This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
File:                     3138392e32382e3136302e302f32302d3234203d3e203238333030.roa (raw, json)
Hash identifier:          H7psLyogWbIKHdhe6vg7+t62sLPndRYh3tzZUBLq7u8=
Subject key identifier:   32:D6:78:2A:2D:E0:CA:BE:29:47:94:BB:C7:AF:54:80:F9:9E:B9:C0
Certificate issuer:       /CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
Certificate serial:       42A5066CB72FC8B3F79CE016EF678E27C76A4511
Authority key identifier: FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
Signing time:             Thu 23 Mar 2023 19:40:12 +0000
ROA not before:           Thu 23 Mar 2023 19:35:12 +0000
ROA not after:            Thu 21 Mar 2024 19:40:12 +0000
asID:                     28300
IP address blocks:        189.28.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a5:06:6c:b7:2f:c8:b3:f7:9c:e0:16:ef:67:8e:27:c7:6a:45:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
        Validity
            Not Before: Mar 23 19:35:12 2023 GMT
            Not After : Mar 21 19:40:12 2024 GMT
        Subject: CN=32D6782A2DE0CABE294794BBC7AF5480F99EB9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:4c:de:60:b5:04:a6:95:d9:d6:ca:ff:aa:
                    5d:ce:6a:ef:6d:6b:e0:f4:d0:ad:72:e2:c8:21:0a:
                    a4:73:fc:1c:49:98:d0:46:3f:0a:59:c4:8c:4e:42:
                    be:fa:26:5a:a0:22:37:1d:e0:90:2c:58:d9:1b:d4:
                    a5:a4:8c:43:8d:ca:07:f3:78:dc:58:81:c3:1e:6a:
                    e1:7b:3a:9c:8d:3a:ab:01:5d:c7:ca:37:09:c1:7c:
                    05:b3:1d:f9:00:5f:fb:67:5b:3c:00:a1:9f:01:ee:
                    1e:5e:75:a9:f5:68:d0:c3:17:3a:ac:e8:7a:6b:ad:
                    a6:bf:1b:92:20:ef:ef:77:0c:c1:f9:e9:25:4b:47:
                    e5:1d:ca:9e:c7:43:cf:c4:ef:cb:ea:2a:cc:31:d9:
                    54:b2:5f:2e:bf:15:dd:9c:ad:f6:cc:02:f4:d1:60:
                    e7:f7:ed:97:4a:a0:8b:bc:f3:b7:31:bf:18:a3:fd:
                    55:1e:a6:83:bb:61:76:bf:76:40:7d:04:0d:7d:d9:
                    5b:3b:9e:83:16:42:9b:31:64:a4:37:5e:99:8a:7f:
                    8b:58:23:b3:fb:47:1e:2d:19:58:a4:6b:55:dc:94:
                    3b:1f:ba:ea:f8:a3:4f:3e:36:01:cd:c6:75:56:1e:
                    ab:b7:03:21:d3:a6:49:a8:1f:7d:6b:88:3f:ed:52:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D6:78:2A:2D:E0:CA:BE:29:47:94:BB:C7:AF:54:80:F9:9E:B9:C0
            X509v3 Authority Key Identifier:
                keyid:FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:69:fb:1e:5c:6e:18:76:41:9a:8c:55:f1:bc:5d:b3:72:3a:
         f2:f1:82:37:c5:cd:fd:22:59:0d:3b:e9:85:41:04:5f:2e:1b:
         e6:20:7f:35:8c:1c:8e:7f:ff:8e:53:b1:d8:7a:7f:de:66:fb:
         bb:27:23:28:e9:a3:ca:db:d4:47:0f:04:7b:64:7a:4d:b7:93:
         49:8d:14:4f:46:a9:90:e3:6b:c7:9d:cc:2f:4e:be:13:bf:01:
         3e:e3:d2:0c:16:6d:65:b8:d2:dd:63:aa:3b:aa:49:3f:e8:e9:
         be:53:0d:c3:34:6f:0f:cd:b3:10:8a:d0:9c:50:e9:95:96:ad:
         b1:db:8e:d1:16:81:69:e6:79:50:60:94:75:cd:93:5b:55:de:
         68:8d:72:9b:89:7d:34:53:8e:11:15:96:22:b7:69:4f:d3:09:
         81:0f:ff:a8:ab:ad:b5:a0:18:32:1e:4f:85:ce:15:ea:31:4d:
         68:03:87:a8:6b:b2:14:b7:91:b5:72:0f:2b:a8:5d:b7:cd:10:
         2a:30:01:58:2f:06:7c:7f:a4:25:80:89:cd:4b:c2:fb:49:27:
         82:06:b1:f4:91:a0:1e:34:a4:de:47:99:7b:58:e1:c8:9c:7d:
         ee:40:5f:e8:36:2e:32:2b:23:7d:a7:5c:60:55:cb:3e:0f:b6:
         8c:d1:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----