This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35352e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35352e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          19BuWgHf3X5bCVffHWiy3Aubimp61DIZjWowhLyG3p0=
Subject key identifier:   8B:17:10:B7:7B:50:46:6D:8E:40:07:C0:8A:F8:92:07:25:74:37:9A
Certificate issuer:       /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial:       761206A86E0CB5DC48DD7373DFD596DF2677F77B
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35352e302f32342d3234203d3e20323639343131.roa
Signing time:             Wed 12 Nov 2025 02:08:15 +0000
ROA not before:           Wed 12 Nov 2025 02:03:15 +0000
ROA not after:            Wed 11 Nov 2026 02:08:15 +0000
asID:                     269411
IP address blocks:        45.186.55.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:12:06:a8:6e:0c:b5:dc:48:dd:73:73:df:d5:96:df:26:77:f7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
        Validity
            Not Before: Nov 12 02:03:15 2025 GMT
            Not After : Nov 11 02:08:15 2026 GMT
        Subject: CN=8B1710B77B50466D8E4007C08AF892072574379A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:35:e8:c6:a2:11:4f:f8:0f:ff:5e:b4:c5:
                    4a:fc:a9:f9:92:3c:cd:88:4d:e7:a5:c3:fa:f3:bb:
                    71:2b:1a:bb:e6:aa:64:91:25:ff:45:c1:74:80:c8:
                    4f:7a:09:96:d2:78:77:9d:be:b9:5a:b2:32:c6:28:
                    f1:ac:f2:9f:5b:2e:6f:ea:a5:9b:39:5f:00:e1:8b:
                    7a:e6:ba:1f:e3:32:b8:fa:08:86:89:8d:ec:af:cd:
                    32:09:85:a6:35:d9:9b:45:9e:de:bf:60:42:eb:5f:
                    46:e1:8d:0e:55:72:40:a0:19:8f:32:33:a2:39:03:
                    93:03:e3:bb:d6:60:69:fe:53:a6:43:15:55:54:8c:
                    36:26:72:f6:bf:fe:77:9c:a7:e2:bb:45:d1:b9:ba:
                    b6:be:45:12:0c:9e:87:b8:f4:54:98:43:04:04:f6:
                    f1:02:a9:f5:84:8d:a3:7c:e8:c2:cb:cc:52:e3:ab:
                    3a:bd:a6:a7:d1:6a:72:83:a4:92:b2:01:b1:ed:0d:
                    48:17:84:8c:fa:b8:3d:e8:e8:fd:df:29:4b:59:2f:
                    d5:e4:7c:5c:b5:3b:df:c3:01:6c:6b:b3:aa:9b:5a:
                    6c:d8:4d:ab:27:94:ab:dc:1a:14:35:7e:b1:bb:e6:
                    42:fe:f5:af:02:fb:f3:a2:d2:34:51:2c:67:67:a4:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:10:B7:7B:50:46:6D:8E:40:07:C0:8A:F8:92:07:25:74:37:9A
            X509v3 Authority Key Identifier:
                keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35352e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:58:8c:85:bd:01:ad:e6:16:34:0e:0c:e9:92:71:21:70:1e:
         c5:02:a7:1d:b5:97:dc:80:86:da:13:bd:b2:34:e0:81:2f:15:
         2e:d0:9d:f0:12:1a:1d:0e:77:38:5a:50:54:fa:a9:f2:fd:3c:
         97:6f:b3:0b:bf:95:06:4b:47:5f:86:a1:17:01:34:c3:4c:9a:
         f8:81:d4:fd:39:64:b2:44:0d:25:56:86:67:74:be:22:c1:e9:
         72:c5:af:0a:c1:ff:32:e7:f9:e2:54:ca:89:05:c0:38:7c:1e:
         a8:32:4b:de:1c:dc:52:f1:5d:e9:76:ca:39:b0:d1:65:dc:06:
         c5:9e:37:92:d9:89:74:8e:38:cc:40:77:0e:f7:42:0b:87:4d:
         e7:8a:94:f2:fb:bf:9b:a3:78:e1:bc:20:a9:1f:d9:81:a9:65:
         88:73:1d:88:dd:34:ec:e8:67:e9:09:07:c3:63:6c:2d:ac:53:
         27:2c:fd:09:cf:d6:4f:9d:77:24:29:fc:15:47:b6:72:fe:35:
         c5:1f:8f:77:70:18:16:37:a1:7d:bf:2c:ed:56:2a:80:85:09:
         3e:f9:2b:90:7f:be:73:cd:6e:d7:fa:3a:7f:b7:1c:cf:13:db:
         42:f3:0c:2d:c4:b5:1c:a3:9b:9b:7f:02:e9:4f:84:3c:cd:34:
         cd:32:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----