This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          GzGuc6i/InPFGyAQym0BcvGaiGECqXutFaRANyiqFkQ=
Subject key identifier:   DB:7E:61:C4:18:54:C6:67:F8:40:6A:A7:A0:0F:16:1F:08:50:21:2D
Certificate issuer:       /CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Certificate serial:       73652B031DEC5C95E5783E20A987A0C770839A3C
Authority key identifier: 02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 10 Jan 2026 03:58:57 +0000
ROA not before:           Sat 10 Jan 2026 03:53:57 +0000
ROA not after:            Sat 09 Jan 2027 03:58:57 +0000
asID:                     267961
IP address blocks:        2804:55dc:8000::/35 maxlen: 35
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:65:2b:03:1d:ec:5c:95:e5:78:3e:20:a9:87:a0:c7:70:83:9a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
        Validity
            Not Before: Jan 10 03:53:57 2026 GMT
            Not After : Jan  9 03:58:57 2027 GMT
        Subject: CN=DB7E61C41854C667F8406AA7A00F161F0850212D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cc:2b:55:96:91:1a:c0:42:9c:ec:b1:df:5a:
                    a0:17:7c:eb:54:a4:ec:11:0d:34:cd:68:9e:79:5f:
                    10:ec:13:65:e8:ec:02:33:85:d0:f5:bd:7b:00:8a:
                    8c:3c:d2:aa:f1:2d:ac:af:a2:46:de:f4:94:82:db:
                    d5:ec:75:64:62:37:78:0e:3e:f4:af:4c:36:86:e0:
                    b9:b1:61:69:29:db:5b:94:d6:71:a2:ce:f0:ca:5e:
                    25:a7:c2:9a:3f:3a:97:18:41:d0:a2:77:b0:e1:0f:
                    0d:4a:8c:5f:3e:3f:9a:c0:b5:ad:b0:48:ae:13:ae:
                    6e:65:03:4c:91:bc:40:a1:09:00:24:25:5e:35:88:
                    7f:b1:18:61:8c:b2:00:54:e8:1e:40:35:f5:4d:77:
                    fb:43:07:b7:5b:64:35:33:e1:83:7e:9e:e2:14:42:
                    58:c9:18:ef:9d:94:75:3d:5c:b2:f5:d0:68:e2:80:
                    2f:14:a1:d1:5b:e4:c0:db:36:cb:99:a1:d9:cf:f2:
                    42:70:b5:cc:67:ab:18:2f:fd:86:b2:5a:37:ba:f3:
                    6a:92:76:27:9a:b6:12:45:1e:03:64:3e:07:0d:20:
                    ca:3f:57:2e:8c:27:bc:3c:da:4e:43:71:43:48:4e:
                    b1:50:ed:32:e2:c2:98:c0:a6:1d:6f:56:b8:f9:eb:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:61:C4:18:54:C6:67:F8:40:6A:A7:A0:0F:16:1F:08:50:21:2D
            X509v3 Authority Key Identifier:
                keyid:02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:f8:a0:91:d7:4f:19:7c:43:45:3e:02:a0:ae:68:e7:52:
         93:d4:10:7a:06:5c:3b:a5:71:2b:89:b7:68:dd:5e:5b:ba:15:
         4e:7f:86:b0:87:40:69:4f:48:63:32:e3:e8:1a:be:68:e4:79:
         e6:6c:83:b5:42:ba:8a:3a:0b:59:c0:a1:9a:19:10:91:bc:f9:
         d3:57:45:8a:9b:2e:14:29:dc:62:a7:d7:aa:b2:0b:23:f8:bd:
         27:68:5b:c3:b9:6c:94:25:9a:bb:9f:ce:3f:ad:99:0d:0c:1f:
         6d:f3:5f:d8:48:27:72:9b:29:d6:07:5d:c1:35:72:0d:e7:eb:
         05:ea:14:8d:97:5b:7f:db:fa:28:17:f6:a3:64:ea:d7:46:48:
         d8:d9:f6:5f:ff:58:6d:d7:a7:ed:e1:1d:00:1e:a7:fd:70:a7:
         02:0b:e0:39:19:1a:f5:7d:10:a0:91:53:1d:47:54:30:70:aa:
         32:44:70:9d:42:29:f6:2a:68:0d:9f:ad:4d:f8:59:08:aa:82:
         49:69:26:10:b4:d5:21:d8:4e:d4:3f:39:ad:eb:45:06:65:1b:
         a7:45:0a:f6:68:17:11:f1:cb:b7:2e:42:53:49:39:27:c9:b6:
         c8:f5:bc:67:3b:38:f1:2e:34:72:6b:e1:1c:78:18:04:de:3f:
         80:1f:be:e3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUc2UrAx3sXJXleD4gqYegx3CDmjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIzOEMyOUYxQTM5MzNFNTkxRjYwQzQyQjEyOUVDRkQ4
RDBFRjRENDAeFw0yNjAxMTAwMzUzNTdaFw0yNzAxMDkwMzU4NTdaMDMxMTAvBgNV
BAMTKERCN0U2MUM0MTg1NEM2NjdGODQwNkFBN0EwMEYxNjFGMDg1MDIxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczCtVlpEawEKc7LHfWqAXfOtU
pOwRDTTNaJ55XxDsE2Xo7AIzhdD1vXsAiow80qrxLayvokbe9JSC29XsdWRiN3gO
PvSvTDaG4LmxYWkp21uU1nGizvDKXiWnwpo/OpcYQdCid7DhDw1KjF8+P5rAta2w
SK4Trm5lA0yRvEChCQAkJV41iH+xGGGMsgBU6B5ANfVNd/tDB7dbZDUz4YN+nuIU
QljJGO+dlHU9XLL10GjigC8UodFb5MDbNsuZodnP8kJwtcxnqxgv/YayWje682qS
dieathJFHgNkPgcNIMo/Vy6MJ7w82k5DcUNITrFQ7TLiwpjAph1vVrj56wOLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU235hxBhUxmf4QGqnoA8WHwhQIS0wHwYDVR0j
BBgwFoAUAjjCnxo5M+WR9gxCsSns/Y0O9NQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6
aFYvMC8wMjM4QzI5RjFBMzkzM0U1OTFGNjBDNDJCMTI5RUNGRDhEMEVGNEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyMzhDMjlGMUEzOTMzRTU5
MUY2MEM0MkIxMjlFQ0ZEOEQwRUY0RDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv
MzIzODMwMzQzYTM1MzU2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEVdyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBJqPigkddPGXxDRT4CoK5o51KT1BB6Blw7pXEribdo3V5buhVOf4awh0Bp
T0hjMuPoGr5o5HnmbIO1QrqKOgtZwKGaGRCRvPnTV0WKmy4UKdxip9eqsgsj+L0n
aFvDuWyUJZq7n84/rZkNDB9t81/YSCdymynWB13BNXIN5+sF6hSNl1t/2/ooF/aj
ZOrXRkjY2fZf/1ht16ft4R0AHqf9cKcCC+A5GRr1fRCgkVMdR1QwcKoyRHCdQin2
KmgNn61N+FkIqoJJaSYQtNUh2E7UPzmt60UGZRunRQr2aBcR8cu3LkJTSTknybbI
9bxnOzjxLjRya+EceBgE3j+AH77j
-----END CERTIFICATE-----