This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier:          vI0US6GtqCYplljUo6ywvygM+hEPSBydtmvdt+LgnA8=
Subject key identifier:   20:5F:63:99:53:79:F9:CD:2A:95:14:BB:DC:18:4B:6A:71:5D:3C:C1
Certificate issuer:       /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial:       3508ABA7B5B976EC6D0D22C51191CE78F922DAA0
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
Signing time:             Tue 13 Jan 2026 20:21:05 +0000
ROA not before:           Tue 13 Jan 2026 20:16:05 +0000
ROA not after:            Tue 12 Jan 2027 20:21:05 +0000
asID:                     271484
IP address blocks:        181.233.18.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:08:ab:a7:b5:b9:76:ec:6d:0d:22:c5:11:91:ce:78:f9:22:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
        Validity
            Not Before: Jan 13 20:16:05 2026 GMT
            Not After : Jan 12 20:21:05 2027 GMT
        Subject: CN=205F63995379F9CD2A9514BBDC184B6A715D3CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:e0:47:12:db:e1:eb:87:41:a3:b6:b4:49:
                    ca:10:0c:b9:13:1a:2a:2f:5b:d6:f9:2d:bd:23:8e:
                    a6:6a:77:5d:1c:56:b1:96:dd:05:7e:42:c0:ee:98:
                    2f:1b:23:dc:b1:f6:9d:31:b6:a3:cd:4c:b2:99:51:
                    48:2c:13:96:50:d0:24:88:59:9e:84:d4:10:40:28:
                    75:96:df:93:9f:05:11:d3:c4:2d:04:a2:87:95:7e:
                    b3:80:3b:32:85:fd:4f:b7:ec:07:da:12:c2:b8:0c:
                    b3:00:02:61:60:cb:94:94:e3:3a:11:d6:7e:3e:40:
                    90:42:50:72:bc:47:e0:0c:e9:1f:1c:94:aa:c5:ea:
                    d2:50:0e:2c:6f:96:12:57:c1:0b:10:77:9d:23:7f:
                    c2:8c:64:87:67:99:59:7f:57:d8:ca:94:08:86:b5:
                    f6:f8:a4:53:e1:7d:fe:bc:d7:98:f4:86:cd:ea:19:
                    1d:0f:27:a8:6e:18:51:f8:b4:1c:e6:0c:f4:ff:ff:
                    83:26:dd:98:6e:d3:a1:48:a0:7d:2e:bb:4d:3f:d6:
                    00:c8:42:f6:1a:ad:45:52:e1:dc:ba:7d:67:f2:42:
                    85:27:72:80:c5:4c:a7:9b:64:2c:3e:54:3a:8d:58:
                    3c:71:e4:0e:c4:9f:02:c1:28:49:61:d5:e8:be:9d:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:63:99:53:79:F9:CD:2A:95:14:BB:DC:18:4B:6A:71:5D:3C:C1
            X509v3 Authority Key Identifier:
                keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:83:98:23:0f:7e:0e:d5:96:31:94:d5:bb:c2:24:21:a5:
         60:a9:5c:6d:b0:d4:9a:9b:95:5e:ac:03:a8:7d:16:45:8a:6e:
         b1:f8:38:59:df:0d:23:ea:5b:7e:f6:4a:34:d4:75:3d:bd:45:
         f4:dd:a1:51:27:53:47:5a:6f:fd:66:7b:d4:80:87:18:62:39:
         43:c7:f4:1e:37:8b:c5:30:74:94:0f:a1:f2:58:ae:9c:76:91:
         7b:dc:f4:f5:a5:d1:cf:8a:e8:4a:0d:56:47:72:00:6b:a5:8b:
         50:89:48:89:82:4e:c0:61:f6:48:a4:33:2b:45:d1:5b:e3:f1:
         fc:58:2b:7f:c1:38:cb:54:97:b3:16:73:0f:e0:65:fc:03:93:
         b0:62:54:31:16:6b:39:30:f1:d4:f0:e3:9a:f5:5a:0f:ac:68:
         f4:95:f4:71:ca:a6:b2:50:dc:86:0e:66:eb:ab:7f:27:c9:fa:
         62:7c:df:5e:60:9b:7f:83:f9:82:c1:07:2a:78:17:a4:c1:53:
         1b:af:46:b7:41:41:b5:57:17:65:fc:31:07:27:a5:29:70:1b:
         21:69:0f:c6:b7:98:3d:7f:06:60:c6:dd:bf:96:dd:00:3c:27:
         21:bf:b1:d0:86:a5:b9:29:9b:bf:b2:1e:67:af:14:7a:57:9f:
         5b:23:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----