This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e34372e36342e302f32302d3332203d3e20323632343032.roa
File:                     3137372e34372e36342e302f32302d3332203d3e20323632343032.roa (raw, json)
Hash identifier:          nolRZ2nIQj2+Xd/c8M391fFQTiF83OwXd5y75rntq/w=
Subject key identifier:   EB:36:B6:65:B6:8F:D0:65:EA:4D:D3:19:81:28:9B:44:9F:6C:0C:FA
Certificate issuer:       /CN=6089F3D89107738F93CB916607B5E12C0D11B759
Certificate serial:       31645D30C8790FE3935C12BB73DD18771E29D758
Authority key identifier: 60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e34372e36342e302f32302d3332203d3e20323632343032.roa
Signing time:             Mon 15 Dec 2025 22:17:37 +0000
ROA not before:           Mon 15 Dec 2025 22:12:37 +0000
ROA not after:            Mon 14 Dec 2026 22:17:37 +0000
asID:                     262402
IP address blocks:        177.47.64.0/20 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:64:5d:30:c8:79:0f:e3:93:5c:12:bb:73:dd:18:77:1e:29:d7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6089F3D89107738F93CB916607B5E12C0D11B759
        Validity
            Not Before: Dec 15 22:12:37 2025 GMT
            Not After : Dec 14 22:17:37 2026 GMT
        Subject: CN=EB36B665B68FD065EA4DD31981289B449F6C0CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:ef:8d:18:46:4b:a1:76:c8:c9:23:25:09:
                    25:60:c9:c9:88:6a:61:9c:3f:cb:19:76:17:4d:cf:
                    e6:9a:f8:a7:2a:7f:70:3c:c7:c1:ba:55:c4:ca:97:
                    21:24:dc:db:14:be:ad:8c:42:fb:2e:12:65:46:df:
                    f4:9a:5e:7c:05:e5:a2:0e:5f:0e:06:00:c6:ac:18:
                    1c:2b:e0:36:e9:6f:f9:5c:b7:50:f8:0b:ad:86:f4:
                    53:e4:c7:b7:b4:1a:bb:39:11:24:0b:fc:d5:50:2e:
                    6b:22:32:ae:5b:49:bf:1d:bb:79:96:ac:65:e9:8a:
                    a5:80:26:d9:83:61:79:34:b7:ed:5d:ae:e0:dd:35:
                    a1:ed:02:f1:5d:d2:9d:1f:88:86:12:f2:e1:3f:b3:
                    6f:05:1e:3e:25:52:b3:9d:b6:c0:c1:85:44:2e:f6:
                    c6:5d:dd:7b:55:bd:6c:e1:39:31:5a:39:2e:a2:3a:
                    05:75:78:58:cf:bd:2c:49:9f:9f:dd:c4:91:e0:38:
                    c0:41:fe:d5:cc:80:e2:93:3d:62:9d:d3:57:8e:47:
                    52:33:2d:48:05:1f:a5:c4:e1:cc:54:95:79:a1:ef:
                    eb:d8:9b:a5:fb:a1:10:ee:ae:54:81:e8:ca:b2:01:
                    ba:b5:ce:d4:8a:a5:2d:32:aa:8e:88:bc:48:47:95:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:B6:65:B6:8F:D0:65:EA:4D:D3:19:81:28:9B:44:9F:6C:0C:FA
            X509v3 Authority Key Identifier:
                keyid:60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/6089F3D89107738F93CB916607B5E12C0D11B759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/3137372e34372e36342e302f32302d3332203d3e20323632343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:1c:fd:bb:52:36:fc:a7:46:a6:6f:09:97:c7:e6:16:34:00:
