This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier:          d3iGDQBAYXKLrtBpNVjGVXJ7pdez3OdSgJmJ37NmaOo=
Subject key identifier:   38:B9:E7:6F:5F:43:52:D8:5B:3E:7C:E4:3A:0F:BA:94:91:CE:FA:54
Certificate issuer:       /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial:       3B9AC3B068B894DFBA2B0621F4A205331276AA24
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
Signing time:             Tue 13 Jan 2026 20:20:58 +0000
ROA not before:           Tue 13 Jan 2026 20:15:58 +0000
ROA not after:            Tue 12 Jan 2027 20:20:58 +0000
asID:                     271484
IP address blocks:        181.233.16.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9a:c3:b0:68:b8:94:df:ba:2b:06:21:f4:a2:05:33:12:76:aa:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
        Validity
            Not Before: Jan 13 20:15:58 2026 GMT
            Not After : Jan 12 20:20:58 2027 GMT
        Subject: CN=38B9E76F5F4352D85B3E7CE43A0FBA9491CEFA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:37:32:7a:7a:84:f7:3d:58:1b:0d:b7:19:
                    91:d4:a7:c1:58:52:a9:77:15:ef:07:b8:17:38:60:
                    9a:64:a0:36:bd:f6:e5:cf:cb:49:e9:20:4e:b7:25:
                    fd:08:a0:9f:37:6a:25:d9:97:a2:74:27:8d:6b:d9:
                    c0:f9:a8:5b:9f:27:e0:38:b7:98:89:18:1f:13:b6:
                    0d:c4:17:f4:16:1a:1d:d1:d1:6b:5b:8b:52:82:a4:
                    19:b5:37:78:b0:27:95:6c:ac:bf:0b:28:af:88:85:
                    f7:15:66:b6:a3:e2:7a:8d:a5:e7:6e:54:2c:53:17:
                    3e:82:e6:80:f1:3a:15:97:89:f3:be:c8:31:80:76:
                    5d:64:53:65:17:f1:b3:4b:ac:c2:df:f0:ff:47:46:
                    ab:41:dd:e6:00:3b:dc:04:3f:5e:f7:24:85:6c:70:
                    1b:01:43:08:da:cf:fc:a5:81:30:ec:bc:7f:eb:ad:
                    e3:8b:22:4a:93:c0:a6:b5:d5:c3:eb:27:1d:de:dd:
                    71:63:63:19:90:ec:0d:5a:ba:67:be:3f:b5:79:c3:
                    4b:c6:59:97:9c:57:fe:fe:50:19:bf:16:45:7e:9e:
                    61:a2:cc:20:56:8a:bd:06:e6:f4:41:00:6c:cc:56:
                    77:83:8c:07:12:dd:9c:ed:fe:a5:c8:a0:5c:47:86:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:E7:6F:5F:43:52:D8:5B:3E:7C:E4:3A:0F:BA:94:91:CE:FA:54
            X509v3 Authority Key Identifier:
                keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:dc:ee:97:15:b1:48:6e:64:f0:c0:f5:94:62:b9:b2:c6:
         f8:5b:62:5d:ff:1a:43:a7:eb:b9:f4:ac:d9:21:87:40:48:9b:
         e8:08:bf:8d:4a:11:08:02:28:2c:14:68:9a:97:e8:3a:6e:84:
         e6:b6:a6:70:c1:6f:b5:04:75:46:5c:1f:81:bc:8f:47:2a:32:
         76:6a:c9:00:8b:93:74:4a:0c:7e:6a:1e:2d:d6:af:2a:af:39:
         0c:39:72:ce:b9:d5:33:5f:61:f1:27:f2:b0:0e:ee:0a:1c:f5:
         a6:49:cc:7c:0f:32:b5:e2:a8:47:29:d6:b4:24:10:15:6a:b1:
         02:21:65:3a:52:8b:4b:2c:5c:9f:7e:3a:54:79:16:06:be:1f:
         ee:1b:9e:ac:08:42:17:ef:fe:a6:50:e6:a9:ac:cb:5d:68:57:
         90:14:10:0e:5f:e0:7a:af:cc:ac:23:a5:46:a0:d1:88:4e:bf:
         3d:13:96:03:26:21:17:93:2b:4f:2a:46:0c:13:1a:ae:3b:10:
         6d:cb:2e:6b:5e:ff:45:9d:8b:21:42:18:4c:3a:39:ad:81:e4:
         3d:54:7b:f3:1f:93:37:f6:23:35:4c:d9:bd:05:4c:13:7e:e6:
         77:0c:93:b9:a9:d9:9c:2d:3f:35:6e:3c:c1:cb:40:cf:2c:4c:
         67:50:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----