This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/3133382e39342e39362e302f32322d3234203d3e20323634313336.roa
File:                     3133382e39342e39362e302f32322d3234203d3e20323634313336.roa (raw, json)
Hash identifier:          WMAlq8NprPiKBO/8D3Nr3y7CjPphzWa7xtWlkiJQxNY=
Subject key identifier:   04:9E:E0:88:26:9A:4E:1F:E9:4F:B6:7D:B1:55:17:54:B4:42:49:6C
Certificate issuer:       /CN=74AA35543A2DF00F88699C66FC46817694838CFA
Certificate serial:       40BFF2DFE0007EE7BE024C9B76329388378FEFF3
Authority key identifier: 74:AA:35:54:3A:2D:F0:0F:88:69:9C:66:FC:46:81:76:94:83:8C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/3133382e39342e39362e302f32322d3234203d3e20323634313336.roa
Signing time:             Wed 23 Jul 2025 15:03:24 +0000
ROA not before:           Wed 23 Jul 2025 14:58:24 +0000
ROA not after:            Wed 22 Jul 2026 15:03:24 +0000
asID:                     264136
IP address blocks:        138.94.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bf:f2:df:e0:00:7e:e7:be:02:4c:9b:76:32:93:88:37:8f:ef:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA35543A2DF00F88699C66FC46817694838CFA
        Validity
            Not Before: Jul 23 14:58:24 2025 GMT
            Not After : Jul 22 15:03:24 2026 GMT
        Subject: CN=049EE088269A4E1FE94FB67DB1551754B442496C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:72:3a:d2:c9:2a:92:30:ac:6d:d3:ec:4a:
                    7f:8d:3e:b9:3c:d8:73:2c:1e:c8:44:84:f5:6a:8f:
                    41:1c:0d:af:82:a1:55:48:6c:97:24:af:a8:e0:4f:
                    cb:e7:5e:3f:9f:cc:33:10:a2:e5:1c:37:13:d2:23:
                    83:6d:91:12:9d:68:e9:eb:2d:74:c3:25:63:fa:82:
                    9d:6c:3c:0b:ac:69:00:a9:45:63:1a:62:ae:b9:1a:
                    f7:f5:19:39:c2:35:87:94:79:37:8b:70:49:6a:b4:
                    ea:69:8f:b4:36:c6:39:6d:42:4c:de:06:b3:77:46:
                    db:a9:15:ba:95:c9:54:f2:3e:79:4b:ce:10:07:5a:
                    f2:4e:e5:29:3a:a7:8e:4e:08:71:c3:4d:15:a8:0d:
                    8e:93:41:50:5b:3b:51:82:f4:b7:5d:7b:eb:2d:c2:
                    ae:13:f4:c1:4c:ab:01:3c:8e:a8:6e:f7:c5:a3:8f:
                    be:9c:3b:1a:f2:96:3a:dd:c8:25:07:ae:1b:51:7b:
                    98:5c:10:4d:e1:ca:28:57:6f:c8:09:7c:a6:aa:bf:
                    2c:fc:6f:a3:8b:58:36:90:5d:bb:07:f3:01:38:26:
                    c7:2f:7c:b4:2d:09:9b:e4:b6:17:df:2f:20:dc:06:
                    e2:53:75:fc:7a:2a:68:17:02:e5:a6:07:3b:20:b2:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9E:E0:88:26:9A:4E:1F:E9:4F:B6:7D:B1:55:17:54:B4:42:49:6C
            X509v3 Authority Key Identifier:
                keyid:74:AA:35:54:3A:2D:F0:0F:88:69:9C:66:FC:46:81:76:94:83:8C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/74AA35543A2DF00F88699C66FC46817694838CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/3133382e39342e39362e302f32322d3234203d3e20323634313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:92:cb:7d:36:0b:3c:1e:b7:de:7a:26:15:de:51:35:27:
         33:30:4e:8d:49:c3:5c:5b:4c:80:71:37:cf:2a:6c:1c:1d:20:
         ca:c1:d9:a1:bf:bb:05:7d:b6:a7:68:e4:07:08:1e:35:8c:43:
         ef:5e:1e:e3:5e:b5:8b:7c:1c:bc:a8:ae:70:16:b8:02:42:1c:
         08:46:8b:d7:e2:e8:e4:32:56:c5:8f:09:13:8c:ea:4d:67:5e:
         42:12:b1:60:62:6c:30:f5:7e:d2:05:84:0c:54:cf:3b:14:05:
         06:d8:37:58:63:82:17:23:ed:0e:f7:34:66:ed:22:71:88:7c:
         15:71:c4:d4:cd:d6:fd:0d:7a:6a:b1:42:ea:87:32:6a:63:bc:
         db:f8:7a:b7:88:e5:4b:c5:40:97:9f:9e:85:de:77:79:3b:9d:
         f7:01:8a:0c:30:7e:c1:5d:a6:38:7e:73:c4:17:02:80:34:95:
         6b:dc:17:1b:93:28:fe:d0:b4:e1:46:63:b4:a1:77:67:ef:a8:
         68:3b:43:67:97:6d:c7:e6:c0:73:c6:78:ed:49:26:2f:6e:a1:
         1a:bc:64:ac:20:4e:ff:3a:53:f9:3d:06:11:10:5c:44:26:85:
         e4:0d:1c:50:eb:f3:7d:9c:9c:f6:a2:c0:09:94:65:26:e8:7f:
         ad:ba:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----