This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32342d3234203d3e20323730373031.roa
File:                     3138392e3132372e3133342e302f32342d3234203d3e20323730373031.roa (raw, json)
Hash identifier:          qj+5N8A5JNFPJwyHULFzYvGtehiYW2FC5Qt+7lxvIDM=
Subject key identifier:   66:2F:FF:BC:42:67:17:D0:D3:8D:DF:D3:4A:48:2E:26:62:78:00:5B
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       0735EE86DC82EE943BA938F7C474D5C4776B27C5
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32342d3234203d3e20323730373031.roa
Signing time:             Thu 13 Nov 2025 19:35:31 +0000
ROA not before:           Thu 13 Nov 2025 19:30:31 +0000
ROA not after:            Thu 12 Nov 2026 19:35:31 +0000
asID:                     270701
IP address blocks:        189.127.134.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:ee:86:dc:82:ee:94:3b:a9:38:f7:c4:74:d5:c4:77:6b:27:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:31 2025 GMT
            Not After : Nov 12 19:35:31 2026 GMT
        Subject: CN=662FFFBC426717D0D38DDFD34A482E266278005B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:e2:cd:85:dd:18:03:4a:40:a8:bc:c6:7e:
                    cf:0f:8b:d1:e0:5b:c5:ce:8d:f0:55:07:ed:0d:1f:
                    96:e9:17:f9:b1:30:98:4b:1f:ae:5b:ae:53:76:e4:
                    51:2a:bd:23:85:8c:98:62:be:04:25:26:84:cb:6a:
                    92:20:dc:29:0e:92:e1:f5:68:fc:c1:8b:51:9e:da:
                    af:ff:74:9d:00:7e:29:4a:13:fa:52:95:58:9f:7a:
                    4f:d1:43:b8:90:1a:cd:c3:e8:6c:b5:92:f6:b7:66:
                    89:97:48:de:93:94:39:5b:a8:d7:3e:71:4c:81:5f:
                    7d:3f:cf:fc:b6:00:69:ee:fc:ac:0f:a2:48:d3:a7:
                    a5:54:c6:0a:40:51:05:04:e7:a6:4a:23:ad:9d:91:
                    9b:67:e3:c3:1b:d9:51:74:82:07:3e:65:5b:3d:b6:
                    87:b5:d8:ba:9b:56:f0:82:d2:3a:24:ea:7c:05:ed:
                    00:9e:32:94:1d:1a:9d:89:55:2e:cc:38:10:8a:08:
                    96:e5:7c:e1:ec:3f:0c:53:4c:cc:ea:e5:34:ef:7b:
                    d8:43:51:dc:9d:a3:77:2d:b9:5e:26:95:b5:20:3c:
                    90:5a:aa:cb:b5:b8:c3:52:9c:88:6d:bf:89:2a:c8:
                    2f:8e:fa:a7:11:66:78:c1:3b:b0:fd:5f:b6:48:0c:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2F:FF:BC:42:67:17:D0:D3:8D:DF:D3:4A:48:2E:26:62:78:00:5B
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32342d3234203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c2:4b:84:bb:35:eb:0e:ac:46:14:25:4e:7c:fb:33:8b:9c:
         31:5b:8e:fe:60:57:50:c4:7c:9f:18:1b:54:94:05:e8:44:64:
         64:e8:69:f1:a5:62:fa:a7:1b:69:38:29:b4:69:fd:54:7d:52:
         1f:b1:9b:53:05:be:e3:f1:2a:40:f0:bc:0b:08:e6:c1:d7:39:
         e0:b4:15:c4:f8:f7:33:2e:20:08:1b:59:eb:cd:cb:5e:2e:58:
         27:4f:39:f7:ee:35:5d:3d:c5:a8:d0:9c:d4:d6:ec:b9:9f:ed:
         e9:d5:df:f6:70:64:c6:0f:e2:25:e2:3a:95:06:08:54:57:fd:
         d7:fc:0b:52:f0:75:45:f2:b2:fe:a2:e5:f7:4e:d7:fb:3f:5c:
         9a:61:8d:51:11:ae:a8:a2:d8:66:08:a1:e0:bc:a1:9e:ce:eb:
         72:1d:9f:5e:6b:6b:34:7d:90:d6:b8:b8:07:88:0e:93:13:90:
         6b:6a:6c:f3:9c:c8:03:5d:b1:05:f9:9a:bc:94:a2:46:32:fa:
         55:5b:b0:58:fb:4c:4c:df:87:fb:9a:b2:b5:69:eb:d5:46:7f:
         f0:75:86:86:35:c6:9f:50:31:6e:96:fe:4e:6d:30:57:09:ac:
         a2:53:a3:ad:9d:99:77:c4:47:31:ff:cf:e8:6b:b6:b8:7e:de:
         f5:6c:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----