This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa
File:                     3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa (raw, json)
Hash identifier:          w8eXsO3xxvggi21HXBgDzGPE9flSlv5f8MVwvARXKzg=
Subject key identifier:   89:9F:FC:6C:76:B8:16:FA:82:82:FA:A3:B9:FA:0A:1A:D4:19:BC:57
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       16E400EC66DD3BFE4BD2C3B90355B52EF0B9DD80
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa
Signing time:             Thu 13 Nov 2025 19:35:29 +0000
ROA not before:           Thu 13 Nov 2025 19:30:29 +0000
ROA not after:            Thu 12 Nov 2026 19:35:29 +0000
asID:                     270701
IP address blocks:        189.127.133.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e4:00:ec:66:dd:3b:fe:4b:d2:c3:b9:03:55:b5:2e:f0:b9:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:29 2025 GMT
            Not After : Nov 12 19:35:29 2026 GMT
        Subject: CN=899FFC6C76B816FA8282FAA3B9FA0A1AD419BC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:48:98:c1:b6:44:01:dd:0b:fc:3d:b9:b8:
                    62:58:2c:ed:e8:62:77:d5:ed:e5:a5:f4:9a:d6:01:
                    b7:07:02:81:18:42:c4:6f:20:05:46:55:29:6c:85:
                    f3:c9:e5:83:e7:d0:a1:c3:8e:3c:8a:9c:56:f1:e2:
                    fe:39:52:96:a1:c4:db:94:da:15:fb:0d:d7:01:fb:
                    ee:06:61:e9:90:be:e2:cc:65:1d:86:f8:e1:d4:f3:
                    b7:61:e9:ca:f8:d8:86:d3:bc:81:4b:f8:68:65:b3:
                    a5:4d:9c:d4:f6:08:be:3e:6d:54:80:70:ea:e1:91:
                    37:e2:22:9d:94:ca:58:d2:ae:33:b2:4c:ee:1a:1c:
                    97:c2:5b:c9:81:92:7a:d5:8b:0e:cf:be:b4:93:e0:
                    65:ca:a5:ee:4e:69:d4:de:58:66:a4:27:e6:c9:f0:
                    ab:45:f6:af:af:3a:95:9e:ae:49:a3:a1:ec:5d:87:
                    f4:bf:e0:50:83:05:63:55:29:ad:4e:89:5a:98:a6:
                    7b:7f:da:54:f8:4a:8b:08:67:54:b9:dc:43:cc:41:
                    d2:71:b3:be:b7:ba:b2:c0:bd:91:ee:f9:6b:e4:fe:
                    a4:c2:cc:75:72:8b:9b:0f:a2:86:62:03:29:0f:1d:
                    0b:ef:ac:9a:fd:92:d7:8b:01:84:e4:bf:ec:75:e4:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9F:FC:6C:76:B8:16:FA:82:82:FA:A3:B9:FA:0A:1A:D4:19:BC:57
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:3d:35:ad:5a:fe:c5:13:59:28:27:3a:ed:92:95:91:bf:fe:
         7f:a3:4b:23:52:d2:63:e7:51:98:74:fd:e4:07:db:1d:52:40:
         2e:eb:3e:5e:ed:0b:e4:b2:ab:25:ff:ae:99:e2:6a:44:c7:2b:
         43:89:36:d5:45:9d:4a:c4:9d:40:56:b0:93:6e:95:c3:e4:69:
         14:f6:60:e1:17:ca:47:2e:b4:27:74:05:3f:b0:6d:42:f7:8a:
         ee:a1:4c:9c:fe:cf:b0:09:5a:b5:cf:da:b4:00:66:9f:f7:20:
         cd:d9:23:a0:db:04:3e:39:22:97:ab:57:13:d9:f1:3f:bc:77:
         f4:65:a7:bc:5a:10:41:66:31:90:71:c2:99:38:23:89:ae:ce:
         3c:ad:64:a1:a2:b2:cf:f2:11:75:2e:62:12:ca:a1:27:f5:0c:
         06:ad:e5:25:92:c3:2e:5a:ce:b3:23:5d:ab:65:73:9c:a6:49:
         4f:c1:e4:8f:56:44:54:a5:75:b5:1f:46:fd:3b:d6:82:df:d3:
         cb:a4:91:17:f0:f2:aa:58:c1:83:45:04:07:46:d8:8c:bc:0c:
         62:61:97:92:84:3b:fe:d7:cc:f1:18:93:ba:67:1f:39:6c:44:
         22:d3:b9:8c:7f:54:55:ce:f7:79:80:7d:45:47:ad:3a:08:f4:
         63:19:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----