This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3234203d3e20323634333433.roa
File:                     3133382e3138352e37322e302f32322d3234203d3e20323634333433.roa (raw, json)
Hash identifier:          tH64241Eh0qOrIgWny8v9uvXPRaBN0DIUG6y5ugPyqQ=
Subject key identifier:   39:D0:3F:40:3D:C5:F0:12:17:14:F8:5A:BE:29:32:B1:7F:16:F3:A8
Certificate issuer:       /CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
Certificate serial:       6CCB5D9311C3D718169317B52CD051FF7533AAC7
Authority key identifier: F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3234203d3e20323634333433.roa
Signing time:             Tue 17 Jun 2025 21:09:25 +0000
ROA not before:           Tue 17 Jun 2025 21:04:25 +0000
ROA not after:            Tue 16 Jun 2026 21:09:25 +0000
asID:                     264343
IP address blocks:        138.185.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cb:5d:93:11:c3:d7:18:16:93:17:b5:2c:d0:51:ff:75:33:aa:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F344F76594361FCA1022F5214E37E6A29BAC2DA8
        Validity
            Not Before: Jun 17 21:04:25 2025 GMT
            Not After : Jun 16 21:09:25 2026 GMT
        Subject: CN=39D03F403DC5F0121714F85ABE2932B17F16F3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:03:bd:06:86:39:e5:5f:b4:b4:93:7f:42:
                    be:cb:34:55:31:33:c4:94:3e:e1:ff:a5:d1:48:27:
                    c4:72:38:b4:eb:e1:c4:a8:2f:d6:37:29:87:fe:b6:
                    ac:78:f3:ea:c9:0f:0d:8a:73:c5:7c:64:5a:a8:9f:
                    d0:d5:63:a9:e9:ac:e0:99:02:f7:92:ad:32:11:81:
                    e1:a6:94:13:40:01:bb:63:17:05:41:e3:a7:68:99:
                    a2:80:a2:9b:f2:67:15:6b:07:56:f7:f9:45:e4:f2:
                    c0:53:15:7f:2d:93:3f:cb:c4:7e:65:ee:33:c5:dd:
                    a4:34:b6:63:4a:18:20:2d:f7:ae:25:ca:44:b6:b7:
                    81:77:01:56:85:21:9b:f1:ce:df:3a:66:ea:9d:63:
                    00:a0:3a:a9:76:a0:4a:10:7c:f3:9a:69:9d:b2:77:
                    b3:1c:c6:f5:85:ae:58:62:30:47:bc:6d:e6:7d:8a:
                    31:05:bc:bf:01:b9:3f:76:a6:b2:3a:a8:30:2b:40:
                    0a:4f:56:a8:ff:59:80:49:ce:80:22:f9:b6:02:17:
                    eb:44:54:90:33:3d:9d:36:b0:14:9b:5d:de:88:88:
                    fd:6a:6e:1a:e3:ed:da:e5:35:df:f9:62:0e:89:62:
                    c7:c8:86:0e:ba:cb:fe:e8:93:d4:cb:34:50:b2:5a:
                    4e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:3F:40:3D:C5:F0:12:17:14:F8:5A:BE:29:32:B1:7F:16:F3:A8
            X509v3 Authority Key Identifier:
                keyid:F3:44:F7:65:94:36:1F:CA:10:22:F5:21:4E:37:E6:A2:9B:AC:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/F344F76594361FCA1022F5214E37E6A29BAC2DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F344F76594361FCA1022F5214E37E6A29BAC2DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB2edonhc5qiWRpZZbNGzXLGwwcUzZ3oZv1QrsnvqeXv/0/3133382e3138352e37322e302f32322d3234203d3e20323634333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:9b:ef:c9:6b:2c:20:54:9b:f7:b2:f4:45:e6:05:7a:67:dc:
         6f:16:bf:5b:8b:78:e0:af:bb:21:86:2c:04:0b:4b:0a:4c:db:
         e6:6c:06:93:d9:a4:a3:da:2a:89:78:2e:95:bd:38:86:22:0f:
         ab:46:14:d3:c0:75:1e:93:99:c5:ca:16:2b:52:c9:f0:1e:e9:
         e2:be:22:ae:8a:b7:81:77:8e:f7:d1:86:4e:23:99:0d:56:b6:
         58:b4:7e:fc:76:c7:9f:2c:bf:21:58:c3:ee:97:fb:9c:ff:ea:
         6e:34:7a:da:e4:0c:ab:5b:a4:f3:c9:61:a2:9b:de:3f:8a:25:
         8c:6e:09:80:0d:1c:bc:11:ff:5e:c1:82:09:a1:ae:e3:b6:53:
         54:c2:24:f6:ae:d7:cb:51:2e:94:c5:3e:d3:ea:59:9a:ef:72:
         d3:b1:6a:89:ee:97:28:a3:27:29:d2:61:17:8c:bb:fe:cf:12:
         49:5a:88:f9:88:41:a3:cc:a3:8d:f9:28:bd:f1:c0:af:ba:ee:
         b1:d8:aa:04:60:52:4f:fc:48:ea:b7:48:f5:95:62:8b:74:bb:
         e0:d8:b8:ff:58:8f:b1:88:a4:d9:37:ce:1e:e0:8a:a1:4f:d3:
         e8:ed:9a:77:30:76:8e:ef:19:4b:eb:d6:a4:6c:b0:fb:85:fb:
         14:b2:45:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----