This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          U1nmChAkptQd0jUQSAuOFKa0sNiPcDXDVYn7/yp0qOQ=
Subject key identifier:   1B:8F:C0:6C:06:1C:ED:EE:6F:2C:FF:07:FC:65:F8:0A:B9:07:A4:98
Certificate issuer:       /CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
Certificate serial:       538505F85ADF5EEB6A05BC74DD62F20DF115F0D9
Authority key identifier: 9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Tue 13 Jan 2026 20:20:48 +0000
ROA not before:           Tue 13 Jan 2026 20:15:48 +0000
ROA not after:            Tue 12 Jan 2027 20:20:48 +0000
asID:                     271484
IP address blocks:        2804:7c40:400::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:85:05:f8:5a:df:5e:eb:6a:05:bc:74:dd:62:f2:0d:f1:15:f0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B
        Validity
            Not Before: Jan 13 20:15:48 2026 GMT
            Not After : Jan 12 20:20:48 2027 GMT
        Subject: CN=1B8FC06C061CEDEE6F2CFF07FC65F80AB907A498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:fe:54:3d:00:b4:3c:bc:e8:f2:f3:c1:c3:
                    4b:24:ef:bb:8d:51:60:6a:cb:2f:1e:79:d7:fd:d5:
                    7b:a0:00:4b:93:10:bf:dd:73:1f:80:2f:54:29:b6:
                    d1:1e:cc:41:2e:d1:14:dc:8e:94:b7:23:21:6c:00:
                    12:df:84:12:13:75:49:f6:cc:8c:1d:a3:9b:d3:52:
                    8c:27:f8:09:44:dd:96:29:99:9e:19:e3:a6:58:fb:
                    c9:c4:92:b4:00:a0:6e:8a:ea:e0:16:8c:0f:4f:6b:
                    6c:87:c1:7e:a6:3c:8e:06:cd:25:ff:59:c4:14:b0:
                    c3:0d:db:16:a0:da:01:ed:dc:3e:6f:37:a8:66:ab:
                    d8:e1:97:80:a2:57:84:cc:7b:a0:b0:fd:99:60:bc:
                    08:d8:a8:8f:b2:f0:b1:68:00:16:5e:76:b6:f9:db:
                    55:10:82:42:a1:0f:1c:bc:8e:cc:d5:6f:19:27:80:
                    7e:b6:d9:13:21:03:21:0e:a1:5d:6c:81:42:09:6e:
                    ab:d0:5c:3e:da:c8:97:63:d7:8c:35:ae:f1:a7:35:
                    cb:a4:79:f5:8e:98:da:cc:7a:58:dc:e9:eb:0c:30:
                    6d:3f:0e:5c:63:e2:0d:e0:0e:d2:5b:3c:0d:c8:7a:
                    c0:df:ba:f8:bb:0d:3c:65:f5:8b:fb:ae:3b:bc:ea:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8F:C0:6C:06:1C:ED:EE:6F:2C:FF:07:FC:65:F8:0A:B9:07:A4:98
            X509v3 Authority Key Identifier:
                keyid:9A:6E:50:81:4B:F7:3B:4D:0E:4A:D8:A5:C6:36:62:DE:4A:00:A8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A6E50814BF73B4D0E4AD8A5C63662DE4A00A82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:37:8b:1c:ec:4f:e0:ca:6d:86:39:c4:55:ef:d1:e9:51:73:
         bd:bc:8c:75:dc:32:c3:16:30:0d:72:0e:3a:e5:53:b3:33:10:
         77:1b:76:99:63:1b:9d:99:6b:e5:91:5d:d3:a4:80:82:4f:92:
         fe:08:21:6a:ba:cb:19:38:bb:99:0d:7e:a0:88:75:c5:54:e6:
         4e:e6:30:c5:24:a6:98:48:b6:11:bd:b1:9f:e5:bd:d0:c6:e8:
         5b:9a:ea:39:34:25:20:5a:32:ba:cb:1a:dc:5c:ea:43:b9:45:
         e9:bc:bb:8c:e9:58:8e:53:5b:33:4a:8f:4d:0c:2a:55:7a:7e:
         0b:d7:db:8e:3d:7d:0f:03:5b:c5:b4:72:23:1d:8b:f8:3d:ad:
         51:fa:52:bd:a4:1e:4f:c0:ec:58:18:69:cb:20:c8:f4:15:75:
         95:aa:69:d8:ba:df:67:22:2c:dd:24:ab:85:30:86:a4:d8:4e:
         d3:f6:43:fd:f4:dc:16:25:f7:4c:37:61:c0:d1:07:8c:13:a9:
         07:a3:09:96:97:bd:04:a0:94:f8:21:69:48:60:b7:98:39:01:
         fd:84:cf:86:b6:1b:20:fb:9b:17:ef:64:82:92:e6:09:ca:1d:
         28:53:3b:69:8b:27:55:58:d2:d7:57:a3:9f:ba:b1:1a:13:57:
         e4:48:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----