This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e203532393234.roa
File:                     3138392e3132372e3133322e302f32322d3232203d3e203532393234.roa (raw, json)
Hash identifier:          7jODcbFbH4/kAfVU65v+YUD9+yrBE3ACjKJEqIjDNDU=
Subject key identifier:   97:2D:18:F1:54:D7:37:A3:2A:D9:67:01:F1:26:35:09:C0:70:A4:04
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       260E01CC23B3F46B17D124E51CEA03D417A916C8
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e203532393234.roa
Signing time:             Thu 13 Nov 2025 19:35:27 +0000
ROA not before:           Thu 13 Nov 2025 19:30:27 +0000
ROA not after:            Thu 12 Nov 2026 19:35:27 +0000
asID:                     52924
IP address blocks:        189.127.132.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0e:01:cc:23:b3:f4:6b:17:d1:24:e5:1c:ea:03:d4:17:a9:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:27 2025 GMT
            Not After : Nov 12 19:35:27 2026 GMT
        Subject: CN=972D18F154D737A32AD96701F1263509C070A404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:a5:13:04:3a:3b:35:f9:0e:71:35:0a:87:
                    82:67:03:19:ad:47:3a:4e:6c:67:0f:16:0d:9f:ee:
                    d8:4c:17:9c:38:09:fd:a9:f8:84:92:d4:0c:fc:e7:
                    25:dd:d7:8b:49:63:9d:37:5b:63:a9:ff:0d:2b:bb:
                    7a:30:3f:09:5f:df:2a:4d:0b:45:cc:14:62:f4:53:
                    8c:e0:6c:5d:ca:18:83:34:a3:4f:08:35:dc:a8:24:
                    33:75:0a:af:91:5b:47:2f:22:e2:9f:06:d6:ee:34:
                    10:dd:4b:7c:94:16:22:98:de:9d:aa:00:b8:29:45:
                    3c:f8:87:3d:0f:7c:c1:b6:49:57:f6:f9:8e:73:9d:
                    d9:30:65:18:a4:7b:77:e4:57:a0:a2:54:f6:5f:03:
                    ae:c8:c3:07:16:f1:fa:75:ab:d1:90:ad:6d:71:d0:
                    8b:33:a1:2d:aa:c2:31:f3:0b:ab:e3:67:d0:62:aa:
                    e2:09:dc:64:df:20:5b:b4:39:83:39:19:6d:65:34:
                    9d:59:05:a0:64:ce:8c:a7:b3:29:69:f0:af:ec:82:
                    6d:a7:2d:69:ca:7d:d6:fc:5e:f1:29:31:05:7c:53:
                    11:fb:fb:e3:bf:fc:53:b4:da:5b:1c:33:83:fc:19:
                    7e:29:50:4c:ea:5c:42:56:a3:b6:a7:94:b0:5a:2b:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2D:18:F1:54:D7:37:A3:2A:D9:67:01:F1:26:35:09:C0:70:A4:04
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e203532393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:4f:cc:a8:dd:31:2c:f3:6d:df:f8:98:2e:f7:75:10:04:fd:
         94:8e:70:15:aa:8d:4e:53:4a:46:05:80:72:7d:74:5e:f8:73:
         6c:88:c9:b4:f4:c9:e7:d7:13:b6:55:02:6f:3d:8a:a9:ff:3e:
         9b:19:ef:bd:37:1e:5b:81:fb:45:93:6a:f3:c1:31:94:bf:d7:
         e6:46:30:e5:37:26:f9:75:0d:61:35:e9:c6:9c:a5:72:23:44:
         1b:39:29:73:21:e9:89:93:52:8d:8a:1d:ba:f9:da:27:65:b1:
         78:ae:5a:66:6d:48:13:d9:9c:99:0c:3d:aa:94:05:99:39:f7:
         b2:ea:df:a7:84:7a:6a:29:60:ba:f3:af:84:dd:c5:85:41:6c:
         c0:28:af:1b:04:15:73:19:4f:28:b3:98:a2:c8:79:79:a8:96:
         4e:1b:f9:23:da:a7:dc:5f:6b:4c:74:a1:59:b9:99:42:72:c2:
         56:2b:55:6d:58:2e:ae:fe:8f:70:d0:40:9b:a9:4a:97:3c:e1:
         60:b8:81:9e:2a:3b:7f:dc:eb:1b:0f:4c:49:15:f0:af:f3:33:
         58:d6:fb:cd:39:b7:63:81:97:4c:9a:c9:ed:80:49:1d:60:b7:
         ff:ce:53:dd:3d:d3:97:dd:a4:5d:e6:20:68:89:9b:0c:39:5c:
         c9:29:6d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:48 2025 by rpki-client