This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38302e302f32322d3332203d3e20323638313033.roa
File:                     34352e3136392e38302e302f32322d3332203d3e20323638313033.roa (raw, json)
Hash identifier:          jpdV61AV2mcWh9viej+R4CJCCLwF0c9r4773/P/EzEY=
Subject key identifier:   66:B4:1F:9F:90:F8:C7:2A:D7:C9:32:BE:6D:93:2D:B9:53:72:F4:56
Certificate issuer:       /CN=7E49C2675FEFF5C47686EF21CF272D21EF1096B5
Certificate serial:       0FD39F53738B76403217EB372A33725B35C89671
Authority key identifier: 7E:49:C2:67:5F:EF:F5:C4:76:86:EF:21:CF:27:2D:21:EF:10:96:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E49C2675FEFF5C47686EF21CF272D21EF1096B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38302e302f32322d3332203d3e20323638313033.roa
Signing time:             Thu 04 Dec 2025 01:38:02 +0000
ROA not before:           Thu 04 Dec 2025 01:33:02 +0000
ROA not after:            Thu 03 Dec 2026 01:38:02 +0000
asID:                     268103
IP address blocks:        45.169.80.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d3:9f:53:73:8b:76:40:32:17:eb:37:2a:33:72:5b:35:c8:96:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E49C2675FEFF5C47686EF21CF272D21EF1096B5
        Validity
            Not Before: Dec  4 01:33:02 2025 GMT
            Not After : Dec  3 01:38:02 2026 GMT
        Subject: CN=66B41F9F90F8C72AD7C932BE6D932DB95372F456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:9f:9f:36:7f:29:c6:62:94:26:cc:4b:93:
                    28:c9:26:00:f7:18:55:07:a6:f3:05:dd:3b:b9:06:
                    a7:71:a5:78:14:76:22:af:ba:e0:a2:bc:23:9f:2e:
                    c9:bd:bd:06:98:5c:73:fb:de:7d:31:20:eb:5d:e4:
                    7b:67:03:15:6d:90:a6:0f:93:b8:8f:f8:27:3b:5f:
                    c5:24:61:90:c5:00:6a:1a:af:27:28:b4:10:9a:80:
                    9a:55:be:1b:fd:61:49:1c:5c:fe:c3:ef:0d:e1:fd:
                    d8:df:c5:9e:23:12:2a:95:23:7a:53:e7:93:11:01:
                    18:c1:b5:ad:c0:30:6c:9b:6d:b4:89:3e:9e:0c:0a:
                    70:f7:2b:d5:b2:c6:62:f8:b3:1b:99:d6:dd:2d:fa:
                    f7:e8:b9:a0:0f:a9:25:1d:54:2f:18:15:dd:1f:ba:
                    78:fa:db:8b:a5:7f:a9:79:ae:b8:d5:2d:4f:a4:f3:
                    90:f1:ac:f0:8e:3f:c2:81:1a:89:20:58:d6:fe:7f:
                    2d:05:cc:b1:99:af:89:b8:01:74:e9:98:c6:46:24:
                    1a:1b:b4:c5:fd:39:1c:e0:47:48:89:83:21:4d:07:
                    27:3a:ed:b1:ce:db:7e:82:d4:98:b5:e2:e9:eb:8a:
                    57:51:63:9d:a6:1e:46:25:91:bb:5c:39:15:76:28:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B4:1F:9F:90:F8:C7:2A:D7:C9:32:BE:6D:93:2D:B9:53:72:F4:56
            X509v3 Authority Key Identifier:
