This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          FF+P7wbVIU51xQrN8Wix1ypsmPJTtdHT+XukT3jUANE=
Subject key identifier:   3B:54:3D:33:17:C9:97:30:70:1E:CC:71:A2:CF:1C:12:C8:98:DA:2C
Certificate issuer:       /CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Certificate serial:       7204DA9D1AEF9F9037F06B38B225FEABE9CD7DBE
Authority key identifier: 02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 10 Jan 2026 03:58:58 +0000
ROA not before:           Sat 10 Jan 2026 03:53:58 +0000
ROA not after:            Sat 09 Jan 2027 03:58:58 +0000
asID:                     267961
IP address blocks:        2804:55dc:c000::/35 maxlen: 35
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:04:da:9d:1a:ef:9f:90:37:f0:6b:38:b2:25:fe:ab:e9:cd:7d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
        Validity
            Not Before: Jan 10 03:53:58 2026 GMT
            Not After : Jan  9 03:58:58 2027 GMT
        Subject: CN=3B543D3317C99730701ECC71A2CF1C12C898DA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:85:b1:c9:9a:d7:34:4e:2c:3c:bd:21:bf:
                    6e:43:d7:55:bd:c2:dc:ea:7e:b3:6a:26:a2:f7:20:
                    dd:08:84:fe:f4:a5:bb:f6:0d:de:d1:fc:1f:62:78:
                    d2:97:c3:c6:56:aa:3f:b6:6c:f7:da:7d:30:d8:fa:
                    6a:a7:3f:fe:d1:13:bc:32:54:75:76:de:25:eb:7a:
                    50:09:63:d0:1c:95:7d:09:ce:ed:c2:ec:fd:a6:fd:
                    6b:4a:b6:d3:27:f1:95:89:1f:62:6e:dd:db:dc:9a:
                    7a:2e:77:d8:5d:d6:31:33:d0:e5:54:9d:6f:52:48:
                    56:47:0d:6d:32:2d:a2:4a:6a:96:8a:f2:93:66:dc:
                    9c:5e:76:b1:4d:c4:54:f3:e3:ec:52:5f:3a:21:2d:
                    0d:86:d0:e8:a7:df:7b:02:7f:95:20:89:3b:ff:f9:
                    b0:93:1f:f6:78:4b:af:7f:3c:2e:d0:72:0e:4f:1f:
                    a5:69:0d:93:2a:8d:d2:b6:22:70:2b:36:39:24:e0:
                    b8:38:cf:9e:c9:40:43:ab:92:81:87:4d:f8:0a:c5:
                    9d:43:2b:60:8b:89:67:76:9a:60:4a:09:db:9f:d7:
                    7d:5d:ac:8a:0f:1a:63:03:95:a0:08:48:a5:9d:d1:
                    34:4b:14:35:c0:b1:d3:ef:4c:b0:10:3d:82:f8:f2:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:54:3D:33:17:C9:97:30:70:1E:CC:71:A2:CF:1C:12:C8:98:DA:2C
            X509v3 Authority Key Identifier:
                keyid:02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         19:38:04:8d:9c:d6:4e:65:b6:88:d2:f8:b2:a2:e8:b6:93:2a:
         83:23:1e:06:ac:96:70:0b:e3:8e:f3:b1:15:00:a2:1b:66:d2:
         90:08:4e:bf:68:f9:79:5f:30:0a:53:d4:e6:6b:27:6c:af:60:
         35:25:9c:09:0b:e4:14:99:44:25:3e:8b:b9:62:dd:a2:20:cc:
         27:ff:79:44:52:f5:f5:9c:3e:ae:d2:6a:5c:09:df:e9:90:f4:
         c1:34:0e:3d:5f:a4:0d:cf:c8:0a:7a:b9:20:44:d5:a6:04:23:
         cc:fb:a0:e5:0f:82:f2:ab:f1:77:7e:ae:88:ba:34:90:ff:ec:
         fb:25:f9:b3:57:c8:6b:ef:d5:4a:11:64:fe:d0:a8:f1:08:b0:
         f5:fc:a1:20:17:39:53:30:48:56:3d:ad:bb:69:89:82:e1:7b:
         9f:fe:58:31:19:d2:64:8c:02:eb:ba:7b:0d:68:6d:5f:d4:4a:
         08:61:e0:39:d8:b3:18:d8:7d:3a:6e:46:d2:d3:90:13:41:29:
         2f:09:fd:18:bc:fe:6a:a5:fc:b7:5b:3b:37:e0:6d:ad:cf:8e:
         85:11:96:60:2a:ec:55:c2:c0:83:95:db:7a:b7:a6:87:57:8d:
         e9:44:44:f2:ca:73:11:28:eb:1f:4e:6e:3e:30:95:5e:09:be:
         fb:d7:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----