This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa
File:                     3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa (raw, json)
Hash identifier:          uR6DXjtszaw0bAqDfjOhfGxcudTue7BzKBH8trGDWKY=
Subject key identifier:   61:4E:0F:82:B2:33:6B:93:9A:4E:12:AA:7F:65:2A:71:8A:94:D9:72
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       1E58C871897229BE2FE737EDF794D774B9567329
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa
Signing time:             Thu 13 Nov 2025 19:35:23 +0000
ROA not before:           Thu 13 Nov 2025 19:30:23 +0000
ROA not after:            Thu 12 Nov 2026 19:35:23 +0000
asID:                     270701
IP address blocks:        189.127.132.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:58:c8:71:89:72:29:be:2f:e7:37:ed:f7:94:d7:74:b9:56:73:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:23 2025 GMT
            Not After : Nov 12 19:35:23 2026 GMT
        Subject: CN=614E0F82B2336B939A4E12AA7F652A718A94D972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:62:7d:b6:69:04:f3:14:07:54:2c:61:76:
                    07:0b:05:e0:68:c4:4a:00:8e:df:4a:f9:a3:a6:de:
                    87:8e:74:e4:08:52:0b:b8:ce:55:75:78:a2:ab:0f:
                    fb:ae:c1:d2:2f:b9:d8:b9:f1:93:77:7f:dc:69:f3:
                    70:35:d2:6f:bd:bf:d1:6a:8a:65:e2:87:60:95:d0:
                    cd:d5:b9:c9:aa:68:51:97:cf:35:b2:12:01:db:fd:
                    bc:80:de:a0:19:d2:bf:7d:f7:f5:07:5b:f2:23:e7:
                    e6:02:a0:3b:8b:f2:36:cb:11:61:d1:58:f5:29:64:
                    8e:2c:12:8d:28:5f:4f:8a:f8:65:5f:74:e4:45:1d:
                    85:51:2c:59:92:65:ce:f5:8b:3a:86:9e:b8:97:74:
                    b7:fc:a8:08:15:bd:2d:41:0c:61:a6:8e:8e:7a:5c:
                    bc:48:51:01:11:40:c8:2e:83:e2:93:d0:a6:37:dd:
                    f8:c1:4d:7e:c6:4b:6c:55:6d:cb:44:fb:5e:63:a4:
                    f6:97:cf:40:0c:b2:c9:bb:69:c6:88:85:f9:b2:47:
                    05:ed:0b:26:ff:88:25:81:52:5a:79:19:9b:8f:88:
                    6e:47:38:e0:fa:6c:e6:7b:c9:d9:6a:7c:11:8d:57:
                    6e:73:39:8a:1c:94:b0:9c:d9:5e:2a:09:3a:46:aa:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:0F:82:B2:33:6B:93:9A:4E:12:AA:7F:65:2A:71:8A:94:D9:72
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:0c:77:d5:1f:ca:43:32:fa:88:4a:91:d0:1d:42:95:29:
         14:5b:61:41:6b:4f:71:28:69:80:e1:a5:4e:76:db:f5:27:d4:
         a9:1a:93:9f:6d:b6:41:b1:e7:ca:cb:16:10:e7:51:83:2e:8d:
         49:7e:8a:bb:a1:19:a2:05:81:af:f9:02:10:8c:00:1c:d1:0f:
         e1:8a:d3:71:9e:d7:da:af:09:3a:c6:22:e8:94:5a:15:60:8e:
         96:0e:f6:80:d4:a9:91:bb:ce:43:3a:e5:0a:dc:18:47:18:7f:
         c0:be:e7:b6:6a:93:bb:32:39:1d:7d:06:50:03:d0:a5:3c:32:
         74:32:68:d0:95:3a:53:c7:64:10:8c:03:8c:c4:ef:4c:66:15:
         c1:ec:bc:eb:0a:c6:aa:75:83:98:91:d9:87:a6:21:f1:03:ca:
         c1:65:c4:59:04:ed:21:7b:00:79:cc:13:ec:31:5e:77:d6:33:
         67:fa:5a:e3:19:73:95:40:9d:11:dc:1e:27:3c:74:36:6f:18:
         60:2d:28:7f:a3:dd:47:19:da:b2:46:db:4d:16:66:11:9d:01:
         0c:79:21:8f:18:fc:20:9b:6e:24:c8:22:1a:12:d0:4a:f4:50:
         d8:b0:0d:46:0e:9d:20:4d:24:85:dd:c7:1f:13:80:73:31:dd:
         94:44:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----