This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          kgZlEosOgTOQ67afSgOAS+Tonv6fCDs/vnQUOWZibBk=
Subject key identifier:   DA:1B:BE:A8:26:35:7C:97:44:7B:B4:86:59:0D:74:D1:EE:6A:5D:54
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       631E498BF98F2A9E8B76EF1DEA411CC0EC61C5E0
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:16:15 +0000
ROA not before:           Tue 13 Jan 2026 20:11:15 +0000
ROA not after:            Tue 12 Jan 2027 20:16:15 +0000
asID:                     265393
IP address blocks:        2804:3364:500::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1e:49:8b:f9:8f:2a:9e:8b:76:ef:1d:ea:41:1c:c0:ec:61:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:11:15 2026 GMT
            Not After : Jan 12 20:16:15 2027 GMT
        Subject: CN=DA1BBEA826357C97447BB486590D74D1EE6A5D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:60:ca:8e:6f:e2:61:96:b2:ff:c0:91:f8:
                    a7:3d:21:da:d9:ac:18:d6:f3:ec:29:01:c8:b7:13:
                    ea:86:1d:67:bc:89:da:07:98:00:5a:25:a2:08:c1:
                    2e:6f:ff:e0:20:93:a6:2e:d9:0a:81:14:4d:aa:80:
                    6d:b1:9d:dd:d7:35:61:d8:80:d8:dc:ca:1d:82:ab:
                    89:a4:60:bb:46:27:a2:b7:26:82:26:ff:60:a7:43:
                    39:bf:6d:17:60:5c:e5:d9:a5:c9:5f:d5:56:c8:1b:
                    12:7f:03:c8:b4:f1:53:5c:59:ca:b1:d2:62:ef:f4:
                    31:42:98:54:25:e9:5b:7b:45:38:0b:e7:72:3b:bb:
                    23:3a:f4:c5:35:bf:2e:d8:fe:ae:c0:b2:d0:7c:82:
                    65:ce:1d:7e:6d:ed:06:f8:d6:02:ec:fc:6e:3b:04:
                    11:8d:0c:12:58:75:83:c0:2b:8a:f0:71:f2:87:46:
                    2a:e4:e9:d9:72:6f:9e:8f:e7:32:1d:e3:c9:b7:d6:
                    9c:d7:af:4f:d4:52:76:54:fa:53:9d:85:13:6c:4f:
                    8c:b0:6a:09:03:ce:88:19:1f:ce:fd:13:20:40:87:
                    48:34:6b:37:63:47:48:8a:07:f8:9e:38:40:56:ba:
                    f1:aa:8d:2d:7b:07:84:60:4b:cf:fc:75:8d:f0:e0:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1B:BE:A8:26:35:7C:97:44:7B:B4:86:59:0D:74:D1:EE:6A:5D:54
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:e3:9b:a1:63:10:85:ea:28:1f:2a:0b:6c:49:34:e3:ff:ba:
         7e:63:45:c2:5a:3c:8c:cb:1d:fa:d6:47:1d:54:d7:34:02:38:
         93:fc:48:00:2a:d3:86:ff:1f:ae:99:ff:72:16:67:b3:8e:2e:
         3d:55:2f:a1:c4:9e:07:23:53:e2:ae:a0:c7:2e:d5:29:11:2d:
         f9:8d:3f:08:be:63:c0:d2:04:4f:42:57:ed:86:69:2c:d3:66:
         e5:c5:83:ad:96:67:0f:ed:fd:4e:27:81:80:8d:44:8c:71:0b:
         23:58:59:12:a3:51:c2:8a:e7:00:b9:b9:56:fc:55:29:99:84:
         ce:ec:e4:aa:5f:b0:1e:8c:de:54:08:1f:1d:52:15:85:c1:e0:
         4f:6b:de:46:8a:3b:0f:1c:61:ed:1e:83:a0:71:74:f5:39:d7:
         8b:db:2e:44:63:46:f3:c3:ae:1a:fc:5d:40:b5:a4:15:f0:c4:
         2a:9d:5b:4a:ca:ef:9e:03:e3:7f:77:65:22:1f:ee:05:90:af:
         95:21:d9:4d:55:23:aa:13:c3:c8:d9:29:d6:e1:4e:8f:a4:4b:
         66:2c:ae:ec:cf:fc:c6:57:47:8c:6f:20:57:c1:82:57:70:63:
         ca:5c:13:5b:81:40:3c:42:cc:49:45:e1:c4:20:73:3e:ba:91:
         70:63:12:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYx5Ji/mPKp6Ldu8d6kEcwOxhxeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4MDJENzZCNEUzQUI4RDZGN0FEQzJGNjUzNjRBQTA0
Q0I3NDI0NjAeFw0yNjAxMTMyMDExMTVaFw0yNzAxMTIyMDE2MTVaMDMxMTAvBgNV
BAMTKERBMUJCRUE4MjYzNTdDOTc0NDdCQjQ4NjU5MEQ3NEQxRUU2QTVENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aWDKjm/iYZay/8CR+Kc9IdrZ
rBjW8+wpAci3E+qGHWe8idoHmABaJaIIwS5v/+Agk6Yu2QqBFE2qgG2xnd3XNWHY
gNjcyh2Cq4mkYLtGJ6K3JoIm/2CnQzm/bRdgXOXZpclf1VbIGxJ/A8i08VNcWcqx
0mLv9DFCmFQl6Vt7RTgL53I7uyM69MU1vy7Y/q7AstB8gmXOHX5t7Qb41gLs/G47
BBGNDBJYdYPAK4rwcfKHRirk6dlyb56P5zId48m31pzXr0/UUnZU+lOdhRNsT4yw
agkDzogZH879EyBAh0g0azdjR0iKB/ieOEBWuvGqjS17B4RgS8/8dY3w4ExLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2hu+qCY1fJdEe7SGWQ100e5qXVQwHwYDVR0j
BBgwFoAUEIAtdrTjq41vetwvZTZKoEy3QkYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMC8xMDgwMkQ3NkI0RTNBQjhENkY3QURDMkY2NTM2NEFBMDRDQjc0MjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwODAyRDc2QjRFM0FCOEQ2
RjdBREMyRjY1MzY0QUEwNENCNzQyNDYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAv
MzIzODMwMzQzYTMzMzMzNjM0M2EzNTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzUzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDNkBTANBgkqhkiG9w0BAQsFAAOC
AQEAjuOboWMQheooHyoLbEk04/+6fmNFwlo8jMsd+tZHHVTXNAI4k/xIACrThv8f
rpn/chZns44uPVUvocSeByNT4q6gxy7VKREt+Y0/CL5jwNIET0JX7YZpLNNm5cWD
rZZnD+39TieBgI1EjHELI1hZEqNRwornALm5VvxVKZmEzuzkql+wHozeVAgfHVIV
hcHgT2veRoo7Dxxh7R6DoHF09TnXi9suRGNG88OuGvxdQLWkFfDEKp1bSsrvngPj
f3dlIh/uBZCvlSHZTVUjqhPDyNkp1uFOj6RLZiyu7M/8xldHjG8gV8GCV3BjylwT
W4FAPELMSUXhxCBzPrqRcGMS7Q==
-----END CERTIFICATE-----