This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          gd2fsvJbYtSoJafRV22VenlRY+HXRC8THI9FzS+bu1M=
Subject key identifier:   29:03:67:0E:86:99:D8:CF:29:F0:61:64:61:78:D1:E0:4D:45:18:6D
Certificate issuer:       /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial:       2E73135B2F87631E0B53CA4AA1BB5A1280E59CF6
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
Signing time:             Tue 13 Jan 2026 20:21:02 +0000
ROA not before:           Tue 13 Jan 2026 20:16:02 +0000
ROA not after:            Tue 12 Jan 2027 20:21:02 +0000
asID:                     271484
IP address blocks:        181.233.17.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:73:13:5b:2f:87:63:1e:0b:53:ca:4a:a1:bb:5a:12:80:e5:9c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
        Validity
            Not Before: Jan 13 20:16:02 2026 GMT
            Not After : Jan 12 20:21:02 2027 GMT
        Subject: CN=2903670E8699D8CF29F061646178D1E04D45186D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:05:00:e8:3a:5b:aa:19:83:0a:85:eb:03:
                    e4:43:5e:0f:df:c3:1a:a2:4a:98:7e:55:eb:cc:30:
                    ea:83:bf:51:4b:05:7f:79:0c:36:df:99:7a:bb:a8:
                    6c:1d:b9:90:18:aa:42:e6:c7:71:23:1a:25:f6:c8:
                    da:5c:34:b8:29:b7:38:bf:51:8a:ee:1d:af:3b:da:
                    22:e5:3a:72:f6:07:5b:5a:24:f3:56:0e:11:32:85:
                    70:c0:60:a3:d8:7b:0b:c3:7f:5e:8f:78:e1:44:94:
                    c4:e6:11:2a:dc:5b:d8:ea:69:3e:cf:48:64:1f:31:
                    09:d5:b6:f6:ea:70:cc:d0:49:e1:45:64:bc:7a:32:
                    9c:c7:ae:28:2f:0a:f6:65:5a:3e:fe:99:53:5f:f6:
                    db:c4:01:c8:54:bf:50:26:1f:a1:87:fc:ea:91:85:
                    91:5a:15:94:36:cf:22:db:8b:a2:6e:c5:60:ba:92:
                    3c:39:d9:0e:3e:5b:a8:70:c1:e2:3f:6d:b8:7a:4d:
                    3d:de:02:76:d2:a4:9b:4d:46:f2:26:e6:be:15:e2:
                    bc:6b:08:a5:f1:5c:a3:70:92:7b:30:50:ed:87:64:
                    e4:98:82:22:b9:c3:e1:0c:df:9a:42:d5:08:ac:20:
                    62:96:5f:c9:01:8c:a1:77:49:fd:68:aa:5e:96:25:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:67:0E:86:99:D8:CF:29:F0:61:64:61:78:D1:E0:4D:45:18:6D
            X509v3 Authority Key Identifier:
                keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a6:5b:4c:4f:1c:07:a2:98:61:f2:e0:bd:3e:d9:a5:d2:ee:
         bf:40:27:a7:32:00:3b:ec:5a:de:e2:97:9e:3a:2b:97:17:da:
         57:5f:7b:c8:57:11:f7:60:df:90:61:09:91:23:ce:bb:3d:8e:
         a5:d8:84:69:83:1c:ee:45:c7:e7:42:1a:31:34:bb:c7:bb:13:
         c3:62:bc:54:a3:43:68:03:53:61:cf:ee:be:30:85:e0:3d:9c:
         92:e5:cb:87:03:87:da:93:c0:3a:7f:1a:9f:26:98:8b:22:2f:
         c3:da:56:fe:3c:23:d6:f9:21:d2:47:ef:c1:0a:35:4c:e5:5b:
         e1:a4:2a:4d:dc:e1:61:33:87:87:64:e9:5f:52:98:3a:66:05:
         84:0a:cc:cb:d9:92:d3:42:39:9c:5e:92:43:f1:9d:cf:f8:a6:
         77:ec:f9:e5:66:a9:7c:34:6e:83:27:25:84:8e:65:48:b2:57:
         a0:82:07:52:ff:69:6b:f1:c5:be:58:c3:29:ca:5c:88:ef:e8:
         b8:b0:53:7a:92:fd:f9:fc:bb:3a:b4:0d:ae:f9:93:e7:1f:f1:
         0a:b4:86:e1:12:d3:80:17:ff:f6:0e:9f:ba:68:a5:06:66:6e:
         fe:37:58:a6:e9:e3:eb:85:49:13:80:6a:3e:c8:d5:e3:28:f4:
         8a:f2:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----