This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa
File:                     323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa (raw, json)
Hash identifier:          sSF19GlAs6U1RPdSqyk/JpqZCc8cXvT9sJKBGYlNI9U=
Subject key identifier:   6D:2C:D7:81:20:39:13:A3:EC:FC:71:5A:41:C2:90:13:6E:F6:CC:E1
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       50E86E12CEA9BAD32CB8EB50BBFCA90C2DD38317
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa
Signing time:             Thu 13 Nov 2025 19:35:32 +0000
ROA not before:           Thu 13 Nov 2025 19:30:32 +0000
ROA not after:            Thu 12 Nov 2026 19:35:32 +0000
asID:                     270701
IP address blocks:        2804:7010:8000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:6e:12:ce:a9:ba:d3:2c:b8:eb:50:bb:fc:a9:0c:2d:d3:83:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:32 2025 GMT
            Not After : Nov 12 19:35:32 2026 GMT
        Subject: CN=6D2CD781203913A3ECFC715A41C290136EF6CCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:88:fb:28:a8:09:05:f5:0e:ba:14:db:00:
                    0e:84:58:f5:eb:d6:41:b1:c7:71:77:73:c7:eb:87:
                    73:cb:7b:94:39:4b:90:54:79:be:af:ea:36:df:21:
                    9c:a7:ad:09:5e:55:3c:2e:a0:59:c6:a5:8e:4e:17:
                    63:bb:d5:65:0d:5f:de:2c:e3:bc:f2:24:cd:91:47:
                    7b:f5:3c:79:6d:f6:ba:6a:57:2f:f5:ae:41:d4:ac:
                    43:c1:42:08:cd:a7:81:ee:51:40:f7:cb:0a:20:09:
                    c8:f2:c4:b0:3b:56:5b:21:6c:8d:29:1b:f7:d3:e0:
                    50:31:ed:57:25:a1:c1:33:1e:77:3d:d0:9b:88:9c:
                    94:ed:80:93:87:18:5b:51:c9:3b:00:5e:a9:a0:48:
                    3e:0c:3a:dd:27:a1:8a:dc:ee:5b:39:e9:95:8c:bb:
                    a2:a2:84:e4:0e:2a:4d:c9:4b:bb:01:d7:46:de:3b:
                    ce:93:54:59:ab:3d:68:e7:da:9d:0e:b1:45:b6:41:
                    70:ed:87:7f:4f:6a:bb:31:1b:33:29:20:00:a1:2c:
                    3c:a8:c7:65:6b:1b:89:52:fb:dd:11:04:6a:a0:31:
                    dc:db:9b:27:08:74:65:ab:73:47:d4:a4:9a:e2:c4:
                    99:2b:de:72:58:45:ea:f1:c7:e0:d7:9a:19:76:7c:
                    07:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:D7:81:20:39:13:A3:EC:FC:71:5A:41:C2:90:13:6E:F6:CC:E1
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7010:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:f6:3f:78:57:ec:b6:7f:54:46:d3:86:27:28:83:2c:ab:77:
         c2:ec:f8:e2:4e:c5:bf:9b:d0:7c:43:16:f0:28:61:0d:77:ce:
         77:85:a7:26:34:e8:9e:8c:26:49:2d:75:05:89:b2:f4:78:88:
         e6:53:77:16:a2:82:11:01:16:76:b3:01:d1:ec:5f:2e:1c:cd:
         f3:7e:42:e2:2d:a3:51:c1:20:2a:b5:e5:c5:26:70:c0:de:1c:
         66:ad:04:b5:02:49:93:7b:54:4a:f3:eb:45:5a:4f:9b:fa:4f:
         c6:c1:41:11:5e:75:3e:48:d1:23:97:35:69:eb:e7:da:61:ab:
         c2:8c:26:40:2c:a0:21:98:b1:d3:5e:4e:5f:e4:2a:7f:0e:cc:
         27:0a:04:24:d2:fe:be:5d:53:cd:7a:32:c8:6d:3c:f2:ad:15:
         cf:7f:85:48:ad:67:08:f0:a5:d8:61:0d:ab:a0:cc:d0:a6:86:
         5c:7f:58:d9:d4:df:f5:3e:34:e2:47:db:d8:9d:eb:3d:da:9e:
         be:4a:e1:7a:91:b1:e3:ce:99:98:a5:4e:14:2a:fd:5e:2a:8d:
         0e:4a:79:84:32:df:a8:c6:c0:34:52:84:f8:4d:e2:f3:bb:f4:
         62:f3:dd:31:56:5f:62:f4:40:b2:66:dd:7c:70:53:10:ea:61:
         b4:1c:51:3b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUOhuEs6putMsuOtQu/ypDC3TgxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ2N0FCM0FFNzBCN0YzREY3NTdEOERBRjc1NjU0ODU3
QTAzMkE3RjAeFw0yNTExMTMxOTMwMzJaFw0yNjExMTIxOTM1MzJaMDMxMTAvBgNV
BAMTKDZEMkNENzgxMjAzOTEzQTNFQ0ZDNzE1QTQxQzI5MDEzNkVGNkNDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ooj7KKgJBfUOuhTbAA6EWPXr
1kGxx3F3c8frh3PLe5Q5S5BUeb6v6jbfIZynrQleVTwuoFnGpY5OF2O71WUNX94s
47zyJM2RR3v1PHlt9rpqVy/1rkHUrEPBQgjNp4HuUUD3ywogCcjyxLA7VlshbI0p
G/fT4FAx7VclocEzHnc90JuInJTtgJOHGFtRyTsAXqmgSD4MOt0noYrc7ls56ZWM
u6KihOQOKk3JS7sB10beO86TVFmrPWjn2p0OsUW2QXDth39ParsxGzMpIAChLDyo
x2VrG4lS+90RBGqgMdzbmycIdGWrc0fUpJrixJkr3nJYRerxx+DXmhl2fAd5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbSzXgSA5E6Ps/HFaQcKQE272zOEwHwYDVR0j
BBgwFoAU9GerOucLfz33V9ja91ZUhXoDKn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FreHlLa3kzRlg0VGRFa1VKWWRvcE1QcldWMnVUUGtTTXVGU2lucTIx
WHEvMC9GNDY3QUIzQUU3MEI3RjNERjc1N0Q4REFGNzU2NTQ4NTdBMDMyQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NjdBQjNBRTcwQjdGM0RG
NzU3RDhEQUY3NTY1NDg1N0EwMzJBN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRa3h5S2t5M0ZYNFRkRWtVSllkb3BNUHJXVjJ1VFBrU011RlNpbnEyMVhxLzAv
MzIzODMwMzQzYTM3MzAzMTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEcBCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBP9j94V+y2f1RG04YnKIMsq3fC7PjiTsW/m9B8QxbwKGENd853hacmNOie
jCZJLXUFibL0eIjmU3cWooIRARZ2swHR7F8uHM3zfkLiLaNRwSAqteXFJnDA3hxm
rQS1AkmTe1RK8+tFWk+b+k/GwUERXnU+SNEjlzVp6+faYavCjCZALKAhmLHTXk5f
5Cp/DswnCgQk0v6+XVPNejLIbTzyrRXPf4VIrWcI8KXYYQ2roMzQpoZcf1jZ1N/1
PjTiR9vYnes92p6+SuF6kbHjzpmYpU4UKv1eKo0OSnmEMt+oxsA0UoT4TeLzu/Ri
890xVl9i9ECyZt18cFMQ6mG0HFE7
-----END CERTIFICATE-----