         b0:91:60:c2:66:88:c8:9f:e3:2d:11:98:e0:9c:a8:5d:4b:d5:
         38:35:69:10:e3:56:0b:37:dc:62:52:7a:5d:eb:02:ae:d4:f3:
         d8:c1:bb:5f:9d:b7:03:c6:5f:3f:16:9b:c0:38:f4:b1:71:2f:
         1f:20:dd:26:ba:92:38:fd:41:38:02:13:4d:8c:d2:8d:30:a4:
         83:22:b9:7a:6b:76:50:71:b3:bd:40:47:07:ba:cf:ef:dd:34:
         08:36:35:27:e4:9d:96:89:9d:ec:91:50:76:00:10:d6:24:a9:
         e9:95:73:e4:b1:05:a6:65:4b:9e:9c:7c:6c:5d:c5:99:3b:0f:
         90:0b:82:d3:19:51:22:4b:7f:e6:20:e0:54:cd:98:9f:fe:a1:
         66:a9:b0:a6:74:a8:42:32:e6:39:fe:07:0c:72:e3:90:93:56:
         99:0b:a3:78:d1:cf:0e:fd:a1:4a:00:fd:a7:cc:a3:81:1e:a8:
         c9:86:47:8c:40:77:05:7b:98:1f:c6:5f:93:cb:d6:86:66:57:
         0c:33:79:ef:b5:aa:58:20:eb:61:2f:a9:88:bd:3e:57:d3:af:
         73:7c:f3:a8:5f:d3:ab:16:5f:e3:d6:cb:b9:4e:bc:c5:c8:9c:
         4d:e6:0a:99
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMWRdMMh5D+OTXBK7c90Ydx4p11gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA4OUYzRDg5MTA3NzM4RjkzQ0I5MTY2MDdCNUUxMkMw
RDExQjc1OTAeFw0yNTEyMTUyMjEyMzdaFw0yNjEyMTQyMjE3MzdaMDMxMTAvBgNV
BAMTKEVCMzZCNjY1QjY4RkQwNjVFQTRERDMxOTgxMjg5QjQ0OUY2QzBDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRJ++NGEZLoXbIySMlCSVgycmI
amGcP8sZdhdNz+aa+Kcqf3A8x8G6VcTKlyEk3NsUvq2MQvsuEmVG3/SaXnwF5aIO
Xw4GAMasGBwr4Dbpb/lct1D4C62G9FPkx7e0Grs5ESQL/NVQLmsiMq5bSb8du3mW
rGXpiqWAJtmDYXk0t+1druDdNaHtAvFd0p0fiIYS8uE/s28FHj4lUrOdtsDBhUQu
9sZd3XtVvWzhOTFaOS6iOgV1eFjPvSxJn5/dxJHgOMBB/tXMgOKTPWKd01eOR1Iz
LUgFH6XE4cxUlXmh7+vYm6X7oRDurlSB6MqyAbq1ztSKpS0yqo6IvEhHlWDZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6za2ZbaP0GXqTdMZgSibRJ9sDPowHwYDVR0j
BBgwFoAUYInz2JEHc4+Ty5FmB7XhLA0Rt1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjM0UVo1VTFQajFpVlJ1ZGtkU1RQeEpwVmZVclJTMnJHZFhhRVVCaGpS
eDEvMC82MDg5RjNEODkxMDc3MzhGOTNDQjkxNjYwN0I1RTEyQzBEMTFCNzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwODlGM0Q4OTEwNzczOEY5
M0NCOTE2NjA3QjVFMTJDMEQxMUI3NTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzNFFaNVUxUGoxaVZSdWRrZFNUUHhKcFZmVXJSUzJyR2RYYUVVQmhqUngxLzAv
MzEzNzM3MmUzNDM3MmUzNjM0MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzNjMy
MzQzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsS9AMA0GCSqGSIb3DQEBCwUAA4IBAQC9HP27Ujb8
p0ambwmXx+YWNACwkWDCZojIn+MtEZjgnKhdS9U4NWkQ41YLN9xiUnpd6wKu1PPY
wbtfnbcDxl8/FpvAOPSxcS8fIN0mupI4/UE4AhNNjNKNMKSDIrl6a3ZQcbO9QEcH
us/v3TQINjUn5J2WiZ3skVB2ABDWJKnplXPksQWmZUuenHxsXcWZOw+QC4LTGVEi
S3/mIOBUzZif/qFmqbCmdKhCMuY5/gcMcuOQk1aZC6N40c8O/aFKAP2nzKOBHqjJ
hkeMQHcFe5gfxl+Ty9aGZlcMM3nvtapYIOthL6mIvT5X069zfPOoX9OrFl/j1su5
TrzFyJxN5gqZ
-----END CERTIFICATE-----