This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a633030303a3a2f33342d3334203d3e20323639343131.roa
File:                     323830343a363432633a633030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier:          NE8e5xLN/Xwlv+wW6uR0ZrKg/prMzj5ZICdE0pK8oGg=
Subject key identifier:   B3:26:9B:A4:0F:11:3C:B6:B4:D3:C5:07:F7:80:24:FF:91:06:17:55
Certificate issuer:       /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial:       4A4BA895736C2C23ADAA9DBC279A80312004B84C
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a633030303a3a2f33342d3334203d3e20323639343131.roa
Signing time:             Wed 12 Nov 2025 02:08:37 +0000
ROA not before:           Wed 12 Nov 2025 02:03:37 +0000
ROA not after:            Wed 11 Nov 2026 02:08:37 +0000
asID:                     269411
IP address blocks:        2804:642c:c000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4b:a8:95:73:6c:2c:23:ad:aa:9d:bc:27:9a:80:31:20:04:b8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
        Validity
            Not Before: Nov 12 02:03:37 2025 GMT
            Not After : Nov 11 02:08:37 2026 GMT
        Subject: CN=B3269BA40F113CB6B4D3C507F78024FF91061755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:0e:88:47:a6:2b:fc:a0:a8:a3:4c:e1:a6:
                    c4:68:e1:76:90:50:e1:2e:02:fb:fa:e0:70:0b:e6:
                    5d:60:70:cc:4d:fd:c6:54:1d:06:48:c2:d2:f9:f8:
                    82:e0:12:13:f6:e7:41:9c:41:bb:fd:66:c8:e8:9f:
                    09:e4:73:25:cd:7e:48:4e:6b:6e:12:ba:6d:4d:33:
                    dd:db:4b:98:69:c8:19:60:5b:29:d8:d5:04:29:c2:
                    5d:d4:84:38:a9:d7:b6:6f:5c:68:d5:84:c2:2f:a8:
                    e0:a8:38:b2:f2:c9:4b:ea:1e:c7:da:4a:37:de:5f:
                    7a:cb:3f:a3:9b:48:74:51:60:dc:95:c3:60:c2:e7:
                    7a:eb:8d:84:12:e8:b4:2f:0d:21:26:65:f1:a7:d1:
                    d3:00:de:82:02:4c:56:5e:95:fb:09:ed:06:4c:ea:
                    41:a2:6e:db:1a:a5:08:62:c8:9e:30:bf:06:ae:20:
                    27:6b:40:14:aa:d8:f7:45:30:20:f0:55:b4:77:08:
                    c7:99:da:f9:40:20:9a:ce:fb:f5:30:9e:c0:e9:25:
                    a3:6c:84:fe:24:de:52:f1:a7:d4:d3:3c:72:c8:0d:
                    f3:71:eb:25:1c:06:26:63:08:d1:80:1c:f1:1a:9f:
                    b1:97:ce:4e:00:96:a0:bf:71:84:3d:df:3e:21:aa:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:26:9B:A4:0F:11:3C:B6:B4:D3:C5:07:F7:80:24:FF:91:06:17:55
            X509v3 Authority Key Identifier:
                keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a633030303a3a2f33342d3334203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:be:0b:28:a9:95:ff:65:73:53:a9:11:38:94:15:2d:12:
         58:ba:b5:cb:39:05:6c:f1:08:a1:dc:5b:20:04:fa:8b:b1:63:
         2d:cf:a8:cd:9a:d7:fd:ba:2e:da:ab:4e:e2:d7:40:d6:ea:92:
         37:9f:3f:b2:48:66:69:70:bf:d5:b2:c8:05:99:db:45:62:2d:
         e3:f9:18:75:99:9a:02:5d:d8:88:f8:b4:d7:79:37:5f:1d:17:
         3c:c8:b9:0f:01:e4:47:4d:5e:10:29:df:54:f0:44:9a:d2:60:
         7f:bd:11:70:dc:c8:3f:a2:62:d3:7e:63:df:0d:82:61:f9:74:
         f8:e6:39:41:36:de:fc:9a:bf:27:5e:38:e1:d6:a7:88:fe:68:
         c7:92:17:c2:04:f2:17:2e:64:10:21:2e:87:81:39:6d:6b:f6:
         f8:e2:d0:c9:36:45:50:4f:fb:e4:8a:e8:7e:69:e8:5e:3a:7b:
         24:e2:8a:cc:d5:bb:c9:a4:e5:97:cb:4e:99:f0:f4:9a:67:03:
         e7:13:32:af:74:25:0b:c3:35:4a:ed:a1:4d:d6:7f:08:b4:d0:
         68:bd:d1:4a:86:a2:e9:17:15:72:40:55:bb:0c:d4:d8:6b:59:
         c5:b5:a3:b3:53:26:6c:bd:fd:b4:c1:ec:3d:0d:2d:7e:35:2d:
         2a:c3:91:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSkuolXNsLCOtqp28J5qAMSAEuEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzMTBDQ0I1MkFEODQ1RkI4MEMxNjQ2QTQ1QUY2Q0I0
MjAzRTIyRTAeFw0yNTExMTIwMjAzMzdaFw0yNjExMTEwMjA4MzdaMDMxMTAvBgNV
BAMTKEIzMjY5QkE0MEYxMTNDQjZCNEQzQzUwN0Y3ODAyNEZGOTEwNjE3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQww6IR6Yr/KCoo0zhpsRo4XaQ
UOEuAvv64HAL5l1gcMxN/cZUHQZIwtL5+ILgEhP250GcQbv9ZsjonwnkcyXNfkhO
a24Sum1NM93bS5hpyBlgWynY1QQpwl3UhDip17ZvXGjVhMIvqOCoOLLyyUvqHsfa
SjfeX3rLP6ObSHRRYNyVw2DC53rrjYQS6LQvDSEmZfGn0dMA3oICTFZelfsJ7QZM
6kGibtsapQhiyJ4wvwauICdrQBSq2PdFMCDwVbR3CMeZ2vlAIJrO+/UwnsDpJaNs
hP4k3lLxp9TTPHLIDfNx6yUcBiZjCNGAHPEan7GXzk4AlqC/cYQ93z4hqpTnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsyabpA8RPLa008UH94Ak/5EGF1UwHwYDVR0j
BBgwFoAU3DEMy1KthF+4DBZGpFr2y0ID4i4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMi9EQzMxMENDQjUyQUQ4NDVGQjgwQzE2NDZBNDVBRjZDQjQyMDNFMjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzEwQ0NCNTJBRDg0NUZC
ODBDMTY0NkE0NUFGNkNCNDIwM0UyMkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzIv
MzIzODMwMzQzYTM2MzQzMjYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZCzAMA0GCSqGSIb3DQEBCwUA
A4IBAQBL7L4LKKmV/2VzU6kROJQVLRJYurXLOQVs8Qih3FsgBPqLsWMtz6jNmtf9
ui7aq07i10DW6pI3nz+ySGZpcL/VssgFmdtFYi3j+Rh1mZoCXdiI+LTXeTdfHRc8
yLkPAeRHTV4QKd9U8ESa0mB/vRFw3Mg/omLTfmPfDYJh+XT45jlBNt78mr8nXjjh
1qeI/mjHkhfCBPIXLmQQIS6HgTlta/b44tDJNkVQT/vkiuh+aeheOnsk4orM1bvJ
pOWXy06Z8PSaZwPnEzKvdCULwzVK7aFN1n8ItNBovdFKhqLpFxVyQFW7DNTYa1nF
taOzUyZsvf20wew9DS1+NS0qw5Gd
-----END CERTIFICATE-----