This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          RGf3q1IpyMkstMU1TEjwHYU5Db1k2hTZ+QKuBBbDJqk=
Subject key identifier:   F6:3D:52:C0:B5:D9:E1:1C:6B:9F:11:54:DA:C7:C3:B6:69:E8:D3:DE
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       3910D471354C6AF632D754836C11750CC808A33D
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:18:12 +0000
ROA not before:           Tue 13 Jan 2026 20:13:12 +0000
ROA not after:            Tue 12 Jan 2027 20:18:12 +0000
asID:                     265393
IP address blocks:        168.194.166.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:d4:71:35:4c:6a:f6:32:d7:54:83:6c:11:75:0c:c8:08:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:13:12 2026 GMT
            Not After : Jan 12 20:18:12 2027 GMT
        Subject: CN=F63D52C0B5D9E11C6B9F1154DAC7C3B669E8D3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:84:9f:cb:66:d9:e1:cc:eb:db:c5:02:4d:
                    3d:07:ce:0e:c1:a0:7d:26:fe:2e:61:2e:53:48:16:
                    c2:de:06:1e:60:a3:4f:ea:21:1a:f6:e0:0a:59:35:
                    63:e6:34:50:58:0f:55:28:fb:7c:0e:8f:d3:80:3e:
                    0b:0b:b8:79:12:48:fd:a1:fb:93:ee:bf:ee:5d:10:
                    2c:6b:0a:10:18:ea:24:f1:b7:9f:a8:28:b1:31:cc:
                    44:f2:ec:0d:86:c6:9d:6a:98:cd:98:84:3e:7d:fe:
                    31:e0:c3:a4:57:34:dc:c9:d3:0b:fd:7f:4f:3d:32:
                    f0:4d:e1:28:2f:6f:fe:4e:c4:7a:ac:de:2b:6a:28:
                    49:85:78:9e:a6:16:1a:02:3c:a8:df:af:d7:8b:67:
                    40:09:1b:61:d6:be:b0:ea:c9:33:3e:65:b1:f5:fe:
                    35:e8:b0:b3:ce:a0:fe:6e:b1:22:43:08:3d:17:04:
                    af:62:f3:b1:c0:a9:6b:0b:0d:38:56:63:31:2c:de:
                    36:cd:78:69:0c:e9:cd:ab:a0:16:7e:62:55:a0:3a:
                    cc:58:66:a0:3b:af:c0:f6:fd:ab:c6:10:c6:b4:3f:
                    f7:78:f1:f8:8c:3f:e0:d2:7b:64:0e:e5:30:64:c4:
                    35:d1:4b:48:5d:e2:17:c5:ad:60:ee:62:30:c0:c2:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:52:C0:B5:D9:E1:1C:6B:9F:11:54:DA:C7:C3:B6:69:E8:D3:DE
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:db:84:5f:c3:0e:60:0a:14:39:f6:51:42:52:e4:c1:e9:
         a3:96:f3:00:20:be:51:9a:d0:82:4c:54:2b:22:8a:33:df:87:
         0c:e7:64:a0:9e:66:b6:98:e6:dd:72:46:77:a3:c9:f7:ec:da:
         7d:4b:77:97:b7:2f:f7:a6:37:81:9f:e4:cf:c3:7d:76:08:cb:
         3a:81:78:21:06:28:03:80:e4:cf:bc:c4:0c:51:98:0d:4d:39:
         6c:6c:00:aa:3a:b7:d7:9d:0a:2e:b3:67:a1:d1:73:2c:dd:c8:
         91:6b:a6:b0:a3:db:3a:55:0f:cb:05:3b:85:15:8f:2f:12:74:
         ab:6d:ca:2c:7d:ed:7e:97:db:ff:26:e9:5d:66:78:eb:b2:dc:
         12:f6:ee:c3:8c:26:82:9a:ca:1e:4c:66:c0:ee:83:01:6e:2b:
         8a:6d:8c:72:da:12:13:28:b9:1a:1b:ee:06:40:d1:c8:ea:8d:
         ac:2f:5a:44:27:02:ad:ba:2f:8a:29:da:96:fd:6a:e1:17:a9:
         45:c2:8b:d4:02:2c:1f:10:cc:9b:02:64:46:49:71:64:78:75:
         c1:7e:b0:5c:03:2f:be:43:06:1e:76:81:16:24:f9:4e:ce:ff:
         8d:e1:58:90:02:4d:46:6f:bd:2c:4d:d1:23:f4:31:33:ff:27:
         3d:b5:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:18 2026 by rpki-client