This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          0PaX2dsOS8ibcYEC0afxE49ENo2wYU4shpsXfEoHCQM=
Subject key identifier:   3B:1A:7E:E7:49:D2:93:09:78:07:01:97:24:82:F1:19:5D:DF:EA:C5
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       5C6CEE8C8D36C5B3EF3174E47B11FB44FD1CA5D4
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:16:10 +0000
ROA not before:           Tue 13 Jan 2026 20:11:10 +0000
ROA not after:            Tue 12 Jan 2027 20:16:10 +0000
asID:                     265393
IP address blocks:        2804:3364:300::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6c:ee:8c:8d:36:c5:b3:ef:31:74:e4:7b:11:fb:44:fd:1c:a5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:11:10 2026 GMT
            Not After : Jan 12 20:16:10 2027 GMT
        Subject: CN=3B1A7EE749D29309780701972482F1195DDFEAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:e3:70:df:c7:98:bb:f5:47:c1:48:fb:9a:
                    b1:33:71:df:36:38:12:a8:67:98:f5:b5:74:32:3d:
                    9b:7f:c5:94:7b:97:30:cd:da:c5:eb:9c:d4:aa:90:
                    7e:9d:4a:ca:a2:65:c2:2f:01:df:c9:d6:f4:0e:58:
                    43:ea:ec:ba:ef:02:b0:3d:f9:75:40:38:d4:55:92:
                    76:20:7e:58:03:cc:7f:9c:c6:26:96:ff:fa:7b:ea:
                    b2:c3:c3:64:05:01:03:02:b9:84:64:36:6e:65:21:
                    48:57:70:43:a0:66:13:d7:7e:f9:0b:33:36:82:46:
                    7a:c9:f1:86:ea:03:8c:7f:16:08:6e:1d:ab:18:4e:
                    b6:c3:4c:03:7c:b2:be:12:d5:e2:53:9e:07:e9:b9:
                    a6:3b:70:fa:ab:74:e0:d2:5d:35:b2:6b:d6:a6:3b:
                    12:65:b5:ff:a1:66:05:89:c9:99:d6:98:c0:ae:fb:
                    36:e8:2d:ec:60:1f:69:65:3f:c4:2c:b3:a0:69:e1:
                    e8:5a:68:00:d8:c5:d2:16:d0:13:70:cf:d0:95:74:
                    30:54:61:88:d9:2a:7b:32:62:c2:2e:72:02:d2:3b:
                    25:ae:14:5b:28:69:6f:a5:53:64:b9:5f:5c:ff:97:
                    d0:c0:db:c5:97:f9:fe:68:4d:43:f2:f9:02:39:7d:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:7E:E7:49:D2:93:09:78:07:01:97:24:82:F1:19:5D:DF:EA:C5
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:e6:98:39:b0:08:ac:cc:0f:49:11:05:4d:07:a1:fe:d6:
         e1:94:a8:88:51:46:dd:c9:8b:c3:1d:99:91:d4:74:4d:2f:80:
         d5:3e:48:b7:d8:b9:9b:0d:f4:d9:a2:ed:2f:f4:8a:0a:46:4d:
         db:0d:f8:40:1e:66:07:fb:c6:99:75:63:3c:cc:4b:1e:ea:c9:
         fb:9e:ee:53:11:0c:60:01:44:04:b4:3d:fa:b2:a0:dc:02:55:
         6e:77:3c:c9:e8:85:b3:20:18:1d:52:65:70:c3:82:fe:c5:e3:
         b5:52:7a:68:4c:c5:6f:bd:f2:3b:9b:f7:57:37:0c:14:84:1d:
         60:c5:d6:30:74:c9:7d:ef:cd:08:85:9d:36:16:8d:df:95:1d:
         8b:05:10:25:a3:d5:01:6a:4e:78:c3:3e:60:3e:23:60:3e:7a:
         5b:70:d5:87:74:18:49:09:07:dd:ff:e5:09:ed:35:b8:9a:e6:
         f2:54:b5:ac:7e:26:4f:d3:a1:6d:b0:d9:8b:6e:a4:dc:93:d5:
         f3:db:fd:c0:9f:76:7c:84:c1:1c:c1:95:c7:99:66:2a:79:db:
         3e:d4:66:28:38:fe:56:be:81:7f:56:56:a6:cb:9a:57:20:3b:
         df:3e:06:6c:4a:ad:27:e2:e7:fa:ae:6f:2e:5d:7f:94:67:07:
         16:ff:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----