This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/3230302e3131302e3130302e302f32322d3234203d3e20323730323630.roa
File:                     3230302e3131302e3130302e302f32322d3234203d3e20323730323630.roa (raw, json)
Hash identifier:          Q/YDk8maFRXPETjufw9hR8agpFLJnQxloyDxhJgMAEE=
Subject key identifier:   FD:86:96:7E:11:08:E8:F0:B7:9D:A5:E9:40:08:BC:43:2A:3C:C0:7F
Certificate issuer:       /CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
Certificate serial:       04E0F91F636539E3A20E929CD049E2A5F473DA56
Authority key identifier: 82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/3230302e3131302e3130302e302f32322d3234203d3e20323730323630.roa
Signing time:             Tue 08 Apr 2025 16:12:38 +0000
ROA not before:           Tue 08 Apr 2025 16:07:38 +0000
ROA not after:            Tue 07 Apr 2026 16:12:38 +0000
asID:                     270260
IP address blocks:        200.110.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e0:f9:1f:63:65:39:e3:a2:0e:92:9c:d0:49:e2:a5:f4:73:da:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
        Validity
            Not Before: Apr  8 16:07:38 2025 GMT
            Not After : Apr  7 16:12:38 2026 GMT
        Subject: CN=FD86967E1108E8F0B79DA5E94008BC432A3CC07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:63:f2:45:b8:ca:06:69:4c:a7:95:8e:51:
                    51:54:01:6b:a5:82:1b:d2:b8:a4:44:8f:0f:b3:e7:
                    f1:7e:68:10:e2:ab:a2:a3:f5:92:ff:aa:07:15:bf:
                    bc:95:22:26:07:83:a8:f9:eb:c2:75:66:84:f9:dd:
                    59:60:5a:0c:f1:15:63:0f:96:f2:66:7c:7d:f7:69:
                    f0:f2:f9:72:84:95:02:af:14:01:70:45:b3:68:05:
                    60:a8:a8:87:a9:a7:a3:09:a6:3b:17:16:8c:7c:cc:
                    c2:21:75:89:8f:20:24:22:87:c2:a6:94:f6:ec:e0:
                    ab:06:f6:09:cb:ea:ba:42:91:33:b6:0d:17:a4:88:
                    c9:2c:3b:66:21:76:2c:fc:61:6f:95:11:84:09:66:
                    e0:95:9d:37:55:46:fe:b9:29:42:1c:09:7f:d8:16:
                    1d:0d:ce:4c:e3:dc:ef:3f:4c:6b:83:5d:e4:30:ea:
                    d0:47:af:6e:76:1d:d7:e7:9f:4d:a1:6a:f6:30:73:
                    15:8a:20:35:bd:4a:4e:a1:b1:de:2d:08:f2:5c:58:
                    3f:08:19:a8:1f:91:85:4a:a4:e0:dd:ac:c1:22:48:
                    14:33:f7:e7:87:6b:57:e9:da:17:cf:cb:0c:a1:86:
                    0e:92:05:96:03:1b:a5:f1:64:e9:c5:86:41:3d:fa:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:86:96:7E:11:08:E8:F0:B7:9D:A5:E9:40:08:BC:43:2A:3C:C0:7F
            X509v3 Authority Key Identifier:
                keyid:82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/3230302e3131302e3130302e302f32322d3234203d3e20323730323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:dd:7c:99:80:02:5a:95:11:52:8b:09:63:fb:7d:67:7b:
         c7:1d:86:93:e7:f3:cf:e7:41:c4:77:9d:8e:16:23:bf:ff:ab:
         8d:a4:e7:f2:40:76:f2:39:d8:af:34:00:1e:0f:7f:06:92:a9:
         4b:30:b1:14:02:64:8a:cc:f3:f0:f8:df:e7:ad:a8:06:71:d0:
         0f:b4:37:17:a7:65:21:3b:7d:4c:46:db:c1:6e:37:b1:c4:f2:
         36:df:9e:5f:85:d0:f6:79:de:4c:5e:6d:ff:7c:dd:8b:14:d2:
         b8:aa:d0:7e:de:b9:fe:6f:f0:c4:e9:bf:ac:e6:52:26:54:a1:
         11:ce:6d:9a:ee:a9:b2:ad:3d:e2:f3:6d:e2:07:c8:0a:32:a7:
         4b:7c:9c:ce:86:54:a0:4f:8f:25:48:b7:df:3f:27:7f:1d:2e:
         9c:7f:88:f5:c8:b8:4b:6d:9d:4c:4f:6b:21:cd:4d:83:fd:32:
         03:02:98:fb:2a:3c:d1:78:2f:1b:82:5d:44:72:f0:e2:16:a2:
         ab:5d:33:98:e9:6c:ec:6a:f2:5a:f6:63:48:ec:f1:7f:01:1c:
         e7:66:9d:fc:f7:b6:a2:37:60:92:5d:a3:40:c0:60:43:cd:16:
         58:de:f6:34:93:98:dd:46:d2:83:64:e4:ab:59:75:e5:12:7d:
         52:68:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----