This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a633030303a3a2f33342d3334203d3e20323730373031.roa
File:                     323830343a373031303a633030303a3a2f33342d3334203d3e20323730373031.roa (raw, json)
Hash identifier:          YwGcNWTOt/F+d2vtiE4xYoL+svBwy1KtJ4MTTwGBnqk=
Subject key identifier:   D3:D5:BE:F1:1F:14:CA:3F:86:2F:66:99:3A:0E:AE:A4:EB:97:91:57
Certificate issuer:       /CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
Certificate serial:       11A500E2E39F41F6F18CD975FB7BE6916CB5CEE4
Authority key identifier: F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a633030303a3a2f33342d3334203d3e20323730373031.roa
Signing time:             Thu 13 Nov 2025 19:35:28 +0000
ROA not before:           Thu 13 Nov 2025 19:30:28 +0000
ROA not after:            Thu 12 Nov 2026 19:35:28 +0000
asID:                     270701
IP address blocks:        2804:7010:c000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a5:00:e2:e3:9f:41:f6:f1:8c:d9:75:fb:7b:e6:91:6c:b5:ce:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Validity
            Not Before: Nov 13 19:30:28 2025 GMT
            Not After : Nov 12 19:35:28 2026 GMT
        Subject: CN=D3D5BEF11F14CA3F862F66993A0EAEA4EB979157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:4f:60:05:36:9a:20:36:40:a9:c6:13:fc:
                    9d:01:ec:a2:70:d2:58:4e:2f:89:b9:4e:db:b1:47:
                    24:d3:9f:4b:18:a4:ef:b2:3f:89:87:57:59:c0:85:
                    c3:1b:56:41:2c:b1:3b:96:3c:e2:e4:81:e1:c6:fd:
                    2a:1c:dd:bd:09:20:f4:f8:e0:6f:07:cd:23:4d:bd:
                    7f:65:24:33:81:53:e2:e8:56:c2:ca:de:3c:41:0c:
                    dc:f5:6f:81:db:f7:d0:f4:62:16:6a:aa:e3:41:54:
                    c9:f1:a1:c7:ba:85:f7:07:30:33:80:82:40:98:52:
                    02:bf:df:c0:72:26:dd:49:42:4e:9e:c4:b1:be:eb:
                    79:3a:59:da:e5:ba:9d:79:3c:6b:14:30:d7:6b:39:
                    e1:2a:a4:4a:09:64:c9:4d:3b:2c:5f:e3:ca:ba:95:
                    e3:9b:25:ab:4d:7b:08:cf:c5:3a:6a:05:00:1d:a1:
                    99:44:66:16:68:ff:1a:e2:72:c7:bc:38:0e:cd:f6:
                    f1:4e:9a:ba:b8:34:a4:cd:93:d1:2c:80:f3:c4:c0:
                    09:c7:1d:a0:74:fb:73:78:08:b6:a8:3f:0b:bf:d9:
                    5f:e0:49:2d:b4:74:3d:2d:11:bf:c2:3e:6a:22:c3:
                    59:f6:62:5a:58:c5:91:78:af:be:86:b0:ff:1d:3d:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D5:BE:F1:1F:14:CA:3F:86:2F:66:99:3A:0E:AE:A4:EB:97:91:57
            X509v3 Authority Key Identifier:
                keyid:F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a633030303a3a2f33342d3334203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7010:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:41:93:9f:99:39:f9:b1:4a:dd:55:d3:1a:35:ee:07:58:15:
         2c:da:69:7b:04:66:d2:0e:da:69:ea:14:44:fd:ac:a6:71:91:
         9e:bf:85:99:1d:95:f7:94:e9:25:e7:ef:3b:00:b3:5b:f6:fa:
         7a:f3:de:50:f7:23:29:1c:ee:14:aa:81:10:28:e7:03:a3:b1:
         4b:6b:ef:e3:ba:e0:b1:70:60:b5:3d:70:57:a1:29:5c:77:ee:
         51:62:4b:69:b7:17:0c:9e:10:74:8c:ea:b6:9d:be:29:61:e4:
         86:29:7b:e1:fa:41:d7:9e:c7:7d:f4:12:f7:98:e1:46:d5:43:
         28:65:38:77:72:1b:66:f7:d2:0a:30:a3:74:8d:b5:3e:a5:e5:
         4a:8f:4a:a1:e7:0a:71:75:b9:68:ce:a3:de:4c:ec:ce:39:38:
         bc:c1:5b:a4:d9:ae:3f:df:6a:24:d3:8d:05:12:b3:2f:c2:c0:
         1f:97:a0:4d:c5:a3:23:4c:9e:ba:42:b2:b6:af:d4:3e:27:fb:
         c9:07:31:9a:b8:c0:42:ef:a7:7c:c5:65:e8:a7:a5:61:c6:09:
         c2:0f:72:33:f0:04:c4:30:78:a7:6b:92:0f:2c:cc:98:cf:11:
         ae:a3:fe:98:fa:93:c1:77:29:32:a6:04:92:06:bd:72:93:fe:
         87:c4:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----