This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3430303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3430303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          srQgGxdHCUGbSQWHStpnRZCiA2sScUT2p5f85iCgwJg=
Subject key identifier:   00:75:70:91:D9:B8:9F:DB:97:EA:D8:0E:23:F1:B7:41:E2:63:93:56
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       15DF718B8368D092838C1B357378B1F5D69606E0
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3430303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:16:12 +0000
ROA not before:           Tue 13 Jan 2026 20:11:12 +0000
ROA not after:            Tue 12 Jan 2027 20:16:12 +0000
asID:                     265393
IP address blocks:        2804:3364:400::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:df:71:8b:83:68:d0:92:83:8c:1b:35:73:78:b1:f5:d6:96:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:11:12 2026 GMT
            Not After : Jan 12 20:16:12 2027 GMT
        Subject: CN=00757091D9B89FDB97EAD80E23F1B741E2639356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:a0:9a:06:ec:2e:31:ab:52:af:fc:5d:e6:
                    39:d6:75:cf:ba:8a:f0:b0:97:d6:e8:c8:40:51:3c:
                    34:b9:b2:c6:99:c4:3b:12:29:06:91:46:53:eb:47:
                    e1:c0:fc:62:c8:74:1a:b5:56:6a:ce:99:e3:c3:ac:
                    4b:70:c5:78:cd:21:7f:87:cd:fa:5a:60:e7:df:ec:
                    ea:da:bd:01:56:87:3a:db:22:5c:79:c9:bc:20:58:
                    f8:2b:fc:0d:e2:9e:db:4b:74:32:8e:6c:54:9c:0d:
                    61:16:88:48:20:f3:4e:49:87:f2:b0:10:27:2a:45:
                    c6:21:26:d4:b6:58:8d:06:a9:c6:7c:38:e2:ba:9d:
                    53:48:5e:6d:c7:27:4f:8b:b8:ee:b2:4f:a2:23:03:
                    41:04:10:17:ad:b7:e6:ac:2f:4e:75:97:3d:ea:3d:
                    2a:d0:4f:00:90:53:97:fc:e9:9d:be:9d:81:e5:b6:
                    ba:31:d6:3b:82:76:42:30:78:03:7e:09:4a:ac:2a:
                    5d:76:0a:98:af:d5:ab:36:06:3d:68:7c:4b:a5:9f:
                    ee:51:ac:2a:4a:9d:43:63:af:f7:91:50:9b:b1:ba:
                    00:ec:5e:01:e9:11:c2:6a:ca:c4:ec:dc:37:cc:76:
                    ee:eb:8f:a6:b9:c0:40:b0:9b:3c:86:3a:16:e6:d6:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:70:91:D9:B8:9F:DB:97:EA:D8:0E:23:F1:B7:41:E2:63:93:56
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3430303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:86:e6:b3:45:ae:97:0b:96:2a:4d:8b:ca:98:6d:cd:3c:
         6e:13:60:1a:c5:c3:b7:14:38:91:fd:9b:a2:bb:02:3f:72:25:
         59:87:2d:d0:72:39:91:97:78:ed:d5:a4:47:ee:32:1d:f0:e8:
         31:86:e6:e7:4d:7c:2c:97:06:5e:81:02:be:6c:e9:5f:33:6a:
         35:01:7a:df:76:67:67:7c:10:c8:74:2f:a6:2e:9b:e8:38:eb:
         be:06:17:11:40:a7:fd:4e:0c:3c:43:a2:2c:bd:8e:54:28:8b:
         74:25:b6:3f:73:fd:e3:da:b4:b8:5a:4a:b5:71:43:d7:45:27:
         83:71:17:c7:ba:f4:10:cf:49:d9:28:c5:ee:14:12:59:54:70:
         fa:54:e6:25:b7:0a:3f:e4:6b:35:78:87:d8:50:6f:35:f7:77:
         78:cf:ae:83:63:aa:22:ce:b8:f3:ba:a8:16:26:db:40:51:cd:
         68:24:eb:55:58:8f:e0:05:e9:e0:9f:33:89:7e:c3:a4:27:e4:
         31:70:34:56:60:61:d5:4e:f2:d3:5a:59:dd:a7:d5:fb:1e:16:
         d3:67:91:e5:08:7d:07:dc:0a:3d:a6:9b:e2:96:33:31:95:eb:
         d4:eb:78:a9:6d:05:97:1f:6b:87:2e:e1:46:cb:ff:29:09:24:
         bd:38:9c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----