This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          tAaW7GGioGnK2MfoPhLnMFpbJuNeSFBSbajVBIo5hTw=
Subject key identifier:   5A:37:3E:91:AA:27:CF:4A:D5:A7:9E:25:E1:86:4D:75:B6:8F:16:07
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       75942F5FB774750DCB6B603614E8BA9A505FFC4E
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:16:07 +0000
ROA not before:           Tue 13 Jan 2026 20:11:07 +0000
ROA not after:            Tue 12 Jan 2027 20:16:07 +0000
asID:                     265393
IP address blocks:        2804:3364:200::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:94:2f:5f:b7:74:75:0d:cb:6b:60:36:14:e8:ba:9a:50:5f:fc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:11:07 2026 GMT
            Not After : Jan 12 20:16:07 2027 GMT
        Subject: CN=5A373E91AA27CF4AD5A79E25E1864D75B68F1607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:66:87:13:92:8e:31:8c:bf:e1:d5:56:a2:
                    a9:ce:16:60:57:bf:b7:a9:30:5d:c6:03:16:66:2b:
                    db:b1:d9:d8:d0:a1:ac:75:c1:cd:32:6c:c5:e0:2e:
                    65:bc:5e:2b:40:bb:f7:41:55:3a:e5:9c:3d:aa:f2:
                    f1:89:a9:d6:d5:d5:f3:21:ae:f9:c0:7a:d4:ec:5d:
                    ee:d8:7e:e5:55:bf:17:06:a0:9b:be:4a:93:5f:8b:
                    6a:77:f6:ac:2c:98:22:fd:fd:6e:f2:f0:69:2f:9f:
                    4e:5b:1c:2f:cd:0d:a3:0f:47:13:45:1e:ec:16:17:
                    61:8b:eb:18:d6:73:4e:1a:9d:88:2d:2b:f7:37:a8:
                    86:c0:96:f4:b4:a5:e5:9e:e0:af:12:5d:49:31:09:
                    1c:ae:7d:2e:7f:22:40:b7:78:9f:e5:de:43:d3:8e:
                    a6:6b:c1:14:3e:45:c4:c8:02:da:87:a4:7d:99:e8:
                    a5:ff:23:27:c3:cf:12:0f:dd:9e:6a:35:c8:28:98:
                    f5:28:ac:a5:65:83:be:4a:44:f9:bb:99:00:5c:7e:
                    48:c0:e4:ea:ef:f0:08:d8:54:03:1d:b8:0e:50:47:
                    38:45:58:97:5b:f1:68:d5:5e:5a:50:8f:7f:d3:3f:
                    10:55:e2:94:26:70:33:26:3f:1b:56:fc:2d:29:4d:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:37:3E:91:AA:27:CF:4A:D5:A7:9E:25:E1:86:4D:75:B6:8F:16:07
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:35:6a:65:15:31:34:a3:42:9b:85:82:26:55:44:91:b9:
         f7:be:37:a1:4b:59:b6:f5:d0:e9:0a:ab:f4:f7:a6:47:5b:ec:
         e8:25:ea:40:10:a5:69:44:c3:c7:b3:fa:8c:9e:ab:27:29:ac:
         a7:6b:64:46:2d:d0:48:5b:f8:dc:31:14:d7:8f:7b:5a:43:49:
         81:f8:5f:8b:cd:6b:4c:81:11:06:eb:ee:6a:aa:18:c5:e6:00:
         f0:b1:be:a2:eb:6a:b1:1a:d6:9c:fe:43:fe:34:c5:f2:97:5b:
         d6:15:f1:9e:d9:59:60:e1:d4:57:5e:70:c2:3b:01:a9:22:8d:
         9f:0f:54:d3:34:b4:e4:c1:ad:d4:5b:4a:fd:af:a4:c8:a9:3e:
         49:34:fe:94:53:0d:c4:1a:cb:84:bd:64:bd:ba:dc:67:53:89:
         2c:31:7b:30:7f:01:6d:83:51:af:bc:7c:df:d7:67:46:3a:96:
         5f:2f:a9:fb:6f:dc:23:df:71:40:5b:4b:9e:be:07:17:f5:f7:
         2b:16:e6:49:0b:16:e2:60:ce:67:22:ce:99:7c:e8:83:a2:31:
         29:1c:56:b6:df:37:b4:9c:86:ed:2b:b3:fb:2a:ed:0f:43:91:
         bc:6a:1e:f4:61:cf:b5:62:88:1c:c3:51:24:ca:44:c3:8c:46:
         77:a6:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----