This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          PEn/MSOsgf+6yI/h5F3AgQC1En03YyT1Cx/mDmCYDnI=
Subject key identifier:   5F:8D:00:F4:D2:9B:A2:22:6B:C6:9B:E5:56:03:A7:D5:F6:37:7F:1E
Certificate issuer:       /CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Certificate serial:       194E611298531C405E774DF5847B0095E8477861
Authority key identifier: 02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa
Signing time:             Sat 10 Jan 2026 03:58:50 +0000
ROA not before:           Sat 10 Jan 2026 03:53:50 +0000
ROA not after:            Sat 09 Jan 2027 03:58:50 +0000
asID:                     267961
IP address blocks:        45.165.162.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4e:61:12:98:53:1c:40:5e:77:4d:f5:84:7b:00:95:e8:47:78:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
        Validity
            Not Before: Jan 10 03:53:50 2026 GMT
            Not After : Jan  9 03:58:50 2027 GMT
        Subject: CN=5F8D00F4D29BA2226BC69BE55603A7D5F6377F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:da:ad:e7:f4:f8:42:a0:d1:28:19:00:4d:98:
                    71:3c:44:ca:32:af:32:a3:cf:39:5d:04:b1:b5:4b:
                    3b:b2:6d:25:73:f1:04:3b:e5:08:1b:12:48:18:ec:
                    a5:d7:30:98:a8:6c:db:b3:3b:f5:30:86:7c:49:c2:
                    b7:04:2a:75:a0:7b:79:5a:a0:c7:54:02:d7:6d:81:
                    ec:3c:9b:16:09:bc:18:d9:b4:72:99:cd:a4:23:ef:
                    13:b1:26:12:d0:c1:d1:ca:d4:a7:9b:95:d0:27:2a:
                    9d:24:f6:47:5c:9a:ef:ae:80:2c:59:82:bc:d3:7f:
                    8c:50:88:d9:e6:67:02:15:8f:26:73:5a:de:3a:4a:
                    ba:65:f9:42:ec:d4:d0:5d:7e:9c:12:cb:14:95:dc:
                    06:b5:a6:0d:31:f7:0a:f3:70:86:ce:56:db:af:6f:
                    fa:7e:9a:97:bd:73:f5:b5:d5:9d:ca:d5:29:6d:24:
                    6b:72:bd:f6:5d:ca:ee:90:fc:57:0d:82:11:33:43:
                    e1:28:9c:25:f9:fd:30:c7:d7:f9:34:51:e8:9b:c3:
                    e0:67:06:17:73:bd:3d:bb:b1:9f:70:29:e4:7f:16:
                    d6:0f:6e:cd:91:44:5d:6d:5c:b4:0a:2b:3b:d6:77:
                    8c:51:80:1f:c0:7f:b3:f2:38:9d:bc:ee:18:60:b4:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:00:F4:D2:9B:A2:22:6B:C6:9B:E5:56:03:A7:D5:F6:37:7F:1E
            X509v3 Authority Key Identifier:
                keyid:02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:11:93:8f:80:c5:1f:94:00:57:cd:2c:c9:99:c2:ce:b0:8b:
         37:95:e8:27:0c:f8:1d:f9:b9:c0:e2:8c:30:a4:ec:d6:a1:e7:
         cb:10:68:68:5c:69:8a:f6:ec:40:cd:2d:7e:3e:88:3e:4a:30:
         92:6c:51:b7:99:44:1a:3c:aa:84:38:28:da:2e:45:37:81:b9:
         20:a8:64:dc:10:bc:f0:87:d0:5e:d9:d4:da:46:11:6d:08:16:
         80:f9:4f:f7:9a:11:07:b9:07:1c:c6:f6:24:09:47:78:d3:e2:
         ee:86:6f:3a:0d:de:71:2c:a6:43:5e:f9:f1:c6:a8:bb:b7:e6:
         6d:30:30:06:b9:1f:6d:a0:91:49:84:6f:fb:35:4e:04:45:bb:
         d1:55:f6:4c:9a:4a:92:21:d7:e8:a4:b1:5b:dd:00:90:ff:b4:
         3a:d3:f9:6f:22:c5:26:e5:2f:54:28:63:3e:d7:11:a3:b6:18:
         22:6c:87:da:e4:57:21:e7:0e:ed:72:ea:1e:5e:b2:88:1c:b3:
         2d:aa:1b:03:30:06:92:39:0d:c5:4a:c1:1f:98:5e:33:b7:d8:
         18:7d:28:c3:0c:f2:5d:a4:18:bc:c3:d2:0f:f0:62:3f:ea:1f:
         21:b6:72:db:2d:5b:a4:13:39:e8:a5:6d:6e:11:c6:c1:02:f3:
         bb:53:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:28:16 2026 by rpki-client