                keyid:7E:49:C2:67:5F:EF:F5:C4:76:86:EF:21:CF:27:2D:21:EF:10:96:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/7E49C2675FEFF5C47686EF21CF272D21EF1096B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E49C2675FEFF5C47686EF21CF272D21EF1096B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38302e302f32322d3332203d3e20323638313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:3c:dd:68:84:2d:39:c3:30:78:6a:22:bc:71:6a:06:51:05:
         fe:e9:f2:ac:bf:c2:39:2d:f3:1d:52:dc:75:b4:79:fb:04:23:
         a3:32:b5:89:7b:28:56:9c:ef:06:33:89:f2:e9:db:f4:92:ff:
         41:19:8c:28:a4:94:ba:27:9e:1a:57:df:76:52:7c:20:94:13:
         31:5b:22:e5:fc:91:48:46:4e:a8:70:65:21:b9:4f:0e:5f:81:
         fd:ff:0b:5e:31:44:a2:a5:8e:ce:db:47:95:4a:42:be:d7:b1:
         3d:fd:77:bf:5d:7b:da:d4:4f:91:76:65:fd:ae:de:16:8c:4a:
         40:f8:96:35:7f:3f:cf:e6:8d:a8:b9:63:96:3d:35:88:68:5a:
         24:eb:61:aa:a1:c7:2c:08:64:ef:3c:b7:b8:4e:25:90:a4:bf:
         c5:f9:00:f9:69:61:0e:c5:d5:bf:5f:e7:9e:69:07:10:58:1c:
         d9:cb:d1:e4:aa:c3:b1:b7:c6:ee:35:3f:9c:92:4a:43:e7:65:
         58:cc:fa:ce:a4:a7:01:3e:61:c3:b8:eb:2f:fe:67:5f:6f:2c:
         fb:bb:dc:a0:83:25:77:19:ea:a4:6e:78:7c:5d:0b:26:b9:e2:
         60:c3:e6:7e:fa:1e:2a:73:29:d9:ba:31:d4:26:6b:7a:04:5c:
         7f:f3:14:2a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD9OfU3OLdkAyF+s3KjNyWzXIlnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U0OUMyNjc1RkVGRjVDNDc2ODZFRjIxQ0YyNzJEMjFF
RjEwOTZCNTAeFw0yNTEyMDQwMTMzMDJaFw0yNjEyMDMwMTM4MDJaMDMxMTAvBgNV
BAMTKDY2QjQxRjlGOTBGOEM3MkFEN0M5MzJCRTZEOTMyREI5NTM3MkY0NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0p+fNn8pxmKUJsxLkyjJJgD3
GFUHpvMF3Tu5BqdxpXgUdiKvuuCivCOfLsm9vQaYXHP73n0xIOtd5HtnAxVtkKYP
k7iP+Cc7X8UkYZDFAGoarycotBCagJpVvhv9YUkcXP7D7w3h/djfxZ4jEiqVI3pT
55MRARjBta3AMGybbbSJPp4MCnD3K9WyxmL4sxuZ1t0t+vfouaAPqSUdVC8YFd0f
unj624ulf6l5rrjVLU+k85DxrPCOP8KBGokgWNb+fy0FzLGZr4m4AXTpmMZGJBob
tMX9ORzgR0iJgyFNByc67bHO236C1Ji14unrildRY52mHkYlkbtcORV2KOHTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZrQfn5D4xyrXyTK+bZMtuVNy9FYwHwYDVR0j
BBgwFoAUfknCZ1/v9cR2hu8hzyctIe8QlrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVlaMmJWbmFvYXJhTlVudGtaQnVmblRpZVBNRkR3Vmt6RG9MQ0hubWdG
WUIvMC83RTQ5QzI2NzVGRUZGNUM0NzY4NkVGMjFDRjI3MkQyMUVGMTA5NkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFNDlDMjY3NUZFRkY1QzQ3
Njg2RUYyMUNGMjcyRDIxRUYxMDk2QjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVZWjJiVm5hb2FyYU5VbnRrWkJ1Zm5UaWVQTUZEd1ZrekRvTENIbm1nRllCLzAv
MzQzNTJlMzEzNjM5MmUzODMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLalQMA0GCSqGSIb3DQEBCwUAA4IBAQBaPN1ohC05
wzB4aiK8cWoGUQX+6fKsv8I5LfMdUtx1tHn7BCOjMrWJeyhWnO8GM4ny6dv0kv9B
GYwopJS6J54aV992UnwglBMxWyLl/JFIRk6ocGUhuU8OX4H9/wteMUSipY7O20eV
SkK+17E9/Xe/XXva1E+RdmX9rt4WjEpA+JY1fz/P5o2ouWOWPTWIaFok62Gqoccs
CGTvPLe4TiWQpL/F+QD5aWEOxdW/X+eeaQcQWBzZy9HkqsOxt8buNT+ckkpD52VY
zPrOpKcBPmHDuOsv/mdfbyz7u9yggyV3Geqkbnh8XQsmueJgw+Z++h4qcynZujHU
Jmt6BFx/8xQq
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:14 2025 by rpki-client