This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          Ik7iDCv+ykEErSVWHrM2hImX2xaxT5guf8DHGxQ11p4=
Subject key identifier:   CB:D9:86:9B:7B:3A:AB:B0:A0:1D:32:79:9A:F5:6B:C2:31:DA:5B:75
Certificate issuer:       /CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
Certificate serial:       4BB27B8F105384B00785B0AFC60DC2F11253E8C0
Authority key identifier: 10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Tue 13 Jan 2026 20:16:17 +0000
ROA not before:           Tue 13 Jan 2026 20:11:17 +0000
ROA not after:            Tue 12 Jan 2027 20:16:17 +0000
asID:                     265393
IP address blocks:        2804:3364:8000::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b2:7b:8f:10:53:84:b0:07:85:b0:af:c6:0d:c2:f1:12:53:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10802D76B4E3AB8D6F7ADC2F65364AA04CB74246
        Validity
            Not Before: Jan 13 20:11:17 2026 GMT
            Not After : Jan 12 20:16:17 2027 GMT
        Subject: CN=CBD9869B7B3AABB0A01D32799AF56BC231DA5B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:44:48:1c:bd:64:3c:18:a4:ed:ce:a9:ed:
                    ad:73:01:f9:65:4a:67:84:2a:b1:35:43:7a:5c:e2:
                    27:26:a9:6c:a7:b1:8b:c6:1f:3b:d1:dc:75:5d:23:
                    b3:a3:14:44:70:26:9e:63:2d:a5:e6:3c:46:26:8a:
                    a1:32:05:a3:af:45:e9:7a:97:b7:45:d9:f0:78:be:
                    e6:19:6e:d9:d8:5c:4c:ef:6c:e0:32:11:2a:09:e6:
                    5a:9f:9a:df:d4:3d:01:64:d7:08:31:c9:1e:8e:c5:
                    d9:d5:d7:04:69:75:de:ee:55:0e:1a:d5:01:ed:78:
                    d1:7f:f3:b0:14:8c:bb:aa:03:a8:c0:1b:35:c3:0f:
                    ed:6a:50:55:31:26:89:f5:c6:de:1c:ce:f8:11:09:
                    53:87:d8:4c:0e:a0:c8:38:5a:85:40:ad:17:85:4f:
                    3c:0c:13:a9:33:7a:7d:fd:29:8a:9c:f3:59:d2:27:
                    ed:31:4d:fb:25:e1:f4:3f:e4:5d:e0:0f:ef:c6:20:
                    58:3a:ca:93:bb:27:59:51:b3:c3:b1:8a:0e:b2:ab:
                    d9:f3:30:08:66:ad:6f:62:68:94:d5:f5:85:ae:1d:
                    b5:70:f8:1f:d9:2a:b1:86:96:4d:c5:3c:19:c4:38:
                    f2:c5:bf:1c:49:10:31:d7:bf:cc:88:06:dd:51:36:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:86:9B:7B:3A:AB:B0:A0:1D:32:79:9A:F5:6B:C2:31:DA:5B:75
            X509v3 Authority Key Identifier:
                keyid:10:80:2D:76:B4:E3:AB:8D:6F:7A:DC:2F:65:36:4A:A0:4C:B7:42:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10802D76B4E3AB8D6F7ADC2F65364AA04CB74246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:be:57:27:6d:9d:f2:09:79:5d:24:6e:3e:d9:a5:0e:32:3e:
         ad:60:55:a5:1d:2a:77:a0:47:13:86:00:e0:3a:f1:59:60:2a:
         f5:2f:61:59:92:f3:21:9c:fe:74:68:10:1d:d3:7a:8b:e3:a7:
         34:0b:94:42:86:1a:fc:98:0b:79:d8:02:4d:54:10:90:fb:4d:
         e4:65:91:9c:16:df:4d:8a:8c:23:bd:67:36:2f:62:78:2a:68:
         4e:88:94:8d:8f:77:dd:9f:15:ee:8e:1b:7d:c0:70:9d:d7:f1:
         7d:e4:95:f3:af:09:6a:ac:ab:c6:08:21:f9:86:c3:aa:cf:3b:
         78:8b:11:75:3e:50:f2:c2:16:29:d9:e3:25:46:23:25:5d:43:
         ce:b1:80:90:10:cb:ea:e4:bc:bf:dd:9e:e5:95:7f:04:0a:bc:
         21:db:d6:19:ed:8c:eb:86:2c:08:bd:b6:66:29:fa:50:03:c0:
         30:4b:cf:e9:ee:58:7b:f1:4f:d9:f4:06:3d:84:28:9e:8e:7a:
         2c:a1:32:cc:9d:0d:1b:f9:9a:8a:22:3c:af:43:66:2d:19:8d:
         84:f3:24:74:58:bf:30:09:a6:d3:6d:e1:15:02:e9:00:ff:5c:
         9a:a8:c3:cc:4e:de:64:bf:4a:e8:8b:fa:0a:34:1a:b9:b3:55:
         4e:af:e0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----