This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa
File:                     323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier:          LIgjgi65l4xjcR8uio2XDwgw38Y0UzbyoM063jpWy2M=
Subject key identifier:   20:1A:8D:81:B3:0F:23:38:23:C7:DA:03:37:E7:66:6D:92:45:9F:A7
Certificate issuer:       /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial:       6FA41E5DD334D70FB26F89B8AE27E9BCBAD300FF
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa
Signing time:             Wed 12 Nov 2025 02:08:40 +0000
ROA not before:           Wed 12 Nov 2025 02:03:40 +0000
ROA not after:            Wed 11 Nov 2026 02:08:40 +0000
asID:                     269411
IP address blocks:        2804:642c:8000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a4:1e:5d:d3:34:d7:0f:b2:6f:89:b8:ae:27:e9:bc:ba:d3:00:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
        Validity
            Not Before: Nov 12 02:03:40 2025 GMT
            Not After : Nov 11 02:08:40 2026 GMT
        Subject: CN=201A8D81B30F233823C7DA0337E7666D92459FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:fc:27:97:4d:30:86:04:45:1f:e2:80:bb:
                    b3:8d:17:1a:78:55:de:5b:bd:4b:dd:36:d5:4c:2a:
                    7e:0e:3e:b5:0d:2f:8f:bd:d6:8c:40:5b:1b:ec:39:
                    c5:01:d6:8b:a2:b7:bb:a2:05:68:80:7f:63:ef:19:
                    f2:7a:bf:8f:1a:0a:f9:13:21:51:ba:74:c2:ac:6f:
                    cf:6f:4a:ff:a7:68:1d:55:f3:ea:12:11:64:c5:ef:
                    18:27:c1:43:87:1c:c4:5d:4c:c0:62:cd:ba:17:e0:
                    36:3d:10:ff:e2:49:4f:c0:a9:39:56:c3:27:19:bb:
                    9e:4a:0a:9b:a7:2c:15:d6:6c:d2:43:aa:5b:0f:7e:
                    d8:fa:d7:2c:ea:59:a8:d4:da:ec:b0:62:ab:6b:45:
                    81:2e:e9:f3:a7:58:2f:0c:51:2f:0f:4d:f5:46:d1:
                    1f:b2:7a:cf:74:25:f1:33:bf:71:6f:a2:6f:73:46:
                    fb:6f:08:f4:f9:21:7b:6d:b4:d6:23:50:f9:f5:23:
                    ce:29:1f:83:5a:78:09:d1:f5:18:85:d2:d0:c1:35:
                    7e:7b:8c:d5:82:d7:fd:75:ed:a5:3f:0a:79:43:d6:
                    ec:46:87:4b:25:32:28:cf:08:a8:b6:b3:37:9a:4a:
                    db:fa:69:df:01:9b:bd:82:16:22:ee:6e:33:84:cb:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1A:8D:81:B3:0F:23:38:23:C7:DA:03:37:E7:66:6D:92:45:9F:A7
            X509v3 Authority Key Identifier:
                keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ba:b0:af:85:82:82:31:4e:7b:45:0b:dd:44:c7:bf:c6:a1:ac:
         5d:14:56:86:00:be:9a:f9:13:5e:05:6c:70:31:3f:57:76:46:
         2a:d8:5c:14:f0:ea:9f:33:ed:58:76:20:dd:44:71:22:d0:44:
         e1:c0:3c:11:1c:5a:03:2d:ab:9d:77:25:ea:db:0b:f5:b0:23:
         d7:05:37:05:62:ff:0e:3f:d6:4c:53:d2:b5:40:e4:7e:8f:04:
         e3:5b:e9:62:83:66:59:0f:25:54:7f:02:c9:ea:0e:e3:e0:6e:
         8a:8e:b1:d2:f4:49:d4:1f:e3:10:b2:42:3c:b2:06:ce:8f:16:
         3c:d6:34:5f:a8:e3:11:34:cb:62:14:85:9c:2f:60:f6:40:14:
         83:15:3d:30:c2:c2:e6:fd:36:a5:95:12:0b:7e:02:2c:6f:5f:
         05:79:be:f3:57:7a:5a:9a:73:78:88:93:43:06:ac:7b:31:8a:
         9f:e0:96:7d:f8:c8:0e:dd:bb:65:97:f8:4f:d7:f3:59:2b:bc:
         1a:d4:e2:b7:8b:9a:47:ce:bc:c5:3b:14:22:84:16:b1:5a:87:
         30:d5:7c:0b:aa:3f:3e:bf:34:40:9b:18:a3:d1:17:53:67:d9:
         71:ec:d2:e9:18:d4:c9:c2:2d:14:74:ac:8d:6b:fe:47:c3:8e:
         a3:c4:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----