This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/323830343a3364383a3a2f33322d313238203d3e20323632343032.roa
File:                     323830343a3364383a3a2f33322d313238203d3e20323632343032.roa (raw, json)
Hash identifier:          gtCGKMc7CiUo4qBGJ/7js036Aa2aMgqKZiO3kIztGDg=
Subject key identifier:   E5:C4:65:52:7C:AC:81:DD:F6:BF:12:DC:DB:CC:03:92:11:27:B4:C1
Certificate issuer:       /CN=6089F3D89107738F93CB916607B5E12C0D11B759
Certificate serial:       74CE0B50562DE630372CA31961F85B3991467210
Authority key identifier: 60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/323830343a3364383a3a2f33322d313238203d3e20323632343032.roa
Signing time:             Mon 15 Dec 2025 22:17:47 +0000
ROA not before:           Mon 15 Dec 2025 22:12:47 +0000
ROA not after:            Mon 14 Dec 2026 22:17:47 +0000
asID:                     262402
IP address blocks:        2804:3d8::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ce:0b:50:56:2d:e6:30:37:2c:a3:19:61:f8:5b:39:91:46:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6089F3D89107738F93CB916607B5E12C0D11B759
        Validity
            Not Before: Dec 15 22:12:47 2025 GMT
            Not After : Dec 14 22:17:47 2026 GMT
        Subject: CN=E5C465527CAC81DDF6BF12DCDBCC03921127B4C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:e3:ae:a0:42:04:6f:d2:53:9e:ac:d0:47:
                    14:48:e1:79:67:19:10:5c:66:34:d3:ad:04:a5:e1:
                    9a:4d:81:d5:28:9f:12:ad:6b:75:25:45:6d:85:4c:
                    e3:38:a5:5d:93:fb:5f:bf:99:25:45:cc:fe:de:ee:
                    f5:c3:bf:1f:b2:fa:19:69:9b:8a:3b:7e:ae:f5:9a:
                    79:d3:f2:fe:cf:d1:db:63:1b:d6:a6:62:f6:6b:3b:
                    28:4b:b8:20:79:76:52:8d:28:67:35:d2:db:99:d5:
                    f8:98:cf:85:5c:12:a4:a8:68:f8:5a:a8:24:9b:be:
                    be:1f:11:2d:d9:0e:bc:3d:00:36:76:36:e2:40:14:
                    61:5c:17:0c:37:e7:ae:ca:dd:d6:e7:cf:89:5b:de:
                    3c:09:af:5e:b7:c6:37:31:ad:62:b0:01:1f:11:d9:
                    7a:ee:1b:52:73:da:44:70:7b:7d:a1:df:13:2d:b8:
                    4f:f5:6e:ca:02:87:6e:99:8e:69:28:f2:75:3b:98:
                    5b:9a:ec:3a:31:90:df:fb:89:81:5f:cd:7b:2a:8b:
                    15:4c:82:e8:2f:15:03:f1:5a:18:4f:0e:9e:36:7a:
                    2d:e0:e0:bb:08:94:f1:10:6f:18:b1:18:5c:0c:56:
                    5b:0b:9a:4f:c2:49:8f:84:47:dd:4e:69:b7:74:61:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C4:65:52:7C:AC:81:DD:F6:BF:12:DC:DB:CC:03:92:11:27:B4:C1
            X509v3 Authority Key Identifier:
                keyid:60:89:F3:D8:91:07:73:8F:93:CB:91:66:07:B5:E1:2C:0D:11:B7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/6089F3D89107738F93CB916607B5E12C0D11B759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6089F3D89107738F93CB916607B5E12C0D11B759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/323830343a3364383a3a2f33322d313238203d3e20323632343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:42:9a:f6:1c:f3:37:1c:3d:e2:95:7f:ab:62:00:f4:07:36:
         ca:ac:82:58:c6:3e:1b:e4:37:22:d3:df:a6:b6:c6:d3:11:5b:
         8e:e5:ad:15:09:c3:5a:1b:9d:d7:e6:2b:74:b9:c4:cd:63:9a:
         69:c5:16:5d:13:e4:b4:24:b1:9f:b4:90:3b:98:50:93:77:13:
         fe:c7:5d:4b:30:c4:17:b4:a9:c8:4a:19:f9:e6:cc:96:38:5a:
         83:4a:a3:8f:e9:25:97:60:9d:44:26:be:18:2c:2a:de:82:22:
         41:d3:b9:e8:18:08:b4:ca:5a:35:2f:06:3c:7c:3e:61:02:5e:
         1e:f6:63:ab:69:20:26:0d:54:68:e6:5a:8c:98:f0:e6:45:0f:
         b0:80:42:7d:a6:ba:6e:0e:b5:d0:08:92:6e:19:09:00:1d:64:
         8e:bc:52:0e:eb:a5:8c:a9:c2:1c:4a:53:8f:c0:66:e0:29:d6:
         da:c2:11:81:69:cd:dd:3f:75:0c:ee:bf:dd:9a:69:e9:ca:84:
         f4:46:0c:ce:52:78:d9:63:be:91:75:c5:cc:14:c9:bf:50:c9:
         57:a0:f8:00:c0:ee:fe:2c:7b:49:40:a5:29:ab:97:06:b2:7e:
         1a:2e:63:03:83:e0:71:30:0a:0c:1a:32:9f:40:0f:61:83:4c:
         3b:27:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----