:C1:BE:62:82:FB:B5:CD:F5:7B:9C
            X509v3 Authority Key Identifier:
                keyid:8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132302e302f32332d3332203d3e20323733353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:00:1f:42:4c:bd:14:2f:d2:ed:2f:4a:07:a0:09:6b:71:a8:
         71:58:5f:60:8b:23:19:8c:b3:33:ea:ac:fa:29:d3:83:15:35:
         7a:27:cc:32:16:9d:a3:56:a1:4f:93:cf:46:7c:12:73:bc:29:
         01:62:d8:66:e8:25:fb:a3:3b:29:a0:ff:87:b0:26:47:44:4a:
         2d:a2:6b:9b:cc:d3:cd:34:97:84:73:24:60:63:f5:7c:0a:65:
         e4:7d:d5:f4:a3:1d:91:f0:76:b0:49:ab:94:95:91:4b:2b:22:
         3b:e0:36:01:d5:8e:be:85:33:83:21:2a:3e:ee:56:a9:58:c5:
         3e:1e:71:e4:cb:03:96:54:32:1d:50:a7:9d:28:43:20:cb:fa:
         87:37:d6:00:68:89:7e:ff:d6:3c:73:47:88:74:53:e4:d2:7c:
         00:af:d2:12:7f:71:ce:ef:32:61:dd:fd:af:9a:5a:5e:dd:a1:
         f7:3d:73:b9:24:e7:52:75:3a:4a:69:9d:5d:37:14:4a:5f:76:
         14:cd:5c:14:b0:d4:96:c2:02:c7:48:68:2c:5c:c1:1b:29:51:
         dd:01:44:33:d7:73:9d:1f:a1:a9:76:0a:e9:57:64:bb:ef:14:
         6c:7a:2f:dd:f7:bd:6b:4f:39:aa:a5:1c:4c:a3:1a:e1:04:67:
         d8:f4:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----