This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa
File:                     3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa (raw, json)
Hash identifier:          9aXsAh1QqBUeJS1sH/0mvXgPuyOhWua16oucVhviyfA=
Subject key identifier:   97:86:47:59:8C:DA:99:EF:4D:23:B1:69:17:FD:B2:D2:25:2B:4F:67
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       560452B3D7F1988D761080CD78250DDFB3206F73
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa
Signing time:             Thu 13 Nov 2025 19:35:23 +0000
ROA not before:           Thu 13 Nov 2025 19:30:23 +0000
ROA not after:            Thu 12 Nov 2026 19:35:23 +0000
asID:                     270701
IP address blocks:        189.127.132.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:04:52:b3:d7:f1:98:8d:76:10:80:cd:78:25:0d:df:b3:20:6f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:23 2025 GMT
            Not After : Nov 12 19:35:23 2026 GMT
        Subject: CN=978647598CDA99EF4D23B16917FDB2D2252B4F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:f6:40:ae:67:a4:07:8e:c7:71:b0:ec:6d:
                    92:6e:77:36:32:b7:3d:b9:82:47:e0:1a:fa:f3:df:
                    22:03:10:6c:03:ea:27:67:32:fc:ea:9e:2b:4b:8b:
                    09:fa:7c:cd:6b:28:e9:71:89:ef:78:2e:f1:eb:68:
                    0b:da:73:4c:b9:1c:6d:47:18:4e:5d:0f:f5:bc:03:
                    f5:fd:49:87:78:bb:72:d4:18:22:82:fb:0a:47:bd:
                    04:1a:77:f0:78:76:29:06:00:1c:da:6d:8f:8a:06:
                    34:06:90:34:1d:a7:b8:7c:39:02:90:a6:de:22:37:
                    17:2c:1d:48:2f:56:2a:22:8a:00:db:a4:58:1c:9b:
                    7d:b5:df:1c:cb:4e:5f:be:bd:c3:b5:08:5f:2c:de:
                    a5:4b:b5:4c:4d:2a:d4:7a:39:f0:d1:fd:9a:45:fd:
                    0f:43:dc:1f:28:4b:17:52:ce:b3:0a:e2:d2:77:c5:
                    48:2e:ec:69:99:cf:23:ae:d1:87:86:27:77:ed:ad:
                    da:57:76:85:27:d5:0e:2d:07:c2:78:90:7d:b2:9b:
                    c3:cf:65:f6:b8:a8:5a:67:1a:8b:c9:12:46:f9:f2:
                    e6:52:37:c9:16:af:c8:d2:93:db:64:f4:18:50:63:
                    df:03:04:9d:77:52:c7:10:05:fc:15:a2:c6:50:0f:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:86:47:59:8C:DA:99:EF:4D:23:B1:69:17:FD:B2:D2:25:2B:4F:67
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:1e:96:1e:75:3f:9b:3b:d5:38:c5:a7:06:34:2e:b5:44:
         ef:35:96:26:c5:6e:e6:6d:08:40:0f:e3:86:0c:45:ca:e7:de:
         bf:6a:f6:1f:78:f4:a5:be:e5:0f:08:95:79:00:66:3a:4f:48:
         2b:aa:1a:c9:31:3a:6f:42:cc:44:bc:10:f0:f0:98:de:f3:b7:
         9c:4a:20:3e:2d:70:9c:75:2a:bd:79:b0:70:72:48:ce:ff:7b:
         1d:9f:0f:95:f0:9d:87:48:5b:af:5a:9e:0b:4e:cd:17:96:a2:
         c0:a2:8c:e3:41:88:e7:33:84:02:8d:08:c4:33:34:52:20:a9:
         24:6e:aa:8c:e6:1e:18:15:49:14:c9:1b:b0:76:a1:d8:73:a3:
         84:36:48:50:bd:9f:00:81:2b:58:be:5c:0a:20:de:db:32:6f:
         c1:3f:4d:69:03:a3:21:dc:34:d6:28:53:56:a9:cb:1e:71:be:
         84:27:bc:ee:d1:fd:0b:74:2f:ff:e5:ea:4f:22:69:ed:03:6b:
         e2:0e:a9:a8:23:d2:21:1a:f7:24:3d:6b:e5:46:d7:ee:69:cd:
         2d:e6:c4:69:da:ce:70:d4:04:93:37:ab:76:c1:ce:f4:e1:77:
         ae:78:04:fc:fe:ea:d1:11:de:25:71:75:90:f7:0c:2a:a7:00:
         42:0d:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----