This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35332e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          59z4udx73G2MHr9z7FtfYcWtt856hB+VSeEvP7FktmE=
Subject key identifier:   44:43:64:54:8D:CC:B9:12:E7:3D:18:BD:E4:8A:DB:C0:AF:32:4A:57
Certificate issuer:       /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial:       1EA9B55D8ABDA8359EB68E091EB477E741261A8F
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
Signing time:             Wed 12 Nov 2025 02:08:23 +0000
ROA not before:           Wed 12 Nov 2025 02:03:23 +0000
ROA not after:            Wed 11 Nov 2026 02:08:23 +0000
asID:                     269411
IP address blocks:        45.186.53.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a9:b5:5d:8a:bd:a8:35:9e:b6:8e:09:1e:b4:77:e7:41:26:1a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
        Validity
            Not Before: Nov 12 02:03:23 2025 GMT
            Not After : Nov 11 02:08:23 2026 GMT
        Subject: CN=444364548DCCB912E73D18BDE48ADBC0AF324A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:da:ed:40:e5:99:11:30:70:bb:4d:95:1f:
                    be:29:c3:4d:6c:7f:e1:29:6f:d0:6f:0c:3f:e1:0f:
                    19:e5:aa:fe:a6:56:bc:2e:d9:72:d2:de:11:57:ab:
                    3c:0f:52:95:32:6a:38:01:b2:d9:89:d3:29:3b:92:
                    d4:9f:48:ac:53:dc:57:0a:a1:5d:bf:11:d2:17:04:
                    11:7a:a1:b2:19:c0:cc:fc:b6:23:6b:99:03:15:3c:
                    e1:06:8d:24:e5:5f:cd:d0:8b:54:77:41:bf:33:65:
                    d7:68:d7:b4:c3:2c:dd:cc:14:f4:f0:4d:d7:ad:cc:
                    9a:b6:1d:b4:d1:50:cb:12:b2:b8:5f:a9:5c:34:23:
                    34:4a:21:91:93:5f:5a:34:f0:dc:06:87:e3:1a:bc:
                    be:b5:36:f6:12:2f:f9:b7:76:17:5b:26:23:34:cb:
                    c1:49:f2:85:45:f6:7f:28:5a:05:aa:8d:23:38:fd:
                    c7:f2:77:6e:f2:4c:21:95:04:8e:63:c2:f4:40:76:
                    f4:81:ff:d4:24:37:90:ae:0d:56:b5:1a:75:ca:75:
                    d5:fb:f8:e6:aa:f7:be:75:13:0f:27:1d:c8:e5:ef:
                    5c:cb:4f:8e:a6:d9:f5:07:d8:f7:2a:da:e4:af:b0:
                    19:5f:c7:66:39:d4:fa:62:2f:47:2c:7a:9e:53:b3:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:43:64:54:8D:CC:B9:12:E7:3D:18:BD:E4:8A:DB:C0:AF:32:4A:57
            X509v3 Authority Key Identifier:
                keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:d5:82:30:98:61:8b:18:06:a1:8d:c1:d8:d7:3e:48:19:
         63:8b:09:57:85:49:15:8f:cb:c7:b2:5d:d2:36:8a:4f:71:bc:
         ad:90:c3:ae:ac:75:a7:30:cc:ba:f9:00:b0:58:5c:98:b2:ce:
         e3:96:84:de:43:e1:6e:32:6a:2e:ff:e0:0f:94:d3:2d:e5:69:
         a7:aa:27:eb:32:88:2f:37:0b:d9:5c:a1:cb:04:e4:98:20:f3:
         98:ac:57:be:1d:db:a4:cb:33:8a:6d:b5:b0:3a:87:cd:94:4e:
         c7:e4:f7:78:d9:48:a6:2a:99:81:c3:47:cd:99:1e:10:fe:3b:
         39:f4:b4:a0:3d:df:3e:a9:b0:aa:4a:50:82:30:fe:0f:d6:8d:
         65:2d:0e:f6:92:f4:60:14:5b:dd:c4:4c:7e:0b:ee:71:ef:a7:
         d1:f1:9b:c5:f8:35:e2:13:cd:7b:cf:35:06:44:39:1b:02:c0:
         fa:fc:ea:8a:a1:ac:6c:a3:f5:c5:51:a6:df:56:fb:83:08:9d:
         5f:f8:46:90:09:28:95:aa:70:d9:17:4c:1c:c2:88:13:f7:82:
         17:7b:62:a4:e3:53:a1:66:1c:ba:43:e6:33:75:8b:b2:87:51:
         fc:57:1b:65:70:6e:76:43:ba:4f:ac:4d:83:87:ea:83:a8:c1:
         10:00:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----