This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (raw, json)
Hash identifier:          d/48btGK/inre24+3a+dCxTPfSOUifH8PccdP9vQOr8=
Subject key identifier:   1D:06:B2:9F:E5:AF:45:32:2F:6A:1B:66:24:F3:61:5F:56:09:07:C3
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       2EAFDEF6EEEF08E03AC152236AFF949CE3B95396
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:17:58 +0000
ROA not before:           Tue 13 Jan 2026 20:12:58 +0000
ROA not after:            Tue 12 Jan 2027 20:17:58 +0000
asID:                     265393
IP address blocks:        168.194.164.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:af:de:f6:ee:ef:08:e0:3a:c1:52:23:6a:ff:94:9c:e3:b9:53:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:12:58 2026 GMT
            Not After : Jan 12 20:17:58 2027 GMT
        Subject: CN=1D06B29FE5AF45322F6A1B6624F3615F560907C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:1a:98:f8:df:9e:8c:07:c8:92:29:cd:04:
                    0e:ff:f4:62:4f:40:f4:bb:59:7d:70:ec:d0:af:70:
                    cb:9f:82:ab:13:ef:bf:80:14:c9:4e:5d:bf:cd:60:
                    ff:81:1f:ad:50:2e:e5:b4:75:6a:3c:2b:81:26:7a:
                    0a:6f:60:f6:a1:27:56:15:7b:b2:f4:e8:38:18:c3:
                    17:40:34:f4:b8:fb:86:a3:86:42:bc:95:69:17:05:
                    cc:f2:7a:ec:01:8f:45:c3:5d:87:8c:1d:ca:af:8b:
                    a5:b7:df:cc:8e:3a:22:98:da:d0:f0:14:51:83:23:
                    76:c9:f7:64:51:2d:70:16:98:d5:0c:48:d8:1c:97:
                    f9:f0:ef:42:ed:be:00:81:86:28:10:e5:ad:05:f2:
                    bf:64:2a:89:a1:eb:f9:92:07:20:02:1a:37:46:8f:
                    85:30:dd:28:6c:a1:88:3d:25:20:9b:58:6a:d3:75:
                    6f:3a:37:ea:a8:41:6f:c1:2a:38:79:1d:5f:c0:fb:
                    c6:10:9b:e7:5c:a6:b3:64:87:27:48:13:f9:92:22:
                    c4:7a:04:28:6c:45:c1:c2:ee:ce:e9:b6:41:59:b2:
                    4f:aa:19:b8:c7:07:36:3e:bd:cf:1c:e1:00:6b:bb:
                    32:1c:01:69:de:8d:85:5b:e7:de:f3:73:49:a5:a5:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:B2:9F:E5:AF:45:32:2F:6A:1B:66:24:F3:61:5F:56:09:07:C3
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:4a:e5:9f:f1:5f:c2:dd:b8:65:2e:20:4e:d6:04:6f:79:
         5a:c6:65:50:d9:a2:ff:82:d1:e5:58:de:8f:1a:52:b0:6d:8c:
         aa:c9:d7:4a:3b:7f:5b:8e:0e:04:50:4f:62:6b:b7:65:49:b3:
         4d:d6:fb:f4:ec:82:90:f9:2a:b2:74:77:3e:87:c5:c7:6b:ef:
         6f:c9:92:57:47:be:29:88:e1:1b:32:e7:5d:d2:a0:5e:02:44:
         0e:b9:f7:4e:01:7f:cf:e9:bb:36:f1:d0:20:4d:fe:87:9e:fa:
         43:43:bf:66:53:0a:1a:78:4c:1b:e5:d4:a7:ff:e0:b1:ea:95:
         d8:84:0d:e1:44:5b:f6:ad:70:0a:b6:c0:b2:3b:28:07:14:fc:
         34:26:38:a1:c9:c2:32:89:1b:5f:42:22:cd:31:89:a1:50:fa:
         82:93:9c:e6:1a:14:d5:d4:45:00:31:14:41:67:96:c2:fc:52:
         d1:3c:9e:f8:03:e7:c5:5b:0a:22:ff:a6:4a:11:e8:83:86:49:
         a6:43:73:68:14:08:e7:ba:74:35:1a:aa:4b:33:3b:f6:9b:59:
         eb:33:94:83:3e:f3:2b:02:6b:a3:ae:65:be:b7:8e:2d:dd:90:
         42:95:f2:38:91:1d:bd:08:08:20:59:fd:c0:01:f9:33:59:d5:
         92:5e:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----