This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa
File:                     3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa (raw, json)
Hash identifier:          DWhdL1nxygtF2RrXPJQmv9Mq0w+wZlavBJaE1DH38ns=
Subject key identifier:   0C:83:C8:92:01:5C:41:51:83:86:12:C0:1A:C2:B0:C9:B4:B3:6D:48
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       66BD84B2A1BA76359D309E507E9974DDA9CB89A9
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa
Signing time:             Thu 13 Nov 2025 19:35:33 +0000
ROA not before:           Thu 13 Nov 2025 19:30:33 +0000
ROA not after:            Thu 12 Nov 2026 19:35:33 +0000
asID:                     270701
IP address blocks:        189.127.135.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bd:84:b2:a1:ba:76:35:9d:30:9e:50:7e:99:74:dd:a9:cb:89:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:33 2025 GMT
            Not After : Nov 12 19:35:33 2026 GMT
        Subject: CN=0C83C892015C4151838612C01AC2B0C9B4B36D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5f:af:26:45:1e:1a:d0:0c:98:1a:a2:25:a2:
                    f1:b7:03:67:4a:b6:bf:79:16:44:38:fa:98:8b:e7:
                    b7:12:d9:aa:b5:c3:a0:17:2f:29:39:f2:08:b4:94:
                    0e:b8:4a:af:9c:16:d8:77:9b:3a:5a:ce:a8:6f:65:
                    73:f4:55:ef:51:fe:09:66:53:b2:f0:d3:56:54:9a:
                    55:b2:be:51:d3:15:ca:b5:33:1c:6f:40:75:28:3c:
                    b6:eb:52:8f:c4:28:ca:dc:e3:d2:0f:57:26:90:c7:
                    bd:49:3c:2a:27:59:54:ab:76:c8:14:ca:28:05:2e:
                    d1:a4:92:16:6b:af:c0:19:4b:c5:8c:75:60:1a:17:
                    a8:8c:4f:64:44:a1:b4:c1:30:af:a9:c2:da:00:bb:
                    9b:d2:e4:7c:84:75:7c:12:a1:e6:fa:66:66:51:3a:
                    20:b8:cd:bb:19:7b:7a:8f:05:70:8d:37:83:db:8d:
                    3a:3c:45:2a:c9:f8:73:a6:d2:2a:c0:db:94:06:47:
                    68:9e:30:e4:5b:69:59:2c:a7:dd:27:ea:84:d0:0b:
                    ff:bf:ef:33:b0:38:fb:cc:69:41:0a:62:f5:26:82:
                    a1:d5:09:44:d7:08:56:a4:94:a2:87:f8:e4:f5:8b:
                    ca:ea:24:2a:32:db:97:17:d7:e3:07:0b:a2:ac:79:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:C8:92:01:5C:41:51:83:86:12:C0:1A:C2:B0:C9:B4:B3:6D:48
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:51:b7:ed:93:27:ee:30:4a:f5:87:b2:6f:a0:c2:dc:07:
         f9:59:58:90:55:2a:d4:34:1e:66:d1:83:be:3b:da:1e:00:57:
         d3:cc:0d:66:50:a9:19:26:5a:d7:d9:9f:05:17:a7:06:3d:08:
         d0:38:5f:a4:5b:41:c4:37:d1:a0:ca:7b:4e:98:d9:b4:aa:b7:
         cd:0d:6d:e4:40:23:64:21:76:36:39:7b:3f:9f:0c:cf:74:57:
         f4:fd:b6:f7:88:39:1c:27:9e:90:87:bd:98:43:c7:56:df:73:
         de:c1:39:92:20:b0:dd:4b:8d:32:b7:8c:82:b6:87:e9:43:0c:
         39:cd:e7:4d:34:fe:2a:6e:e6:46:22:89:2b:b4:19:1a:3a:ec:
         b4:25:e2:af:92:18:4e:a4:9f:aa:c9:d3:37:2a:db:29:83:10:
         ef:8c:46:0e:82:b0:63:cd:50:6d:e1:4e:a2:26:07:f2:87:ac:
         a7:33:03:b9:f7:20:9d:3f:53:25:d2:0d:eb:2f:50:90:de:c1:
         33:c8:d8:d4:2b:57:4f:48:e1:fc:f8:54:66:ee:f0:9b:13:00:
         62:b9:e5:50:06:27:14:78:6a:6e:a0:7e:77:e9:62:da:83:99:
         95:d5:c7:e7:5b:10:45:33:8f:7b:30:30:5b:36:80:86:7c:06:
         5a:6f:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:59 2025 by rpki-client