This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          bhdistgtCF0HuWdDuvEOy6y6RHJdp4GVzDV9cV8lDI8=
Subject key identifier:   AC:A0:5E:50:00:9C:0F:82:C1:6B:E4:86:72:CA:8F:2B:EF:2E:72:DC
Certificate issuer:       /CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Certificate serial:       44868B6CD8468999D9F3D7306293C0438BD961F6
Authority key identifier: 02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Sat 10 Jan 2026 03:58:54 +0000
ROA not before:           Sat 10 Jan 2026 03:53:54 +0000
ROA not after:            Sat 09 Jan 2027 03:58:54 +0000
asID:                     267961
IP address blocks:        2804:55dc:e000::/35 maxlen: 35
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:86:8b:6c:d8:46:89:99:d9:f3:d7:30:62:93:c0:43:8b:d9:61:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
        Validity
            Not Before: Jan 10 03:53:54 2026 GMT
            Not After : Jan  9 03:58:54 2027 GMT
        Subject: CN=ACA05E50009C0F82C16BE48672CA8F2BEF2E72DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0e:1e:64:05:f6:0a:23:dc:cc:1a:cf:9d:3c:
                    8e:a5:21:f3:01:df:37:b8:38:74:e6:5e:fe:78:2c:
                    e7:ff:d5:9e:47:7c:87:7f:4a:2e:df:9a:70:23:f8:
                    74:04:52:c4:69:a6:e1:f6:cb:42:cb:c6:d6:44:25:
                    9b:f4:3d:7d:4d:1c:1a:7b:b6:c8:59:f1:f1:a4:c3:
                    0f:b7:19:ec:72:ee:27:91:3c:a1:e2:d2:08:01:22:
                    12:fc:82:d4:95:7d:cc:f3:65:a2:62:b2:0b:0c:88:
                    6a:7c:a6:08:77:98:87:e5:60:bf:8b:10:b1:ed:28:
                    cc:cf:5c:ff:eb:fe:4f:14:b6:94:02:66:41:43:b9:
                    a8:53:ae:e3:bf:6e:85:c2:c7:f5:5c:25:f9:ab:b1:
                    79:29:6c:3e:71:c6:eb:ff:24:2a:e4:71:fd:f9:0e:
                    71:db:c3:5f:0a:3b:87:6e:e7:00:76:6a:19:16:d1:
                    3e:f9:f1:43:0d:5e:43:91:35:c5:ac:78:7e:6f:f6:
                    67:69:ad:da:80:f2:97:05:44:c9:b6:95:69:88:e3:
                    e6:0e:62:21:89:9e:7f:5d:b4:d8:d0:ee:6d:96:6e:
                    0a:f0:eb:7f:82:35:8c:79:e3:3b:cb:4f:01:61:b1:
                    30:6e:ae:4c:97:b5:4c:87:e0:07:7a:63:e0:93:70:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:5E:50:00:9C:0F:82:C1:6B:E4:86:72:CA:8F:2B:EF:2E:72:DC
            X509v3 Authority Key Identifier:
                keyid:02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:dd:ce:df:9e:c3:67:c6:07:6d:42:6b:d1:ef:d2:30:8a:
         f9:42:0b:2d:45:c0:05:e1:38:f4:ae:2d:5c:67:2d:ac:45:d1:
         75:29:9a:48:a1:8c:3a:34:31:ed:5d:73:76:28:31:de:01:dc:
         16:8c:32:6f:00:28:66:ae:34:17:b5:3f:b8:3f:4c:6f:67:9f:
         6a:7f:78:65:2a:82:8a:db:c3:6d:04:b8:a3:1a:9e:23:35:95:
         05:aa:be:02:71:1f:49:bb:24:c8:a3:3e:45:3c:7c:75:72:15:
         03:2a:5e:f6:05:fc:2f:a5:a6:08:9d:41:10:77:95:c0:9f:86:
         9b:dc:8f:cc:fe:1b:60:d9:23:b1:02:0e:c4:cd:40:3e:76:07:
         1b:c8:ac:3f:c1:4f:51:04:fe:b4:88:42:ad:9c:f8:f9:3e:26:
         48:85:4a:dc:c1:d9:66:f0:eb:c7:23:1b:5e:ff:6b:6e:fb:c1:
         03:09:17:e0:4d:07:9c:e8:74:f6:37:3e:ad:1e:5f:e4:28:18:
         b9:f7:33:a9:25:15:f2:40:15:4d:1a:64:0d:98:b2:60:b6:cd:
         26:fb:f8:81:16:2b:0c:21:36:33:3b:b9:42:e9:46:4a:70:dc:
         c6:ab:41:0b:46:42:8b:bc:b3:85:1d:30:92:3f:cb:bc:7e:0a:
         4d:b7:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----