This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa
File:                     323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa (raw, json)
Hash identifier:          SUl3p4Keqk8pM7nefKtlFs72TTfzWUp8okUyYBC6ZdI=
Subject key identifier:   66:0F:C2:F2:73:DE:7E:B0:13:3C:4F:9D:18:EC:9B:19:24:1A:04:64
Certificate issuer:       /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial:       303017963992174C08214CD8DC3F82BD1B038D90
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa
Signing time:             Wed 12 Nov 2025 02:08:43 +0000
ROA not before:           Wed 12 Nov 2025 02:03:43 +0000
ROA not after:            Wed 11 Nov 2026 02:08:43 +0000
asID:                     269411
IP address blocks:        2804:642c:8000::/33 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:30:17:96:39:92:17:4c:08:21:4c:d8:dc:3f:82:bd:1b:03:8d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
        Validity
            Not Before: Nov 12 02:03:43 2025 GMT
            Not After : Nov 11 02:08:43 2026 GMT
        Subject: CN=660FC2F273DE7EB0133C4F9D18EC9B19241A0464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:66:85:6d:a5:60:9c:11:62:94:ee:ea:61:
                    bb:2e:85:83:8a:c2:9d:f2:57:10:b8:9a:1c:d3:ea:
                    23:47:ea:e1:32:17:ff:f3:41:10:b7:56:a8:2b:1e:
                    68:a5:df:9a:27:3c:6b:cc:30:d5:ef:b3:ca:5e:67:
                    65:c3:da:3f:b0:50:ce:05:7f:f9:c5:16:30:12:78:
                    ca:34:c7:df:e5:0d:3b:3f:e5:cd:94:ac:c0:e2:fb:
                    d5:d3:59:19:d0:b8:fe:9e:17:ba:c2:fc:e5:90:27:
                    4b:bd:ee:68:46:37:4e:44:93:12:49:78:2a:3d:d9:
                    09:a0:7b:03:3d:a2:32:6f:3f:47:ed:44:53:18:93:
                    ce:3d:e1:80:b1:16:57:02:4b:e3:28:ae:db:2a:dd:
                    4f:aa:27:44:6e:39:0c:b7:f9:82:1b:4c:a7:6f:06:
                    9a:2e:a5:d1:43:7f:ff:4d:ef:5a:59:3d:2e:82:e1:
                    41:e6:3e:89:88:49:95:b2:58:7e:48:73:82:b8:7f:
                    76:c5:2e:58:b6:20:5f:61:31:f0:e5:7c:11:2c:8f:
                    72:f5:08:ff:e2:d7:ff:58:e8:2f:98:a3:1f:71:cf:
                    e7:00:37:b8:68:8b:b3:73:96:6e:76:03:68:09:0f:
                    b7:38:78:0e:09:8a:a3:09:ca:2d:9d:73:a7:7d:bb:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:C2:F2:73:DE:7E:B0:13:3C:4F:9D:18:EC:9B:19:24:1A:04:64
            X509v3 Authority Key Identifier:
                keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ad:a3:68:8e:ab:10:3f:9c:4d:1d:da:99:0b:73:61:87:a8:40:
         4a:20:02:66:67:a0:1d:de:33:dd:4c:17:48:2f:54:3b:a4:ad:
         3f:43:ba:17:7d:0a:13:0f:5e:7d:af:67:20:16:c9:4c:91:46:
         73:6f:8d:a2:bd:85:da:0f:c3:f4:61:36:c8:a9:d2:ee:db:74:
         70:33:d2:04:86:6c:6d:c0:ba:85:72:e2:a2:cd:ca:e5:fd:61:
         08:71:45:bd:2a:6a:b1:7f:a8:04:a6:4c:9f:f2:f9:55:32:7f:
         3f:67:53:c5:b4:d1:7e:62:ee:35:f6:67:eb:6d:a3:f9:40:94:
         8c:a5:0c:80:b5:f8:2f:0d:0c:4b:2c:72:64:4a:0a:e1:64:6f:
         d9:41:da:41:97:6c:be:a3:70:1d:95:f4:df:a6:ee:00:9a:7d:
         b3:a9:3e:4b:56:a6:65:b2:71:af:46:10:0b:66:3e:65:66:59:
         c5:30:a2:1f:b4:b6:51:a9:3a:98:90:91:c6:90:08:dd:d8:38:
         ca:54:59:eb:c2:d8:b8:5d:48:01:fa:c4:03:a9:56:f2:9c:7e:
         a3:8a:34:36:92:8e:bc:87:8b:44:0a:07:73:c1:f3:4c:60:fc:
         01:d8:5d:07:00:86:a1:4d:4f:28:50:3f:de:87:a6:b1:43:7e:
         2d:56:08:4e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMDAXljmSF0wIIUzY3D+CvRsDjZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzMTBDQ0I1MkFEODQ1RkI4MEMxNjQ2QTQ1QUY2Q0I0
MjAzRTIyRTAeFw0yNTExMTIwMjAzNDNaFw0yNjExMTEwMjA4NDNaMDMxMTAvBgNV
BAMTKDY2MEZDMkYyNzNERTdFQjAxMzNDNEY5RDE4RUM5QjE5MjQxQTA0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNWaFbaVgnBFilO7qYbsuhYOK
wp3yVxC4mhzT6iNH6uEyF//zQRC3VqgrHmil35onPGvMMNXvs8peZ2XD2j+wUM4F
f/nFFjASeMo0x9/lDTs/5c2UrMDi+9XTWRnQuP6eF7rC/OWQJ0u97mhGN05EkxJJ
eCo92QmgewM9ojJvP0ftRFMYk8494YCxFlcCS+Mortsq3U+qJ0RuOQy3+YIbTKdv
BpoupdFDf/9N71pZPS6C4UHmPomISZWyWH5Ic4K4f3bFLli2IF9hMfDlfBEsj3L1
CP/i1/9Y6C+Yox9xz+cAN7hoi7Nzlm52A2gJD7c4eA4JiqMJyi2dc6d9u5LFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZg/C8nPefrATPE+dGOybGSQaBGQwHwYDVR0j
BBgwFoAU3DEMy1KthF+4DBZGpFr2y0ID4i4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMi9EQzMxMENDQjUyQUQ4NDVGQjgwQzE2NDZBNDVBRjZDQjQyMDNFMjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzEwQ0NCNTJBRDg0NUZC
ODBDMTY0NkE0NUFGNkNCNDIwM0UyMkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzIv
MzIzODMwMzQzYTM2MzQzMjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTM0MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZCyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCto2iOqxA/nE0d2pkLc2GHqEBKIAJmZ6Ad3jPdTBdIL1Q7pK0/Q7oXfQoT
D159r2cgFslMkUZzb42ivYXaD8P0YTbIqdLu23RwM9IEhmxtwLqFcuKizcrl/WEI
cUW9Kmqxf6gEpkyf8vlVMn8/Z1PFtNF+Yu419mfrbaP5QJSMpQyAtfgvDQxLLHJk
SgrhZG/ZQdpBl2y+o3AdlfTfpu4Amn2zqT5LVqZlsnGvRhALZj5lZlnFMKIftLZR
qTqYkJHGkAjd2DjKVFnrwti4XUgB+sQDqVbynH6jijQ2ko68h4tECgdzwfNMYPwB
2F0HAIahTU8oUD/eh6axQ34tVghO
-----END CERTIFICATE-----