This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          oCFIC+JqcTJE2EErs7anwNBtpzcjhoOyP6vBNf1t4Wc=
Subject key identifier:   CB:1D:D4:E6:F7:1D:9D:22:CD:72:88:AC:18:39:6D:5A:CD:C7:95:84
Certificate issuer:       /CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Certificate serial:       07A5BB40ED10B047F826A639483AFAA11B096598
Authority key identifier: 02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 10 Jan 2026 03:58:53 +0000
ROA not before:           Sat 10 Jan 2026 03:53:53 +0000
ROA not after:            Sat 09 Jan 2027 03:58:53 +0000
asID:                     267961
IP address blocks:        2804:55dc:2000::/35 maxlen: 35
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a5:bb:40:ed:10:b0:47:f8:26:a6:39:48:3a:fa:a1:1b:09:65:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
        Validity
            Not Before: Jan 10 03:53:53 2026 GMT
            Not After : Jan  9 03:58:53 2027 GMT
        Subject: CN=CB1DD4E6F71D9D22CD7288AC18396D5ACDC79584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:fc:17:62:67:96:dd:55:bb:c2:3b:04:ee:
                    b0:11:77:7e:c4:ec:b8:4d:19:33:f5:42:88:9f:58:
                    7e:cf:b1:d7:9f:57:1e:e1:5f:63:4c:0b:c7:e7:d0:
                    7b:4e:0c:40:ec:3e:a9:a4:bb:43:1a:2d:b9:f6:d4:
                    5f:c2:9c:57:b3:e6:81:4f:16:8b:e6:30:67:bb:62:
                    82:4c:3e:62:3c:e8:27:f2:23:9b:28:2d:1f:37:10:
                    9e:55:4e:78:5f:b0:50:0e:ed:85:e2:1a:79:b7:82:
                    e0:fa:d9:10:d8:a4:1b:1a:a6:91:ce:b2:c3:b4:01:
                    17:22:b6:a2:2a:79:cc:6d:0e:ea:90:7a:b3:a1:40:
                    8e:6b:44:a7:a1:45:a7:69:b0:46:1d:2f:9a:0b:0c:
                    04:8c:44:89:9b:2f:19:56:f1:6b:50:7a:c3:c6:35:
                    e9:f7:71:fd:ab:00:86:47:6e:25:86:a3:bf:f4:6d:
                    3b:0b:0c:82:3e:8a:37:02:b8:ff:96:17:86:c2:e0:
                    bd:c6:c3:7b:2e:4f:89:bf:2e:34:ff:50:ed:b6:96:
                    ab:d7:7b:a5:a4:d3:8e:81:06:68:82:97:d1:07:55:
                    fe:a5:09:e0:90:b3:36:2a:b7:0e:70:97:fa:06:09:
                    94:58:f6:22:73:c8:7d:08:18:e5:c3:ba:ec:d3:15:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:D4:E6:F7:1D:9D:22:CD:72:88:AC:18:39:6D:5A:CD:C7:95:84
            X509v3 Authority Key Identifier:
                keyid:02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         09:87:73:9f:75:70:af:70:71:de:33:05:d5:da:37:18:33:07:
         bc:9a:b1:33:38:f3:a5:bb:a5:4b:e4:b0:7c:94:85:76:81:f7:
         7a:c2:88:84:ec:06:ee:2f:b6:66:50:01:96:4c:c3:f5:72:b3:
         60:50:22:41:8e:15:1c:f2:78:80:63:8f:09:03:b8:4e:d5:56:
         b4:44:45:ee:8e:ec:d1:ea:68:34:c7:7a:8d:8e:95:69:53:a0:
         8c:c9:67:39:68:9c:4c:0a:2e:04:d1:cf:68:0f:29:37:e2:b9:
         f7:a2:76:e8:c1:96:2a:8b:29:c7:31:d6:9e:79:d0:86:93:86:
         e3:d2:71:48:66:9b:8c:c9:b1:b5:83:2f:8d:5b:35:9a:60:c6:
         c3:f3:6d:57:f6:ac:a4:7b:7b:24:58:94:ed:81:6b:2d:4c:88:
         8c:4f:8f:df:8f:7d:bb:3a:4c:7f:d4:a2:23:4f:54:2f:d3:23:
         9a:01:1e:69:bd:65:33:51:a0:e1:e2:d7:69:c6:e3:fb:22:25:
         e9:a3:3d:21:71:12:94:61:28:d8:d4:4e:64:cb:d5:c1:ec:6c:
         74:66:85:79:13:f3:57:4f:70:19:fe:ae:87:8c:2c:67:f1:d8:
         23:f5:f2:aa:61:43:c6:18:92:e2:fa:1a:b1:69:3c:82:fd:f0:
         73:44:5c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----