This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33322e302f32302d3332203d3e203238323436.roa
File:                     3138372e312e33322e302f32302d3332203d3e203238323436.roa (raw, json)
Hash identifier:          NmR+KFTDM6GxjnvsBfiau6fx/I5PkQgyw6fI4JnzqVc=
Subject key identifier:   67:6A:17:FD:0A:F5:8D:32:25:DD:19:5F:49:83:62:17:FE:6F:C5:C2
Certificate issuer:       /CN=4280F26A98E865073FE5F6E4DBB52E60A4F5952A
Certificate serial:       12A49B7A81D3C283AE8875FCBECD86CFB8A7C5AD
Authority key identifier: 42:80:F2:6A:98:E8:65:07:3F:E5:F6:E4:DB:B5:2E:60:A4:F5:95:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33322e302f32302d3332203d3e203238323436.roa
Signing time:             Mon 28 Jul 2025 16:51:21 +0000
ROA not before:           Mon 28 Jul 2025 16:46:21 +0000
ROA not after:            Mon 27 Jul 2026 16:51:21 +0000
asID:                     28246
IP address blocks:        187.1.32.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:9b:7a:81:d3:c2:83:ae:88:75:fc:be:cd:86:cf:b8:a7:c5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4280F26A98E865073FE5F6E4DBB52E60A4F5952A
        Validity
            Not Before: Jul 28 16:46:21 2025 GMT
            Not After : Jul 27 16:51:21 2026 GMT
        Subject: CN=676A17FD0AF58D3225DD195F49836217FE6FC5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:41:ec:6a:8c:0a:55:55:90:4c:10:bf:a4:
                    8b:43:a1:30:b9:20:6b:40:79:b6:80:c4:3a:81:56:
                    e4:fa:2b:bc:63:97:cd:ba:7b:8a:84:36:8b:7b:72:
                    e4:c8:fa:04:0f:4f:1c:80:f1:17:0b:80:ac:89:6b:
                    16:b1:d2:a2:05:26:0c:ac:8e:f7:69:e2:55:24:2e:
                    f4:e7:89:d0:11:26:80:93:72:f9:ee:03:a5:18:2e:
                    de:0a:f3:e7:29:72:4c:81:50:21:72:e6:5a:5f:36:
                    c7:ab:f8:82:9d:9c:ab:e8:37:ef:e0:1e:71:ad:44:
                    2c:8d:d0:6a:c2:5f:da:95:63:37:a8:d6:e2:96:90:
                    60:2f:be:22:66:36:94:da:5f:cf:64:b3:95:5c:29:
                    db:33:72:23:fa:05:ae:8d:27:a2:6c:42:60:ad:1a:
                    c6:e8:6d:16:3b:39:48:9f:e0:b2:6a:90:56:dd:c9:
                    5f:9a:c9:05:0d:2b:81:42:16:1b:0e:31:e3:92:ba:
                    d0:96:98:76:20:ad:df:75:48:65:42:56:8f:5e:53:
                    cc:24:4d:94:01:4b:6f:00:e8:8d:83:4a:39:88:3c:
                    4c:68:dc:c3:d2:0e:7d:20:d9:f4:b6:0f:10:44:a2:
                    32:2a:9a:3c:fe:e3:03:e4:ea:07:5b:aa:01:71:72:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6A:17:FD:0A:F5:8D:32:25:DD:19:5F:49:83:62:17:FE:6F:C5:C2
            X509v3 Authority Key Identifier:
                keyid:42:80:F2:6A:98:E8:65:07:3F:E5:F6:E4:DB:B5:2E:60:A4:F5:95:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33322e302f32302d3332203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:b9:bd:24:df:f8:bf:20:1e:71:03:0a:f9:23:c6:98:6b:6c:
         64:27:74:e1:62:5c:45:bc:d6:5c:54:1a:71:f4:d9:e6:05:48:
         5f:db:e1:2d:7e:ef:7d:43:8a:3b:e4:6d:1d:cd:25:2f:73:da:
         d9:63:27:03:d6:f1:68:87:5f:3c:de:4d:1b:d8:3c:40:4f:90:
         9b:ac:0c:9b:dd:ce:c7:77:18:62:24:31:3f:aa:f4:9c:d7:4b:
         fb:c2:de:76:18:e5:fd:0e:d9:5b:13:67:4f:dc:67:73:6d:1d:
         83:41:ca:ea:7f:b8:a5:45:65:ca:e9:25:be:0a:c6:99:cb:32:
         42:a9:27:df:02:25:c2:37:c5:05:81:60:8b:ae:76:fb:5e:7e:
         7c:be:5a:03:f4:7d:f2:5a:93:78:92:81:f9:df:bc:96:ca:c2:
         2a:76:ae:72:72:a4:b7:80:c0:92:ea:79:a8:06:c2:f9:e7:ce:
         9f:91:7d:05:c7:29:73:c2:2b:de:ea:90:8b:9e:c6:99:26:38:
         bb:3e:b9:c7:4f:79:89:59:b2:21:0c:67:9f:bd:3f:52:20:9b:
         89:83:43:f2:1b:72:8c:85:f9:fe:9f:14:02:a5:36:03:07:a1:
         87:91:b1:84:09:61:ee:d9:16:80:d6:a0:06:e4:69:c5:7f:bf:
         4c:f1:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----