This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          UzFYV+8EZbV+yXnePLQEa7LP6zkEx7ve2F1Zr3fhxiQ=
Subject key identifier:   3F:55:7F:D0:7A:81:2C:3D:9D:37:3B:8E:78:9F:40:C2:B0:84:E2:CD
Certificate issuer:       /CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Certificate serial:       45A28BFD3213224BB2C4557AE31527AE35056187
Authority key identifier: 02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa
Signing time:             Sat 10 Jan 2026 03:58:56 +0000
ROA not before:           Sat 10 Jan 2026 03:53:56 +0000
ROA not after:            Sat 09 Jan 2027 03:58:56 +0000
asID:                     267961
IP address blocks:        45.165.161.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a2:8b:fd:32:13:22:4b:b2:c4:55:7a:e3:15:27:ae:35:05:61:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
        Validity
            Not Before: Jan 10 03:53:56 2026 GMT
            Not After : Jan  9 03:58:56 2027 GMT
        Subject: CN=3F557FD07A812C3D9D373B8E789F40C2B084E2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:27:2e:4f:2a:2f:0c:de:a5:4b:3d:94:b1:
                    d2:85:13:70:11:c6:12:9f:4a:6a:38:71:82:c8:24:
                    53:53:ce:87:05:b5:d1:8a:25:4e:29:dc:a8:87:2f:
                    d5:fa:f5:4a:c1:2c:c3:82:b4:5a:de:90:d8:31:c7:
                    72:00:8a:24:72:38:c5:b4:d8:d5:2c:37:99:d9:05:
                    88:0f:24:c7:1a:e9:f5:53:7e:fc:d8:77:e5:18:de:
                    5c:71:bc:8b:79:fd:89:e1:21:a0:b2:c0:95:d6:c6:
                    f7:bf:d2:1d:46:59:3a:d4:9d:ad:9a:4d:1d:b9:e3:
                    c1:bb:26:6c:a8:d1:09:4b:0c:27:ea:42:57:b6:90:
                    43:55:61:ff:39:35:f1:db:22:6e:e4:9b:9b:53:ee:
                    32:72:74:95:75:96:61:bd:af:6a:45:a7:3a:f8:19:
                    5e:f2:f0:cb:4f:9f:aa:1f:63:a2:e8:e1:1f:f8:02:
                    e5:4b:7e:0c:04:c5:81:5d:da:eb:f8:74:fb:bd:c8:
                    76:63:ad:6a:b5:07:5b:45:fc:41:02:0e:32:23:9d:
                    86:fc:6a:79:ac:f4:3f:aa:bf:74:f7:d9:96:6a:91:
                    53:c8:22:b8:d3:c3:99:84:ef:23:89:b8:91:c8:52:
                    00:7a:98:f9:11:77:46:28:ed:44:06:83:79:ea:49:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:55:7F:D0:7A:81:2C:3D:9D:37:3B:8E:78:9F:40:C2:B0:84:E2:CD
            X509v3 Authority Key Identifier:
                keyid:02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:4a:ca:77:c8:61:73:7a:45:e6:7d:e5:1f:32:ec:06:66:
         bc:a2:94:9a:88:dc:1d:ee:d8:17:68:ae:fe:79:d2:da:4a:bc:
         bd:fe:b1:b3:2a:03:af:9a:80:cb:02:e8:31:dc:e8:bc:24:63:
         ed:c4:07:4e:69:d8:76:c2:2e:f0:1b:db:31:cd:a6:d5:95:81:
         a6:29:4f:92:34:85:f1:14:55:26:73:37:33:74:ed:9d:53:1b:
         bf:79:d8:a5:d1:15:58:f8:6f:59:03:6f:4d:da:aa:14:17:20:
         fc:30:00:79:1c:ad:b0:56:6b:a9:88:73:90:b7:1d:22:4f:91:
         52:4c:dd:3e:76:28:51:c9:b5:82:ef:57:e1:73:71:f8:04:5e:
         8d:9a:ff:48:05:15:e7:37:e5:f1:0b:c0:62:2f:14:d3:c3:2b:
         75:f4:a4:9b:1c:7b:16:04:45:65:59:38:c0:0c:5e:38:93:70:
         3f:05:b8:67:51:30:20:4f:83:40:5f:09:1a:f4:fc:5f:73:38:
         79:cf:19:1d:8f:6c:f5:3f:19:ba:a9:25:b4:60:df:f2:e5:7f:
         d8:8f:e0:c1:7c:d4:5d:51:6d:90:1a:e5:79:ff:e7:3d:32:5c:
         42:4c:da:c8:68:97:9d:e9:ad:74:a8:44:aa:4b:3e:c4:f4:4a:
         32:75:da:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURaKL/TITIkuyxFV64xUnrjUFYYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIzOEMyOUYxQTM5MzNFNTkxRjYwQzQyQjEyOUVDRkQ4
RDBFRjRENDAeFw0yNjAxMTAwMzUzNTZaFw0yNzAxMDkwMzU4NTZaMDMxMTAvBgNV
BAMTKDNGNTU3RkQwN0E4MTJDM0Q5RDM3M0I4RTc4OUY0MEMyQjA4NEUyQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTicuTyovDN6lSz2UsdKFE3AR
xhKfSmo4cYLIJFNTzocFtdGKJU4p3KiHL9X69UrBLMOCtFrekNgxx3IAiiRyOMW0
2NUsN5nZBYgPJMca6fVTfvzYd+UY3lxxvIt5/YnhIaCywJXWxve/0h1GWTrUna2a
TR2548G7Jmyo0QlLDCfqQle2kENVYf85NfHbIm7km5tT7jJydJV1lmG9r2pFpzr4
GV7y8MtPn6ofY6Lo4R/4AuVLfgwExYFd2uv4dPu9yHZjrWq1B1tF/EECDjIjnYb8
anms9D+qv3T32ZZqkVPIIrjTw5mE7yOJuJHIUgB6mPkRd0Yo7UQGg3nqSV7zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP1V/0HqBLD2dNzuOeJ9AwrCE4s0wHwYDVR0j
BBgwFoAUAjjCnxo5M+WR9gxCsSns/Y0O9NQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6
aFYvMC8wMjM4QzI5RjFBMzkzM0U1OTFGNjBDNDJCMTI5RUNGRDhEMEVGNEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyMzhDMjlGMUEzOTMzRTU5
MUY2MEM0MkIxMjlFQ0ZEOEQwRUY0RDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv
MzQzNTJlMzEzNjM1MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpaEwDQYJKoZIhvcNAQELBQADggEBAITMSsp3
yGFzekXmfeUfMuwGZryilJqI3B3u2Bdorv550tpKvL3+sbMqA6+agMsC6DHc6Lwk
Y+3EB05p2HbCLvAb2zHNptWVgaYpT5I0hfEUVSZzNzN07Z1TG7952KXRFVj4b1kD
b03aqhQXIPwwAHkcrbBWa6mIc5C3HSJPkVJM3T52KFHJtYLvV+FzcfgEXo2a/0gF
Fec35fELwGIvFNPDK3X0pJscexYERWVZOMAMXjiTcD8FuGdRMCBPg0BfCRr0/F9z
OHnPGR2PbPU/GbqpJbRg3/Llf9iP4MF81F1RbZAa5Xn/5z0yXEJM2shol53prXSo
RKpLPsT0SjJ12oU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:33 2026 by rpki-client