This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa
File:                     3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          Nsv+GJi2UN/P5prw78eGG+bGAfChfC18EoqdC8ziPvw=
Subject key identifier:   10:E5:53:A9:D3:E1:77:2A:12:39:27:5C:CF:55:0C:91:A0:D1:F9:77
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       4B86EFC3EA85D35BD6D452321E7707C2A48C2DCF
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:14 +0000
ROA not before:           Thu 06 Mar 2025 04:37:14 +0000
ROA not after:            Thu 05 Mar 2026 04:42:14 +0000
asID:                     28210
IP address blocks:        189.127.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:86:ef:c3:ea:85:d3:5b:d6:d4:52:32:1e:77:07:c2:a4:8c:2d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:14 2025 GMT
            Not After : Mar  5 04:42:14 2026 GMT
        Subject: CN=10E553A9D3E1772A1239275CCF550C91A0D1F977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:c5:ec:58:6c:04:4c:24:f7:db:58:b1:7c:
                    92:2b:b9:99:60:70:4e:d4:d8:8d:dd:57:9c:0a:36:
                    8c:98:b1:8a:7b:72:3e:39:ae:cc:65:dc:a4:30:fa:
                    7d:02:af:5c:76:a0:76:f4:56:dc:3a:7b:5f:3c:28:
                    90:46:7a:ae:4e:6f:23:6d:76:cd:1d:c5:2c:b2:4f:
                    3c:2d:0e:a3:68:20:a8:49:69:7b:23:5f:78:dd:df:
                    78:15:fd:c3:dc:76:9c:09:cb:27:c3:08:51:fa:f7:
                    ca:0d:66:b5:1d:b1:58:76:71:19:ee:31:71:ff:08:
                    4d:2f:2c:cd:39:18:d6:43:fe:b4:39:cb:d4:a0:42:
                    ca:01:f6:67:69:72:05:26:67:34:47:bd:74:a4:85:
                    3c:c1:b3:d7:fa:da:06:ef:4f:fd:b1:e9:b8:a8:69:
                    6d:a3:ca:96:95:b0:d0:1d:04:18:b8:88:08:64:62:
                    f2:0f:dc:45:76:95:7d:06:27:e1:4c:b0:c7:6e:9b:
                    a2:8c:f8:0e:d0:bc:9d:2c:74:83:5c:6d:06:9a:96:
                    57:d1:fa:3b:a0:26:73:81:99:7e:b4:05:f5:ec:1c:
                    52:7f:de:2c:f3:04:8f:5f:64:ab:7e:ad:ec:93:f8:
                    17:14:ef:06:37:c8:80:d2:b5:4d:bf:8c:3e:f1:9b:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:53:A9:D3:E1:77:2A:12:39:27:5C:CF:55:0C:91:A0:D1:F9:77
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:2b:eb:9a:9c:62:d0:f2:b9:21:2d:0a:f2:cc:0c:0c:e8:
         2d:95:3a:38:2e:d5:01:8f:f3:4d:ad:96:21:54:c3:0e:24:c3:
         a1:88:13:cd:55:c8:2b:62:e0:13:85:6e:20:df:78:02:e1:94:
         a9:1e:55:e2:27:d9:36:2f:93:37:b3:be:c8:08:d4:87:97:0f:
         1e:8c:a8:be:f2:eb:c1:63:5e:94:ab:1d:8d:17:22:64:3e:2c:
         2d:ec:fc:db:ca:12:cc:e4:e0:9e:d0:81:68:5c:20:cd:49:a4:
         ae:20:33:93:08:34:23:38:03:0e:76:f7:f3:e4:92:42:11:5c:
         7d:ed:62:57:b9:9e:a8:9e:80:c5:17:e7:17:29:7c:cb:35:7f:
         2c:9a:0b:26:10:7d:80:ea:14:5e:44:48:b2:eb:ed:fd:32:8f:
         e8:fd:9e:c1:76:aa:3e:d0:16:1b:42:38:be:3f:d0:07:3a:84:
         5d:08:54:b6:e2:4c:0a:57:47:1b:2c:70:0b:82:eb:61:61:b2:
         e4:7e:89:2a:59:56:34:1d:9c:e1:4b:86:df:a3:d5:fb:ae:b1:
         dc:2f:cc:da:88:7d:c6:a3:93:e5:e5:b1:77:46:b7:53:80:a6:
         b0:6a:5e:d6:ff:9a:d1:1a:4d:55:a9:53:26:db:26:2e:59:8e:
         86:5f:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----