This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          by9r1sCp5nD7+NclH5zrhC452A53mG6/vXPeLSdzjBE=
Subject key identifier:   A2:77:F6:CE:F4:AA:DB:BF:E8:5B:E3:DB:45:FC:21:1B:A9:77:38:82
Certificate issuer:       /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial:       5DE6FB4B2DD14A8E6AC5CDF92434C478459B967D
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Tue 13 Jan 2026 20:20:41 +0000
ROA not before:           Tue 13 Jan 2026 20:15:41 +0000
ROA not after:            Tue 12 Jan 2027 20:20:41 +0000
asID:                     271484
IP address blocks:        2804:7c40:100::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e6:fb:4b:2d:d1:4a:8e:6a:c5:cd:f9:24:34:c4:78:45:9b:96:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
        Validity
            Not Before: Jan 13 20:15:41 2026 GMT
            Not After : Jan 12 20:20:41 2027 GMT
        Subject: CN=A277F6CEF4AADBBFE85BE3DB45FC211BA9773882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:8a:ee:1f:6b:2a:7e:27:87:ac:46:d0:88:
                    5d:30:40:99:8e:35:4f:79:3d:22:9f:7c:fb:84:84:
                    1f:17:dc:cc:f7:4d:18:19:c6:9d:bc:e6:33:05:95:
                    ee:89:ca:36:f3:0d:51:36:a5:cc:d8:99:50:90:b4:
                    cc:a3:ad:62:b7:09:14:49:4a:1a:fa:04:6e:2c:1c:
                    00:cb:18:c9:d4:42:84:e3:0f:5c:fb:75:76:d3:b6:
                    c9:a6:e9:8c:9f:57:20:e5:c7:9d:3f:c2:c9:8f:2f:
                    64:f3:c0:6e:ec:c9:4c:d7:a8:9e:09:f5:1b:19:b2:
                    98:d5:f4:6e:17:ea:14:a5:2d:d7:63:b9:78:e3:ff:
                    89:d2:f4:d1:ed:ca:66:35:32:7a:a0:3b:f5:6b:80:
                    e0:a5:75:46:27:9e:da:28:9e:fe:59:2a:cd:95:0e:
                    7a:52:24:ec:c2:b2:0f:90:53:48:c2:bb:17:55:3c:
                    3e:01:6f:5e:cd:81:42:b1:db:b4:c8:da:e8:7d:44:
                    15:c4:5f:ca:65:92:24:5d:93:9c:8e:3d:3a:50:6a:
                    a1:22:87:f5:8a:4e:c8:07:b6:66:7d:9d:d2:19:e0:
                    4c:64:5a:33:51:4e:46:e0:5e:78:d0:fe:0c:cd:3d:
                    ff:11:c6:d2:54:1e:64:62:ed:a9:a9:0f:ae:49:4e:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:77:F6:CE:F4:AA:DB:BF:E8:5B:E3:DB:45:FC:21:1B:A9:77:38:82
            X509v3 Authority Key Identifier:
                keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:67:13:8d:ef:e4:d7:9c:d1:1c:5a:ce:7d:d4:e3:45:34:8b:
         83:60:c4:f9:71:30:97:22:a7:82:60:94:d9:94:4c:0b:22:5c:
         b0:2d:c4:45:e2:a2:ec:ee:33:6c:1b:3f:79:63:78:d0:41:7c:
         8a:50:30:b7:eb:22:58:c9:61:25:be:f0:d2:5f:a2:da:a1:85:
         b3:22:e8:28:66:3a:1c:3d:68:70:f1:8b:52:fa:ef:8e:47:69:
         40:3b:2b:18:ce:93:ee:99:36:12:a9:8d:45:ec:3f:db:6d:58:
         db:46:2f:73:92:f9:3c:f5:78:92:6b:67:7c:24:6f:37:ba:d3:
         2d:ff:02:bf:10:44:d3:05:9a:ab:f7:7a:1b:2a:b5:63:bc:87:
         1e:67:e4:70:8d:68:70:e3:63:3c:8b:bc:0c:71:40:5e:2a:d0:
         9b:eb:25:6f:1f:cf:63:67:31:05:e2:1f:73:d7:ef:a5:82:3e:
         eb:de:79:90:c6:25:67:e2:6a:28:e4:ff:a0:81:a9:1e:37:e3:
         7b:53:bf:b5:5e:b2:13:fa:36:43:74:cf:94:e2:ac:6f:9a:ec:
         cc:f0:36:c4:b3:5f:85:cb:99:2e:2a:83:ca:96:39:4e:f4:bc:
         51:c4:4c:a9:86:05:14:6e:1f:63:60:a7:5e:2e:12:14:cd:36:
         32:e4:9a:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXeb7Sy3RSo5qxc35JDTEeEWbln0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE2RTUwODE0QkY3M0I0RDBFNEFEOEE1QzYzNjYyREU0
QTAwQTgyQjAeFw0yNjAxMTMyMDE1NDFaFw0yNzAxMTIyMDIwNDFaMDMxMTAvBgNV
BAMTKEEyNzdGNkNFRjRBQURCQkZFODVCRTNEQjQ1RkMyMTFCQTk3NzM4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42oruH2sqfieHrEbQiF0wQJmO
NU95PSKffPuEhB8X3Mz3TRgZxp285jMFle6JyjbzDVE2pczYmVCQtMyjrWK3CRRJ
Shr6BG4sHADLGMnUQoTjD1z7dXbTtsmm6YyfVyDlx50/wsmPL2TzwG7syUzXqJ4J
9RsZspjV9G4X6hSlLddjuXjj/4nS9NHtymY1MnqgO/VrgOCldUYnntoonv5ZKs2V
DnpSJOzCsg+QU0jCuxdVPD4Bb17NgUKx27TI2uh9RBXEX8plkiRdk5yOPTpQaqEi
h/WKTsgHtmZ9ndIZ4ExkWjNRTkbgXnjQ/gzNPf8RxtJUHmRi7ampD65JTsBNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUonf2zvSq27/oW+PbRfwhG6l3OIIwHwYDVR0j
BBgwFoAUmm5QgUv3O00OStilxjZi3koAqCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC85QTZFNTA4MTRCRjczQjREMEU0QUQ4QTVDNjM2NjJERTRBMDBBODJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBNkU1MDgxNEJGNzNCNEQw
RTRBRDhBNUM2MzY2MkRFNEEwMEE4MkIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzIzODMwMzQzYTM3NjMzNDMwM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBHxAATANBgkqhkiG9w0BAQsFAAOC
AQEAYmcTje/k15zRHFrOfdTjRTSLg2DE+XEwlyKngmCU2ZRMCyJcsC3EReKi7O4z
bBs/eWN40EF8ilAwt+siWMlhJb7w0l+i2qGFsyLoKGY6HD1ocPGLUvrvjkdpQDsr
GM6T7pk2EqmNRew/221Y20Yvc5L5PPV4kmtnfCRvN7rTLf8CvxBE0wWaq/d6Gyq1
Y7yHHmfkcI1ocONjPIu8DHFAXirQm+slbx/PY2cxBeIfc9fvpYI+6955kMYlZ+Jq
KOT/oIGpHjfje1O/tV6yE/o2Q3TPlOKsb5rszPA2xLNfhcuZLiqDypY5TvS8UcRM
qYYFFG4fY2CnXi4SFM02MuSaaw==
-----END CERTIFICATE-----