This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          hB1iSkAb4bFYxuBlJFYoaKTW0xOWkYy8J2/3nSO25iY=
Subject key identifier:   08:82:16:58:35:D7:10:C2:04:7A:0F:A9:8B:62:F2:CE:7A:15:F7:06
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       091DE0C19F4D310C4EE9E94D9AAA7C551B4E1B03
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:18:16 +0000
ROA not before:           Tue 13 Jan 2026 20:13:16 +0000
ROA not after:            Tue 12 Jan 2027 20:18:16 +0000
asID:                     265393
IP address blocks:        168.194.167.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1d:e0:c1:9f:4d:31:0c:4e:e9:e9:4d:9a:aa:7c:55:1b:4e:1b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:13:16 2026 GMT
            Not After : Jan 12 20:18:16 2027 GMT
        Subject: CN=0882165835D710C2047A0FA98B62F2CE7A15F706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:69:e3:35:b2:e8:ee:ab:d7:a2:b1:e7:f2:
                    d0:0e:e1:69:ce:62:e7:6e:dd:b4:31:5b:91:f7:3d:
                    8a:21:c5:44:b8:b9:14:06:69:55:12:a8:00:00:37:
                    2c:e9:b9:d7:7a:8f:de:98:79:51:84:3f:49:9f:7d:
                    96:89:3c:10:75:b9:cb:5b:5a:90:99:46:fb:c9:2c:
                    0a:7a:95:19:3f:bb:2f:55:2e:77:c9:72:1d:14:1d:
                    52:54:2f:35:33:52:0f:7a:6b:64:1a:33:ba:51:8a:
                    6b:9b:e8:b3:fc:71:e1:e8:65:69:4e:56:f6:7a:eb:
                    de:47:63:64:2d:97:63:52:65:9b:b9:f5:3c:96:11:
                    eb:ee:1c:8d:73:cf:a2:4b:1e:70:1a:e3:c3:f1:67:
                    4a:cd:0b:85:13:0d:76:92:b2:54:fa:24:e5:eb:dd:
                    59:d8:86:72:3d:ec:d9:7b:09:da:cd:d7:51:0a:50:
                    6f:e5:fd:05:3c:57:4f:97:3b:68:45:23:c5:61:5d:
                    1d:60:89:27:21:82:6d:05:b5:c0:6a:4a:02:d3:37:
                    c9:9a:85:60:13:2f:86:9b:8f:f0:f8:55:46:cb:9c:
                    e4:9e:38:10:0e:54:91:ec:00:80:89:25:85:95:af:
                    f6:0a:26:af:59:84:33:33:e9:fb:fe:0b:87:dc:66:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:16:58:35:D7:10:C2:04:7A:0F:A9:8B:62:F2:CE:7A:15:F7:06
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:33:37:0e:3e:03:5e:ca:78:9f:de:c9:9e:ba:f4:54:6c:
         a4:64:b0:26:02:48:d0:ab:9e:d1:9d:8c:dc:d2:38:46:31:fa:
         91:92:1d:84:cf:c8:d1:0e:e0:74:c9:b0:54:b4:cd:78:00:9f:
         71:78:ae:17:c4:0f:a7:51:9b:f9:f9:bb:b6:00:56:75:92:11:
         ab:f3:12:04:21:05:ad:14:10:52:fe:e8:60:4a:d3:44:ba:1d:
         28:09:4d:32:8c:4c:45:33:55:96:d8:96:ea:8b:40:82:22:c4:
         5d:28:64:9c:1c:25:74:0d:24:e1:0e:ca:5f:da:8a:ed:d7:70:
         5e:a4:85:7b:73:12:c2:7f:46:2e:47:87:0e:da:54:0b:95:8b:
         f4:5c:cc:9c:d1:c3:be:13:f7:03:ac:ce:2a:c6:be:4d:fa:83:
         ff:a5:12:1e:57:35:9b:64:fa:ed:df:80:f7:af:d0:b8:14:89:
         81:e8:0b:02:64:cd:a2:aa:b9:ea:59:d2:a0:cf:1b:12:d6:b6:
         99:77:ea:66:8b:e0:e1:5f:07:4c:08:c8:12:1d:71:ae:c0:37:
         df:f9:c5:75:83:ab:d8:06:25:b3:d2:81:86:1f:1f:df:83:91:
         db:69:7f:c9:fa:7c:ee:8c:14:4c:1d:8f:9f:64:4a:73:3d:52:
         ba:90:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----