This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
File:                     323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier:          Ussg2nGoyfz0d9CBvwlCKqQ3swIIAux7bT5iuKi+jfI=
Subject key identifier:   D2:21:97:0D:46:1F:F9:A9:C7:AD:57:41:E4:EE:A7:0C:BD:D7:1A:7C
Certificate issuer:       /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial:       2EBBBE3DCDE1103C8FAF5C03A6AD5FFFF8D40AB3
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
Signing time:             Wed 12 Nov 2025 02:08:46 +0000
ROA not before:           Wed 12 Nov 2025 02:03:46 +0000
ROA not after:            Wed 11 Nov 2026 02:08:46 +0000
asID:                     269411
IP address blocks:        2804:642c:4000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bb:be:3d:cd:e1:10:3c:8f:af:5c:03:a6:ad:5f:ff:f8:d4:0a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
        Validity
            Not Before: Nov 12 02:03:46 2025 GMT
            Not After : Nov 11 02:08:46 2026 GMT
        Subject: CN=D221970D461FF9A9C7AD5741E4EEA70CBDD71A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:cf:53:80:74:90:ca:d7:57:da:03:f6:4d:
                    32:37:08:62:e5:4c:9b:d1:9c:7c:46:89:8b:ec:ce:
                    2e:43:bf:c4:7f:96:29:1b:78:03:0a:2f:4e:db:c2:
                    6d:4f:91:b5:d1:b7:88:26:c3:73:f6:43:7b:99:22:
                    a6:38:58:78:a5:18:c2:52:1b:dd:0e:64:6e:22:a8:
                    35:78:55:55:05:11:8f:dd:73:4b:6d:d0:b2:8c:41:
                    4c:23:ee:32:1d:85:5f:e7:4b:43:30:2c:92:60:a7:
                    5f:5b:2e:9e:86:25:d0:55:0b:ed:96:01:91:25:81:
                    8e:0e:e4:f6:3a:a0:77:98:d7:cf:73:fb:51:3f:c5:
                    94:37:2b:46:77:7f:b7:d1:b2:0d:9b:67:48:c4:54:
                    85:06:5b:b7:12:71:e2:5b:85:46:59:05:c6:ab:88:
                    d0:9e:6b:2c:42:7d:c6:d0:a4:01:b7:2d:12:13:0a:
                    90:6e:c0:26:2b:5f:48:30:29:65:d2:0a:18:87:e5:
                    73:bf:24:77:a0:92:8a:ef:57:7b:03:7f:91:77:ff:
                    8e:bc:2a:03:c6:4c:73:bd:65:68:a3:7a:ae:01:5b:
                    35:48:15:71:b3:22:20:28:7c:71:87:6b:07:86:27:
                    8e:45:a8:47:65:7a:38:44:76:aa:b3:e9:b0:3f:4a:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:21:97:0D:46:1F:F9:A9:C7:AD:57:41:E4:EE:A7:0C:BD:D7:1A:7C
            X509v3 Authority Key Identifier:
                keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:c5:9f:c2:b4:e2:f1:7b:f7:1d:97:bd:e7:0c:10:bc:99:
         00:a1:b8:c3:9a:c4:18:c5:34:90:31:d9:0a:80:b4:1c:e1:b8:
         9f:4c:4d:93:4c:24:0a:3b:89:50:55:94:a2:d0:3a:d0:83:8a:
         85:b5:0d:72:2d:47:60:ac:38:20:11:e8:6a:83:c8:14:e4:f5:
         1c:b1:d2:bd:49:6b:22:a6:8b:66:a6:40:a6:78:4c:fd:61:b7:
         20:d3:a5:6f:aa:73:a8:af:19:c9:c6:cc:e0:05:fa:4d:7b:e2:
         4d:f6:69:76:89:de:c9:67:28:46:e8:53:73:4f:2d:22:c4:0e:
         4c:d3:4d:c7:ea:df:18:42:1f:03:d8:c7:f1:8a:86:3d:3e:a1:
         23:46:57:54:8a:37:23:e5:c3:38:7d:28:b9:9d:32:c8:e2:a5:
         59:7b:38:a5:95:63:44:02:12:22:66:73:1b:0e:61:6e:1d:14:
         b5:ac:43:06:00:a0:5b:52:22:53:8e:c5:92:54:e1:ae:eb:a8:
         d4:e1:20:bf:19:b5:f9:e3:9c:54:1f:ec:3b:e6:31:e7:87:6e:
         ce:ca:f9:a3:2c:52:9c:71:72:e9:c8:6c:fa:a1:f7:b7:d9:db:
         9e:ec:10:92:a3:91:ed:bd:51:6e:80:e7:14:c7:25:77:b4:3d:
         35:00:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----