This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/3138312e3233322e3230382e302f32322d3332203d3e20323731353638.roa
File:                     3138312e3233322e3230382e302f32322d3332203d3e20323731353638.roa (raw, json)
Hash identifier:          hSF11VZ9DisxPpdAqMnEYiYKfhh7yzYyvxTBehw/Cdo=
Subject key identifier:   48:B6:AF:66:E2:3C:BF:2B:B5:86:8F:B8:B1:B3:0E:3F:93:A4:77:7B
Certificate issuer:       /CN=3072A5F7CD1ED49F1294BF501470922B420E536A
Certificate serial:       55F6CCFBCC389989932456483738B240F97518B9
Authority key identifier: 30:72:A5:F7:CD:1E:D4:9F:12:94:BF:50:14:70:92:2B:42:0E:53:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3072A5F7CD1ED49F1294BF501470922B420E536A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/3138312e3233322e3230382e302f32322d3332203d3e20323731353638.roa
Signing time:             Wed 03 Dec 2025 20:47:26 +0000
ROA not before:           Wed 03 Dec 2025 20:42:26 +0000
ROA not after:            Wed 02 Dec 2026 20:47:26 +0000
asID:                     271568
IP address blocks:        181.232.208.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f6:cc:fb:cc:38:99:89:93:24:56:48:37:38:b2:40:f9:75:18:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3072A5F7CD1ED49F1294BF501470922B420E536A
        Validity
            Not Before: Dec  3 20:42:26 2025 GMT
            Not After : Dec  2 20:47:26 2026 GMT
        Subject: CN=48B6AF66E23CBF2BB5868FB8B1B30E3F93A4777B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:f3:39:6a:2a:0a:fa:51:f2:a2:d0:ef:db:
                    a3:d1:c8:58:96:3d:fb:e0:d7:ca:4d:8d:fd:49:0a:
                    48:4b:83:ff:71:6d:ee:28:9f:bf:df:a7:40:21:fa:
                    42:84:ef:eb:25:b5:ec:b6:8a:00:5e:dd:58:06:48:
                    f5:ea:bd:9a:e5:42:23:63:61:b1:34:0e:13:be:a6:
                    f9:ad:5a:c8:b4:2b:0d:04:29:e2:b0:42:82:65:0a:
                    a5:00:ef:21:4b:05:12:24:46:86:22:ed:67:5e:4f:
                    53:d3:25:b8:c1:85:fc:35:42:b1:f6:fa:06:48:3e:
                    e1:22:bb:a3:ff:fd:06:d3:c6:89:c0:19:4d:d8:05:
                    47:22:b4:64:1f:a9:67:b8:02:97:ea:63:4a:05:a4:
                    89:99:7e:eb:98:ed:94:a7:29:bb:33:ab:48:23:ae:
                    a7:98:ed:e0:f0:e1:63:77:a7:cd:24:8c:13:0f:7c:
                    51:7c:13:97:4c:e0:a4:ea:05:0b:0f:44:15:c2:da:
                    85:1a:04:d1:6d:c0:4e:e9:a7:f7:17:fe:a5:d5:0f:
                    10:1e:eb:ee:02:be:a0:3c:15:8d:da:d3:bf:f9:04:
                    e4:f4:e8:d5:b9:a5:67:95:a1:70:5c:24:a9:35:75:
                    41:da:29:60:b2:fc:d5:ad:64:47:1b:a6:85:80:19:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B6:AF:66:E2:3C:BF:2B:B5:86:8F:B8:B1:B3:0E:3F:93:A4:77:7B
            X509v3 Authority Key Identifier:
                keyid:30:72:A5:F7:CD:1E:D4:9F:12:94:BF:50:14:70:92:2B:42:0E:53:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/3072A5F7CD1ED49F1294BF501470922B420E536A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3072A5F7CD1ED49F1294BF501470922B420E536A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/3138312e3233322e3230382e302f32322d3332203d3e20323731353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:e8:1a:64:96:cf:b4:36:87:dc:01:1a:f5:b7:fb:1d:23:44:
         e7:9e:7c:81:64:ae:6a:ad:01:e4:23:6e:95:b1:3b:49:79:60:
         e9:7c:26:8e:d9:65:f0:38:d0:bb:77:71:2d:f3:7e:5b:b4:cc:
         b3:78:bf:6c:c0:57:d3:06:84:b0:4d:e4:27:18:c5:06:c2:79:
         8d:97:4e:cd:9e:ad:a4:57:65:00:65:f2:d1:bb:32:9d:86:f5:
         1c:42:ed:5b:7f:f8:cd:54:b4:47:d9:4c:79:cf:41:8f:48:1f:
         4b:e4:53:5b:e8:d6:86:9d:98:c0:f5:11:a9:65:ab:28:81:25:
         ba:e8:04:5e:1d:32:17:47:95:27:63:68:9d:88:ab:e5:e0:de:
         9a:dd:78:ac:61:bb:cc:95:ca:9f:3f:53:44:4c:5e:d0:96:67:
         a1:53:d2:03:fe:73:c3:39:f9:b8:27:2f:ae:40:a6:47:b0:82:
         41:9e:8b:74:4e:40:a8:a2:f1:15:e1:39:52:43:a2:e1:1c:47:
         72:f2:d8:6d:96:2e:87:2d:a2:c4:ad:f0:1a:73:2d:7f:7c:9d:
         33:3c:fd:b7:55:de:8d:38:12:ac:f0:7d:28:61:65:c2:55:3e:
         cd:e2:0f:93:32:6c:86:aa:6e:6b:1b:4d:00:07:d5:34:54:eb:
         c4:15:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----