This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e33382e38382e302f32312d3332203d3e20323632343032.roa
File:                     3137372e33382e38382e302f32312d3332203d3e20323632343032.roa (raw, json)
Hash identifier:          UnR67soChHlRk8QUdbjQlItIF0A1r5PM5+YUCLkOpm0=
Subject key identifier:   4A:B9:51:4B:60:97:6F:C1:99:F5:6A:8F:D2:BA:9E:A6:2B:03:33:3E
Certificate issuer:       /CN=6089F3D89107738F93CB916607B5E12C0D11B759
Certificate serial:       68292B23F52F85437018C9D49EBBB0F44A28DCDE
Authority key identifier: 60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e33382e38382e302f32312d3332203d3e20323632343032.roa
Signing time:             Mon 15 Dec 2025 22:17:31 +0000
ROA not before:           Mon 15 Dec 2025 22:12:31 +0000
ROA not after:            Mon 14 Dec 2026 22:17:31 +0000
asID:                     262402
IP address blocks:        177.38.88.0/21 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:29:2b:23:f5:2f:85:43:70:18:c9:d4:9e:bb:b0:f4:4a:28:dc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6089F3D89107738F93CB916607B5E12C0D11B759
        Validity
            Not Before: Dec 15 22:12:31 2025 GMT
            Not After : Dec 14 22:17:31 2026 GMT
        Subject: CN=4AB9514B60976FC199F56A8FD2BA9EA62B03333E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:3f:91:d4:47:9c:42:29:ec:3a:c2:31:35:
                    d1:aa:e3:00:73:b9:d7:26:06:e4:46:ad:19:ae:a7:
                    20:a9:ae:c3:e3:73:7c:cc:7a:bb:eb:a5:25:a5:33:
                    32:f8:40:50:2c:92:34:8a:ed:b1:2b:e4:d2:c3:2d:
                    3e:30:a5:ef:44:bd:0f:91:f4:01:2a:a9:ce:62:b2:
                    4d:ba:85:74:c2:9d:b9:10:7b:9f:27:a1:cf:42:f8:
                    ed:c2:a7:9d:b9:cb:9c:fa:e6:62:7b:d3:7b:04:66:
                    e3:06:2b:7b:d3:84:f1:e4:f2:93:ad:98:54:7c:f7:
                    bf:e8:37:78:5f:1c:1d:2d:e3:71:81:5d:1f:97:c2:
                    5c:60:2c:d9:78:07:88:8d:a7:b7:43:03:85:b8:d4:
                    43:3e:ec:39:46:82:20:c7:47:5b:4c:4c:6b:5c:78:
                    71:ca:34:df:65:9c:57:48:28:c8:8c:b7:65:32:32:
                    ac:95:bf:65:86:22:88:b8:48:47:f8:25:32:9f:4f:
                    11:6e:27:da:5a:36:e2:ce:99:d7:a1:aa:32:cb:40:
                    3c:dc:36:18:de:1f:6d:c5:78:68:ca:1a:8f:66:17:
                    06:12:4c:f4:22:c2:b1:f0:01:b0:30:9a:31:6a:bd:
                    c8:d8:8c:66:95:96:26:9d:f5:8c:7f:61:fc:11:f1:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B9:51:4B:60:97:6F:C1:99:F5:6A:8F:D2:BA:9E:A6:2B:03:33:3E
            X509v3 Authority Key Identifier:
                keyid:60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/6089F3D89107738F93CB916607B5E12C0D11B759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e33382e38382e302f32312d3332203d3e20323632343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:15:ed:e0:2a:21:2a:26:60:6a:dc:90:2e:da:7b:fa:4c:
         d9:a6:f0:6e:ec:0e:35:49:bf:36:a2:11:a1:a4:1b:fe:08:e0:
         1b:f0:2f:f9:4a:46:1b:39:c4:d0:ed:a5:67:ea:2d:11:f5:82:
         ff:c3:27:9f:cf:89:a8:c2:bc:ce:36:83:26:c1:5b:57:eb:e0:
         7c:60:5e:da:46:25:db:11:56:d3:f9:26:9d:c8:a6:b8:69:cb:
         ef:11:08:bc:ed:fe:21:75:b2:e5:04:4e:cf:c8:be:e4:a6:8f:
         0f:53:e7:5f:1b:50:ae:17:9f:7c:ad:53:22:c2:f7:18:b9:36:
         a0:d3:39:b8:ee:cb:05:e2:2b:58:31:e4:5d:86:19:4d:96:0c:
         e3:8b:2b:f0:64:7e:42:c2:77:12:d9:57:8e:8f:00:0b:d8:a6:
         0c:a9:50:f9:77:36:93:98:99:36:1a:e5:3c:7a:e6:2d:07:25:
         f6:4b:8e:0c:83:c6:48:d9:55:26:db:83:69:d0:32:3f:f4:49:
         dc:01:e8:23:0a:53:66:7f:78:48:c7:78:60:09:05:f7:12:7e:
         be:5d:68:15:27:39:e1:45:cc:a7:4a:89:c3:15:91:b0:65:42:
         87:46:1c:2a:35:8e:dc:66:1e:81:45:d2:87:18:01:d2:04:9e:
         c1:02:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:27 2025 by rpki-client