This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          fD5OzhmzmgEnIrnWhL/0jlLveNWcapiypZb8uIZ4c+M=
Subject key identifier:   C8:F8:F4:5B:1A:76:E8:01:40:0F:94:AD:A2:70:69:9D:05:5E:AC:08
Certificate issuer:       /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial:       05B37E49AD55059793CB96DE8F516D0745E3591D
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Tue 13 Jan 2026 20:20:43 +0000
ROA not before:           Tue 13 Jan 2026 20:15:43 +0000
ROA not after:            Tue 12 Jan 2027 20:20:43 +0000
asID:                     271484
IP address blocks:        2804:7c40:200::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b3:7e:49:ad:55:05:97:93:cb:96:de:8f:51:6d:07:45:e3:59:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
        Validity
            Not Before: Jan 13 20:15:43 2026 GMT
            Not After : Jan 12 20:20:43 2027 GMT
        Subject: CN=C8F8F45B1A76E801400F94ADA270699D055EAC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:d0:f4:00:79:38:55:02:20:5b:79:8d:2f:
                    82:3f:71:85:12:84:f6:38:7c:2b:b4:9f:66:3a:8f:
                    d9:5f:b8:a9:b2:5a:9a:32:38:eb:5a:14:c4:9a:cb:
                    34:10:a0:04:30:66:ea:f0:83:18:2d:4d:b8:0a:d1:
                    30:ff:8b:d1:6c:41:e8:57:61:a2:c3:1d:c6:0a:64:
                    46:5a:a6:b5:be:00:05:60:4f:16:28:28:55:30:f8:
                    16:df:20:70:cf:62:54:13:2c:11:95:e1:cd:2c:3a:
                    aa:98:54:ed:71:47:c4:a6:36:5b:73:a9:ba:cf:77:
                    7e:24:ba:f3:28:ba:e2:74:a5:98:be:f9:37:ea:64:
                    b2:28:f8:2b:84:45:bc:8c:55:76:f3:57:34:97:da:
                    7d:c6:72:60:84:89:aa:32:85:af:f9:e6:76:79:95:
                    7d:45:81:38:08:72:2e:82:83:92:83:0e:3e:bb:43:
                    c0:d3:98:9a:bc:49:e9:4e:ff:00:8b:93:86:76:5e:
                    53:df:4c:36:93:20:4d:09:b1:2a:21:42:ff:82:42:
                    a5:c6:e5:7a:6f:36:c0:ee:35:98:ed:04:f8:db:08:
                    a6:1f:bc:df:f7:f6:ae:0d:9f:45:47:1f:9b:85:ff:
                    5f:59:cb:20:3c:95:4c:82:00:96:e2:b7:3f:6f:74:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F8:F4:5B:1A:76:E8:01:40:0F:94:AD:A2:70:69:9D:05:5E:AC:08
            X509v3 Authority Key Identifier:
                keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:aa:6f:49:df:80:cd:19:1d:97:43:cf:73:31:5b:d9:e2:57:
         86:89:a7:0a:39:12:ee:ae:3c:db:f8:4b:62:4e:fe:15:3c:12:
         c8:ce:77:d4:7c:3f:03:41:5a:7e:8d:83:aa:f4:83:aa:c3:1b:
         1b:e9:00:6c:5b:34:ef:cd:da:6a:45:f3:22:32:9a:39:17:6f:
         6d:12:2a:d3:58:36:e8:81:25:73:0e:fb:4e:15:c5:48:15:7b:
         f4:23:a5:d6:b1:8e:2f:a5:c3:68:0f:44:fd:26:66:69:01:48:
         26:2d:fb:db:de:2a:f2:9b:2e:ae:f4:bc:6d:ae:35:9a:6e:b7:
         61:0a:e1:c4:80:cb:d1:80:be:0e:46:1a:24:b3:3f:e0:fd:ce:
         c4:ee:60:cb:ec:36:ea:9a:6d:50:3d:5c:cd:f5:f8:30:84:fe:
         48:67:dc:dd:9e:27:71:32:47:b9:80:4a:67:d3:16:08:cc:fb:
         dc:c7:05:ee:07:17:24:62:03:a8:72:c9:04:7a:77:c4:f2:11:
         91:38:1c:81:48:c9:5c:5c:b7:33:4d:78:32:31:c8:76:30:08:
         17:36:15:da:b0:e9:e7:ef:8e:38:eb:4f:04:cc:20:4d:f7:71:
         8e:06:53:02:24:47:3a:6a:ec:45:1f:7d:e8:34:96:35:16:9e:
         e6:b2:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----