This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa
File:                     3133382e35392e3131322e302f32322d3234203d3e203238363036.roa (raw, json)
Hash identifier:          B4JdAY4TFrqU0ullnFTJzA85tCYl4ThdLY0O7s/P02E=
Subject key identifier:   5F:3F:75:88:98:67:40:20:12:71:37:3C:E5:56:96:91:F1:62:E2:87
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       35F51C27874593B7F944124BE7922DF9E2328D05
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa
Signing time:             Wed 13 Aug 2025 22:48:14 +0000
ROA not before:           Wed 13 Aug 2025 22:43:14 +0000
ROA not after:            Wed 12 Aug 2026 22:48:14 +0000
asID:                     28606
IP address blocks:        138.59.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f5:1c:27:87:45:93:b7:f9:44:12:4b:e7:92:2d:f9:e2:32:8d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Aug 13 22:43:14 2025 GMT
            Not After : Aug 12 22:48:14 2026 GMT
        Subject: CN=5F3F7588986740201271373CE5569691F162E287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:87:ae:d0:98:d9:8f:e6:4e:0d:b0:b6:5e:
                    d8:29:18:a7:02:17:0e:3e:e4:d3:4a:51:49:b7:04:
                    28:9f:6e:50:f9:83:e4:43:56:16:84:8c:95:33:b4:
                    2d:20:84:1b:e4:c9:32:f0:70:00:39:1c:a8:74:fe:
                    32:ed:51:58:34:09:58:24:3f:af:e7:10:74:5e:29:
                    c0:c8:d3:60:95:63:1a:75:22:11:20:27:5c:6c:d9:
                    bd:35:01:92:ad:eb:a9:07:dd:7e:f0:98:67:b9:35:
                    bb:cb:2e:e1:9c:25:aa:25:d5:89:de:a0:b4:e8:32:
                    ca:8b:00:2a:e4:82:57:55:0c:4a:a1:e7:e9:90:33:
                    52:78:a2:c8:55:fc:c8:f7:c5:92:6b:88:da:a0:fe:
                    5c:06:eb:28:ee:36:5f:96:02:77:89:7a:0d:e9:fd:
                    f4:dc:09:50:dd:db:2a:93:94:bc:ad:ea:56:45:51:
                    d3:be:3e:97:fb:5e:4b:de:93:fa:b1:6d:f8:64:59:
                    cb:5c:f9:60:90:bd:90:8d:db:57:64:2d:e2:18:9f:
                    ae:b4:fe:65:dc:3e:17:57:f3:52:8e:75:08:a4:f1:
                    a2:1d:22:92:86:e8:c7:84:7f:60:6b:8d:e3:2c:bc:
                    93:65:72:67:b7:bb:b5:d3:1e:1d:51:32:4b:5c:15:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3F:75:88:98:67:40:20:12:71:37:3C:E5:56:96:91:F1:62:E2:87
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32322d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:fe:bd:b9:3c:f0:2c:08:f9:64:22:8b:8d:d2:01:ec:57:45:
         74:73:00:c0:2e:f1:f4:73:b0:36:c4:d2:62:3b:1e:7c:ef:58:
         95:16:34:d4:b1:5b:dd:57:5f:cc:a1:f2:b8:e2:2d:ab:19:91:
         31:5c:3b:e4:bd:0d:a1:b3:80:9f:b0:fa:10:e1:85:bd:c9:a3:
         df:cf:a9:94:c0:f2:39:12:1b:b4:ef:6c:d2:c2:82:a9:7b:91:
         0e:71:11:dd:5a:89:a0:59:fb:68:26:90:f2:a9:86:e3:cf:0f:
         f7:a3:6c:95:e9:61:c3:ae:24:4f:5c:3f:0d:27:09:82:9a:83:
         f0:c5:9f:52:43:3e:30:45:19:43:e8:dd:57:d3:d7:c6:f1:2e:
         3a:ce:61:88:e5:b5:61:8f:50:30:23:a0:72:02:b1:1f:1c:01:
         b1:ca:82:3b:bf:05:94:e8:fe:64:b0:a8:53:4c:4e:bb:f0:50:
         ff:d0:11:70:db:13:f7:43:2d:ae:b7:c7:cf:0f:32:65:3f:89:
         b9:af:93:56:13:54:d3:5a:4e:43:05:a8:17:45:18:cb:bd:2c:
         39:13:7e:6f:dd:b7:ef:ad:9e:c3:0a:dd:fe:fe:66:4c:04:9b:
         18:8a:b2:fb:c7:09:5a:56:93:e7:be:01:fb:0d:f8:c8:ab:68:
         f7:df:7e:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNfUcJ4dFk7f5RBJL55It+eIyjQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFDOTE2QjlENEU4RkQzNzZBMEIyNDJGN0I3REM3QzVF
NEU5QkREMTAeFw0yNTA4MTMyMjQzMTRaFw0yNjA4MTIyMjQ4MTRaMDMxMTAvBgNV
BAMTKDVGM0Y3NTg4OTg2NzQwMjAxMjcxMzczQ0U1NTY5NjkxRjE2MkUyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpIeu0JjZj+ZODbC2XtgpGKcC
Fw4+5NNKUUm3BCifblD5g+RDVhaEjJUztC0ghBvkyTLwcAA5HKh0/jLtUVg0CVgk
P6/nEHReKcDI02CVYxp1IhEgJ1xs2b01AZKt66kH3X7wmGe5NbvLLuGcJaol1Yne
oLToMsqLACrkgldVDEqh5+mQM1J4oshV/Mj3xZJriNqg/lwG6yjuNl+WAneJeg3p
/fTcCVDd2yqTlLyt6lZFUdO+Ppf7Xkvek/qxbfhkWctc+WCQvZCN21dkLeIYn660
/mXcPhdX81KOdQik8aIdIpKG6MeEf2BrjeMsvJNlcme3u7XTHh1RMktcFQ4/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXz91iJhnQCAScTc85VaWkfFi4ocwHwYDVR0j
BBgwFoAUqskWudTo/TdqCyQve33HxeTpvdEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0hveGpkZ3pvOW1pRmFrVzh3UDh1dmNaMUZucEc4NXBVTmh5Tm9RR0hu
MlUvMS9BQUM5MTZCOUQ0RThGRDM3NkEwQjI0MkY3QjdEQzdDNUU0RTlCREQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBQzkxNkI5RDRFOEZEMzc2
QTBCMjQyRjdCN0RDN0M1RTRFOUJERDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NIb3hqZGd6bzltaUZha1c4d1A4dXZjWjFGbnBHODVwVU5oeU5vUUdIbjJVLzEv
MzEzMzM4MmUzNTM5MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzYzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCijtwMA0GCSqGSIb3DQEBCwUAA4IBAQDT/r25PPAs
CPlkIouN0gHsV0V0cwDALvH0c7A2xNJiOx5871iVFjTUsVvdV1/MofK44i2rGZEx
XDvkvQ2hs4CfsPoQ4YW9yaPfz6mUwPI5Ehu072zSwoKpe5EOcRHdWomgWftoJpDy
qYbjzw/3o2yV6WHDriRPXD8NJwmCmoPwxZ9SQz4wRRlD6N1X09fG8S46zmGI5bVh
j1AwI6ByArEfHAGxyoI7vwWU6P5ksKhTTE678FD/0BFw2xP3Qy2ut8fPDzJlP4m5
r5NWE1TTWk5DBagXRRjLvSw5E35v3bfvrZ7DCt3+/mZMBJsYirL7xwlaVpPnvgH7
DfjIq2j33349
-----END CERTIFICATE-----