This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          tlNVG42FIZBdb3Lj+fgSZvVwgVWn05qyGxBsfjDonII=
Subject key identifier:   DA:A3:29:93:F3:DB:1A:81:F6:69:DF:92:9B:4A:48:4C:C2:BF:C9:D4
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       4EAA327E5FA73427F4A5F2FACCD47433AC5B8E84
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:18:04 +0000
ROA not before:           Tue 13 Jan 2026 20:13:04 +0000
ROA not after:            Tue 12 Jan 2027 20:18:04 +0000
asID:                     265393
IP address blocks:        168.194.164.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:aa:32:7e:5f:a7:34:27:f4:a5:f2:fa:cc:d4:74:33:ac:5b:8e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:13:04 2026 GMT
            Not After : Jan 12 20:18:04 2027 GMT
        Subject: CN=DAA32993F3DB1A81F669DF929B4A484CC2BFC9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:44:2b:24:19:ba:2d:31:fb:05:a8:8e:b3:
                    8b:46:79:9a:e9:86:4d:62:30:7a:cd:95:2b:ac:95:
                    e8:3b:51:a4:73:e0:f6:f6:e9:6c:06:2b:26:5e:44:
                    95:c1:3d:6c:6a:73:a8:1f:ce:c8:16:71:c3:f0:48:
                    e2:bf:de:48:4e:e5:49:34:11:3f:be:5e:15:a0:fe:
                    9b:91:98:96:e7:0b:1e:5a:1a:1d:66:28:5c:75:c1:
                    77:1f:cd:28:41:00:4e:8e:cc:33:86:c6:0e:ec:02:
                    d6:5a:3d:88:56:ed:96:4d:c0:98:4f:17:90:93:1a:
                    11:68:96:f9:08:3c:bd:91:a7:c4:b5:3b:ed:40:f1:
                    8f:6a:0e:fd:13:11:72:7e:a3:f6:cb:95:1f:fd:b6:
                    47:2e:64:19:7a:a6:17:1a:fc:c4:d6:5c:4d:44:67:
                    fd:7a:6b:51:55:6c:32:ac:8d:7f:d0:c3:ac:cc:e9:
                    7e:9b:aa:66:49:b5:cf:a6:91:7b:07:08:66:12:7c:
                    09:9f:ab:75:21:0e:d2:6a:73:ff:37:86:6c:46:7c:
                    39:4c:33:d0:4b:be:b1:4b:8a:4e:2d:17:9c:60:60:
                    61:3b:8d:2a:52:91:de:3b:bb:0e:bb:b0:14:3e:8f:
                    6a:7c:ee:5e:e3:24:ed:20:10:99:91:c9:64:b2:1b:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A3:29:93:F3:DB:1A:81:F6:69:DF:92:9B:4A:48:4C:C2:BF:C9:D4
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:a9:ba:14:c8:cd:ea:d7:76:a2:4d:66:34:60:09:dc:3d:
         78:a9:ce:8b:f3:6c:39:65:57:72:97:61:9b:c8:28:4a:94:60:
         17:af:62:5a:95:ef:e1:d1:e2:61:e7:82:13:e0:72:68:51:91:
         79:16:cf:da:b2:74:a9:7f:e6:c6:e8:de:54:bb:44:e8:d5:e1:
         e8:70:da:c4:a4:fd:b3:70:1c:6a:59:26:08:3e:3c:7e:19:31:
         ed:26:56:28:6e:b2:cc:45:1b:3d:14:bf:9f:21:eb:a8:df:a4:
         86:16:1e:0b:ee:65:6d:ae:49:43:a3:bb:7e:8c:61:f4:f6:dc:
         89:cb:50:18:58:3f:fd:5a:9e:ed:43:c2:84:44:b0:12:c4:1f:
         2e:fc:56:ab:7f:1d:26:36:70:4a:b5:fd:cd:32:5d:04:4b:76:
         04:c5:3f:be:fe:71:cb:56:81:a9:c3:29:74:7d:fe:39:75:fe:
         b6:77:16:e2:57:e0:c7:05:0d:2c:fc:df:09:73:d8:bc:dd:02:
         b2:f2:58:2e:18:70:cf:e3:ed:4f:06:a0:15:41:0b:7a:7c:dc:
         ec:a9:0c:a6:bb:47:5d:1b:a8:b9:18:e5:b3:49:d8:89:8f:34:
         de:ea:d5:08:3a:b3:c5:51:44:0e:d6:24:de:a3:da:9a:47:bb:
         1c:71:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----