This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa
File:                     3139302e392e38342e302f32322d3332203d3e20323731353935.roa (raw, json)
Hash identifier:          TnWyyBLw7t5P8ZDB9FfJUnSbFM3KImMj9QEV/knmh7k=
Subject key identifier:   BB:30:6A:03:DA:BF:1F:78:5A:E5:CA:B2:64:54:C3:B5:E0:15:21:1F
Certificate issuer:       /CN=28C838E91EB94141F0E04FD8D8014B82B9089884
Certificate serial:       405F11E3FFA8E5D3B95B088054F1D8D202975D4F
Authority key identifier: 28:C8:38:E9:1E:B9:41:41:F0:E0:4F:D8:D8:01:4B:82:B9:08:98:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C838E91EB94141F0E04FD8D8014B82B9089884.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa
Signing time:             Fri 13 Jun 2025 16:38:31 +0000
ROA not before:           Fri 13 Jun 2025 16:33:31 +0000
ROA not after:            Fri 12 Jun 2026 16:38:31 +0000
asID:                     271595
IP address blocks:        190.9.84.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5f:11:e3:ff:a8:e5:d3:b9:5b:08:80:54:f1:d8:d2:02:97:5d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C838E91EB94141F0E04FD8D8014B82B9089884
        Validity
            Not Before: Jun 13 16:33:31 2025 GMT
            Not After : Jun 12 16:38:31 2026 GMT
        Subject: CN=BB306A03DABF1F785AE5CAB26454C3B5E015211F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:7c:73:34:d4:eb:b0:52:cc:c6:e3:db:63:
                    e7:f1:86:b2:dc:1d:9a:07:15:d4:f3:26:5a:00:c8:
                    ef:9a:85:27:9a:56:e8:3a:f4:5b:f5:ef:c1:c4:3c:
                    1d:2a:14:8a:c0:d0:62:65:32:e1:ea:88:1e:2c:33:
                    ad:a9:28:5d:67:e3:85:f5:c1:f3:97:3a:40:ea:88:
                    c2:37:07:85:53:df:24:84:0e:18:5c:37:99:1f:51:
                    62:41:dc:61:be:d9:29:d3:aa:76:55:42:02:01:9a:
                    af:85:ff:3e:0f:fa:88:10:76:4f:c4:cd:45:e1:09:
                    52:cb:64:8b:15:76:55:5e:e6:28:bf:78:42:32:ce:
                    15:59:bd:c4:d4:f3:57:cb:0e:c7:b8:7d:f1:11:34:
                    c5:be:01:61:66:5e:b2:36:ad:ff:34:86:5d:a6:b2:
                    48:87:a1:5a:75:44:ab:2d:c2:c6:0e:86:5c:3f:62:
                    fc:bf:0d:3a:c7:18:27:e3:37:07:ff:77:0f:e1:e8:
                    75:dc:65:c4:f3:68:2b:42:b2:43:42:54:4a:a7:a2:
                    50:00:8b:09:44:81:9d:d2:f6:f0:12:fc:ce:ee:de:
                    17:4f:07:3c:c7:44:50:f8:ad:89:fb:ed:4c:a3:14:
                    db:2f:3f:2b:1b:43:c6:51:71:14:e4:a3:a5:87:e0:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:6A:03:DA:BF:1F:78:5A:E5:CA:B2:64:54:C3:B5:E0:15:21:1F
            X509v3 Authority Key Identifier:
                keyid:28:C8:38:E9:1E:B9:41:41:F0:E0:4F:D8:D8:01:4B:82:B9:08:98:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/28C838E91EB94141F0E04FD8D8014B82B9089884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C838E91EB94141F0E04FD8D8014B82B9089884.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:91:6f:ca:3b:e8:db:a9:4e:39:a1:3d:10:5d:6f:15:96:b2:
         70:09:b4:1f:ea:db:4f:ed:cd:01:ea:b3:21:42:39:4b:44:58:
         24:2f:c2:44:90:52:10:16:7e:92:55:c1:a6:2e:d3:97:d3:63:
         57:5e:29:b8:0f:31:4f:93:91:21:2f:60:6c:fd:0e:38:00:2f:
         fb:52:41:e1:12:f0:f0:65:3a:e8:bb:39:fa:d5:e3:68:bc:0f:
         db:3a:3d:72:4d:7e:4b:40:36:d1:43:20:8f:dc:f9:e4:c6:77:
         ed:69:3b:c8:91:d8:1b:7d:ac:73:b7:90:26:b2:05:e2:4c:c8:
         80:4d:30:fb:1d:1f:3d:cc:af:3e:28:fd:e3:92:0e:89:1c:2f:
         9c:2f:45:51:fa:88:97:6a:d4:84:fc:77:c4:98:b5:a2:83:da:
         5f:5b:1e:0b:2c:30:61:25:95:20:4c:76:16:6d:ee:39:14:e2:
         7b:65:b3:6c:5e:ad:97:cc:c1:c5:bd:2b:20:b3:3e:d1:e9:a8:
         89:7b:32:d5:9a:3f:09:b0:0b:82:32:d5:ff:d6:64:57:1f:12:
         3c:a4:4c:c2:0a:29:cf:e1:08:26:4a:38:0b:b9:9a:4b:c0:99:
         09:53:ae:2a:32:0d:10:99:a8:23:6a:4c:12:19:b9:3b:ba:71:
         4a:ce:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----