This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/3230312e3138322e3130362e302f32332d3233203d3e20323637353038.roa
File:                     3230312e3138322e3130362e302f32332d3233203d3e20323637353038.roa (raw, json)
Hash identifier:          PXtoKe9zj4AUQvwtCrBpFkU16z1rF9ybJSMCw0y35SU=
Subject key identifier:   F3:30:A8:46:A1:83:BA:8B:5B:B1:A6:6F:BA:55:ED:7D:E7:04:FB:E0
Certificate issuer:       /CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Certificate serial:       2D7197CBA2A4FA3A154C801FAB9A33532B277915
Authority key identifier: 2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/3230312e3138322e3130362e302f32332d3233203d3e20323637353038.roa
Signing time:             Sun 28 Jul 2024 19:41:45 +0000
ROA not before:           Sun 28 Jul 2024 19:36:45 +0000
ROA not after:            Sun 27 Jul 2025 19:41:45 +0000
asID:                     267508
IP address blocks:        201.182.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:71:97:cb:a2:a4:fa:3a:15:4c:80:1f:ab:9a:33:53:2b:27:79:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
        Validity
            Not Before: Jul 28 19:36:45 2024 GMT
            Not After : Jul 27 19:41:45 2025 GMT
        Subject: CN=F330A846A183BA8B5BB1A66FBA55ED7DE704FBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:42:03:10:e4:e5:1d:1b:62:66:b9:8a:0e:
                    ae:b2:6d:6d:c7:14:45:23:df:6b:0f:a9:0d:45:58:
                    5c:96:a7:0a:0e:15:80:0e:5a:7d:e7:1c:fc:a7:89:
                    ff:7f:44:e6:c5:d5:29:cc:17:18:e0:f5:41:18:a4:
                    47:eb:32:19:1b:fe:65:28:1b:b6:13:0e:2b:35:77:
                    4c:7f:25:3a:e3:7a:a0:e3:c7:be:67:bb:91:0d:d0:
                    a6:a4:fa:99:8d:2b:4a:b2:a5:f7:16:38:67:18:25:
                    ec:a9:ef:8f:4f:5e:0a:ff:2c:14:df:eb:94:a7:30:
                    b7:77:3e:a3:38:8f:c7:d0:91:c6:9b:a1:1b:f6:ab:
                    f8:75:80:dd:e1:a7:9a:a8:12:0d:2e:a1:6c:6c:a7:
                    a4:7e:66:b9:13:0d:90:0c:39:42:88:44:06:4e:14:
                    08:83:37:cf:ea:60:66:2f:8f:a7:30:08:f4:e6:b4:
                    1b:ec:88:7f:59:14:b9:3b:15:01:56:90:a5:c3:52:
                    66:2c:d2:f0:bf:33:a6:28:62:10:d6:7a:18:a9:0b:
                    ae:07:1d:fe:db:f5:a8:72:37:a1:7b:68:b4:51:43:
                    7c:fc:9a:7b:27:3f:8b:76:76:11:14:43:08:a3:a0:
                    7d:a3:d5:99:ac:dd:95:a6:7e:87:da:57:0d:dc:da:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:30:A8:46:A1:83:BA:8B:5B:B1:A6:6F:BA:55:ED:7D:E7:04:FB:E0
            X509v3 Authority Key Identifier:
                keyid:2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/3230312e3138322e3130362e302f32332d3233203d3e20323637353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:29:16:db:61:09:67:97:3d:39:e7:01:31:cd:3d:26:66:d7:
         e8:e9:ee:58:c6:ca:04:49:93:97:17:72:49:e1:ac:2c:df:17:
         54:87:c6:c6:72:e7:2f:6a:c2:76:36:64:c8:06:6e:c2:6f:c3:
         58:ba:ee:37:8e:4c:3a:4e:36:4a:27:d0:68:d3:0e:f3:23:e0:
         c7:ad:b9:06:00:ad:03:e3:64:e4:2f:12:47:ea:52:2a:44:be:
         50:c9:96:7f:92:7a:7b:a2:46:dc:6a:8d:e8:f5:a5:b0:7c:2e:
         d4:ca:44:de:cb:61:2e:aa:38:ad:dc:a0:8d:44:c9:2c:9b:53:
         c0:5d:2c:7b:2c:86:b3:b9:71:1e:7b:f3:72:0b:3e:07:de:4d:
         c9:61:cf:33:b9:3d:ec:0e:02:a8:e0:50:44:24:8e:dc:65:df:
         41:26:cf:e1:ae:55:54:d6:ed:f8:5a:30:35:4f:4b:6e:97:9e:
         14:a3:c7:7a:e2:86:47:4b:29:52:b5:dc:94:e4:fb:cd:0e:d0:
         0a:43:4a:2e:f2:52:50:0d:bc:8d:ea:3d:45:dc:ba:db:41:c9:
         59:1d:26:c7:93:50:df:6d:be:f4:0d:b6:6a:5e:c3:47:89:58:
         23:95:f5:e7:d1:90:5e:30:37:1c:d9:03:b4:73:63:9a:68:d7:
         ae:41:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----