This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32332d3234203d3e203238353837.roa
File:                     3137372e3132382e3138382e302f32332d3234203d3e203238353837.roa (raw, json)
Hash identifier:          Ji/QqzOkhEvjlGd6NbyQ5c1V5eZBiCihOd0SPN2qKjE=
Subject key identifier:   B8:20:86:84:C0:54:6F:5A:32:9A:DC:D6:86:4C:DB:B7:9D:35:3B:1B
Certificate issuer:       /CN=B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568
Certificate serial:       7F301FC6119BCDECF394DB547A6960D00463509E
Authority key identifier: B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32332d3234203d3e203238353837.roa
Signing time:             Fri 25 Oct 2024 19:29:43 +0000
ROA not before:           Fri 25 Oct 2024 19:24:43 +0000
ROA not after:            Fri 24 Oct 2025 19:29:43 +0000
asID:                     28587
IP address blocks:        177.128.188.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:30:1f:c6:11:9b:cd:ec:f3:94:db:54:7a:69:60:d0:04:63:50:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568
        Validity
            Not Before: Oct 25 19:24:43 2024 GMT
            Not After : Oct 24 19:29:43 2025 GMT
        Subject: CN=B8208684C0546F5A329ADCD6864CDBB79D353B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:ed:5b:d0:f8:f1:f0:6b:39:b8:8f:b2:a3:
                    96:ee:03:98:fa:3f:60:c3:eb:f8:c7:12:43:94:9a:
                    13:42:75:2c:97:06:02:18:ee:98:85:4e:19:cd:95:
                    6f:45:1b:29:be:c1:88:71:6d:b0:a6:2f:51:10:8a:
                    bd:39:d1:b1:07:92:fe:a1:80:7f:0b:32:11:0c:61:
                    40:0d:71:7a:88:ff:a6:2e:35:70:a8:38:da:62:71:
                    65:65:ef:fe:c7:c3:85:b3:a5:8e:e7:cd:61:f4:b5:
                    65:50:83:74:8b:0d:04:83:57:82:fe:00:85:94:7d:
                    b4:5d:5b:a0:3e:77:fe:fa:86:3e:eb:29:91:d9:0d:
                    b5:d4:bb:df:70:de:64:23:22:f8:de:4b:bf:35:f8:
                    b8:77:d0:02:e8:6b:65:10:b6:a3:eb:58:11:8e:1f:
                    6b:07:1b:13:16:18:80:1c:1d:9c:86:e0:05:46:79:
                    fd:33:ae:5f:40:50:28:34:fc:1b:72:e1:a3:26:d0:
                    5b:13:e9:30:13:23:10:b3:96:bc:0f:72:e3:05:9d:
                    cf:de:e6:3e:80:a7:ab:2e:83:d5:e4:27:8f:39:2a:
                    14:5c:4d:dd:ad:89:97:c7:77:26:15:28:78:4b:ea:
                    84:81:49:df:53:14:72:81:10:03:66:80:ec:77:51:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:20:86:84:C0:54:6F:5A:32:9A:DC:D6:86:4C:DB:B7:9D:35:3B:1B
            X509v3 Authority Key Identifier:
                keyid:B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32332d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:71:2a:db:b8:02:7b:db:3e:59:94:ae:e1:27:3f:d6:6d:47:
         b0:3c:95:85:e7:cd:4d:c0:b5:48:4b:da:3a:3c:ef:99:4d:e4:
         a8:8c:71:82:f1:7a:cb:33:ac:69:6b:55:16:28:f6:7e:05:06:
         34:fa:0a:a8:bf:16:31:41:0e:44:72:ed:ac:df:35:2a:b7:b8:
         40:86:54:fa:08:ac:1a:51:37:e2:2d:42:1c:d7:87:92:75:57:
         ce:d4:96:50:53:3f:71:94:0f:5d:79:0d:0c:c4:9e:52:e6:00:
         04:5b:5a:e6:37:55:ac:06:42:0a:ae:20:c0:83:24:9d:b9:ed:
         cd:4d:25:81:3b:2e:f3:38:b6:60:15:70:58:87:42:65:98:cf:
         0a:82:43:26:4e:71:88:d8:0d:47:69:76:9e:73:f4:b5:5d:a7:
         e0:cc:63:c7:a2:f8:ba:0a:dc:23:ba:36:49:59:1e:c0:4c:9a:
         b3:19:2d:10:e0:a5:c7:d4:7f:56:cb:fa:3e:69:d1:0b:87:b6:
         30:30:fd:5c:de:8e:c7:a2:e3:cd:42:e6:e2:a4:5a:0d:dc:de:
         13:ba:3f:73:cc:bb:99:38:3f:77:71:36:89:84:11:a3:ee:a4:
         f1:df:68:95:fd:20:6c:29:8b:ed:ca:4b:cf:12:d1:c9:97:7e:
         a7:b6:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----