This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135322e302f32322d3332203d3e20323730353135.roa
File:                     3138372e34392e3135322e302f32322d3332203d3e20323730353135.roa (raw, json)
Hash identifier:          eVm1zKK/Na8C1ozSCCUJusDgm3eNGOAiTitOza++15w=
Subject key identifier:   4C:D3:8E:9D:D0:33:21:82:A3:E3:96:D3:91:DF:B9:EF:DC:37:53:F2
Certificate issuer:       /CN=CFBDC034E21CCE505A2A3F65B427FEC98751D9C7
Certificate serial:       36D0AF66DFE3DF95BB7FAE8E5EA05068F77CFB33
Authority key identifier: CF:BD:C0:34:E2:1C:CE:50:5A:2A:3F:65:B4:27:FE:C9:87:51:D9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135322e302f32322d3332203d3e20323730353135.roa
Signing time:             Sun 04 May 2025 12:03:12 +0000
ROA not before:           Sun 04 May 2025 11:58:12 +0000
ROA not after:            Sun 03 May 2026 12:03:12 +0000
asID:                     270515
IP address blocks:        187.49.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d0:af:66:df:e3:df:95:bb:7f:ae:8e:5e:a0:50:68:f7:7c:fb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFBDC034E21CCE505A2A3F65B427FEC98751D9C7
        Validity
            Not Before: May  4 11:58:12 2025 GMT
            Not After : May  3 12:03:12 2026 GMT
        Subject: CN=4CD38E9DD0332182A3E396D391DFB9EFDC3753F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:ae:49:f3:ba:7f:b2:aa:f6:65:a9:8d:a2:
                    ce:1e:fd:dc:67:08:67:f7:25:ad:e2:db:04:5f:82:
                    79:d9:71:c1:44:2a:c2:78:35:48:f8:df:c4:e9:0d:
                    43:b5:44:49:97:74:11:11:3a:0d:12:26:a1:7f:c3:
                    b0:1d:c6:b8:93:66:d8:e1:4a:91:2f:40:af:c9:1f:
                    2f:45:09:b0:b6:17:ec:3b:f7:62:c8:2a:c6:74:60:
                    47:f4:31:32:fd:bd:b1:a9:1c:4d:5f:52:a7:1a:92:
                    90:91:c7:0f:00:de:91:26:a8:1e:8c:e3:d0:3a:c4:
                    5a:03:b0:a6:12:52:95:be:1e:23:2f:f9:cf:f3:54:
                    2c:fe:25:a8:32:6e:d7:07:53:d0:10:78:b5:0a:96:
                    42:49:98:1c:1d:b2:72:01:63:d9:f7:f5:15:6a:2d:
                    78:0d:ee:ef:e2:2e:56:8f:4e:48:8f:31:72:24:15:
                    4e:ef:71:37:ea:e8:56:9e:42:28:c1:92:20:06:bc:
                    d1:4b:0c:56:d4:10:72:48:75:85:9d:56:df:75:77:
                    c7:6d:e0:13:59:63:b2:30:73:0c:5f:06:f7:cf:ed:
                    dc:e5:5f:0c:02:00:fe:5b:8c:8b:f5:ba:5d:0b:dd:
                    5b:a1:6a:a3:4e:50:b0:52:e7:4d:4b:12:15:54:35:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:8E:9D:D0:33:21:82:A3:E3:96:D3:91:DF:B9:EF:DC:37:53:F2
            X509v3 Authority Key Identifier:
                keyid:CF:BD:C0:34:E2:1C:CE:50:5A:2A:3F:65:B4:27:FE:C9:87:51:D9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135322e302f32322d3332203d3e20323730353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:94:ec:94:b0:b2:83:d2:2b:53:8e:d9:03:3e:ce:ce:d4:
         ef:67:1a:7a:ba:5c:d7:96:4c:40:d7:4f:e1:2d:a6:ed:29:1d:
         e3:13:b0:17:ea:34:56:65:f8:bb:e1:12:e5:0f:90:ef:f0:19:
         26:f4:85:5e:52:0d:61:ef:10:4a:d9:e0:05:16:60:60:e3:3f:
         a3:8e:b1:7d:a8:56:0e:9f:3f:cd:14:dd:85:90:fb:71:7c:01:
         e9:45:2d:a3:88:d9:17:ac:42:9b:68:ef:15:54:0a:94:43:83:
         f1:07:08:68:df:92:34:48:79:dc:03:9e:4b:cf:dd:f4:c3:e1:
         53:b9:63:da:d4:30:70:56:e1:b8:d3:3b:b4:42:a8:f4:6d:69:
         41:93:6e:43:c6:d1:5e:52:26:f9:9d:aa:69:3a:13:5d:c7:cf:
         fe:d5:2e:a6:ec:1f:b8:dd:d3:17:69:13:da:58:ee:33:7a:1e:
         24:b8:76:a2:69:69:e6:b8:99:33:53:f6:13:24:68:d5:28:83:
         7b:b5:9b:b2:6d:ea:94:c1:d1:79:02:b0:62:a5:f8:bc:df:7b:
         44:6e:1b:0c:64:65:ac:cf:ad:39:b3:5f:90:d9:55:e3:f0:6f:
         55:f0:67:d5:81:c5:26:3c:f7:9c:6a:8c:f4:2a:bc:41:1b:d4:
         50:14:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----