This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32322d3332203d3e20323636303030.roa
File:                     3138312e3139312e34302e302f32322d3332203d3e20323636303030.roa (raw, json)
Hash identifier:          miq7SddZROVTBm0UKLSzn7Jyiz+xHnp04lMTIXgAKD4=
Subject key identifier:   DC:D4:EA:3D:14:B2:A2:66:79:3F:91:96:EB:DB:4F:CA:E9:AF:3B:D1
Certificate issuer:       /CN=ED78F06DB127A9835DD0C08E3A892EECB778A367
Certificate serial:       0B06FCF28C9855BC76B88FD33CDDA88C13F84B7E
Authority key identifier: ED:78:F0:6D:B1:27:A9:83:5D:D0:C0:8E:3A:89:2E:EC:B7:78:A3:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED78F06DB127A9835DD0C08E3A892EECB778A367.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32322d3332203d3e20323636303030.roa
Signing time:             Tue 02 Dec 2025 19:35:51 +0000
ROA not before:           Tue 02 Dec 2025 19:30:51 +0000
ROA not after:            Tue 01 Dec 2026 19:35:51 +0000
asID:                     266000
IP address blocks:        181.191.40.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:06:fc:f2:8c:98:55:bc:76:b8:8f:d3:3c:dd:a8:8c:13:f8:4b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED78F06DB127A9835DD0C08E3A892EECB778A367
        Validity
            Not Before: Dec  2 19:30:51 2025 GMT
            Not After : Dec  1 19:35:51 2026 GMT
        Subject: CN=DCD4EA3D14B2A266793F9196EBDB4FCAE9AF3BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:f7:b1:4d:8f:d8:c9:29:69:49:28:06:40:
                    0d:21:04:b3:6f:65:b0:96:34:3d:f4:a2:5d:36:d6:
                    44:44:41:6e:9e:eb:2e:e2:48:d8:17:54:6a:87:a1:
                    77:bb:22:3d:56:a3:66:63:22:b6:4e:a5:9b:01:db:
                    6d:bb:27:ac:6d:da:03:25:49:99:21:33:f6:6f:89:
                    45:aa:15:a0:df:2f:a2:27:70:3b:ea:e3:d5:9f:cb:
                    25:e5:3a:d0:60:6c:b5:fe:87:d2:88:98:3f:00:31:
                    6f:0b:70:02:19:1d:a7:cc:ba:0c:d3:ae:ae:35:4a:
                    60:aa:81:cf:82:d9:a3:d4:d8:fa:e6:1d:d3:cb:5d:
                    02:b2:1e:c0:a9:bb:4f:3e:7f:35:b0:d8:09:e6:97:
                    0f:a6:48:5d:36:d2:00:64:c2:c9:b8:28:b9:d6:ff:
                    06:a5:f1:9b:93:57:23:b3:08:62:4b:b5:b6:f7:cf:
                    b4:36:ae:a9:79:74:dc:c0:d3:a0:ca:c2:7a:1f:fc:
                    57:f4:4f:c3:51:13:52:68:46:57:d4:08:90:8c:88:
                    3a:3a:6e:88:d1:7a:ec:9b:30:0e:aa:95:a3:c9:31:
                    f1:07:50:7c:a7:e0:fe:b7:80:44:b8:25:d7:c5:8c:
                    d9:f7:83:86:39:26:70:30:30:6e:04:77:40:cf:b4:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D4:EA:3D:14:B2:A2:66:79:3F:91:96:EB:DB:4F:CA:E9:AF:3B:D1
            X509v3 Authority Key Identifier:
                keyid:ED:78:F0:6D:B1:27:A9:83:5D:D0:C0:8E:3A:89:2E:EC:B7:78:A3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/ED78F06DB127A9835DD0C08E3A892EECB778A367.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED78F06DB127A9835DD0C08E3A892EECB778A367.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32322d3332203d3e20323636303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:9a:93:ff:03:a9:21:e2:e7:97:f5:e1:b7:e3:d4:dd:4b:ff:
         d6:59:d2:e1:d5:2f:51:82:d2:4a:af:40:e7:66:eb:ea:28:5c:
         4f:62:68:88:7d:df:20:85:ce:93:39:9b:15:3f:e0:52:5d:9a:
         8d:21:a9:30:47:27:26:37:98:72:c0:3a:7c:bf:c5:7c:d8:0d:
         0e:3e:22:fb:f2:be:ec:47:d8:16:29:c1:cb:7f:ca:b7:b6:ca:
         8d:98:07:d3:14:a5:77:30:d4:a1:bc:9c:01:a7:bd:11:b5:ef:
         d7:48:22:3f:5b:11:51:b9:26:75:72:01:07:48:43:7f:07:73:
         87:62:b0:f2:d8:49:a9:9a:e6:d5:ab:1e:e2:92:f5:cf:fe:62:
         a2:d6:ac:af:0a:ef:f3:0a:7d:64:9a:b9:da:ff:c9:ec:c0:a4:
         99:66:7d:41:0f:ac:9f:64:b9:06:58:62:64:29:2e:78:38:2b:
         1e:f5:db:ee:86:58:1e:10:b9:52:94:7a:04:e8:8f:63:e0:ca:
         62:e8:60:e1:34:fa:4f:af:a2:37:13:47:05:b2:74:e8:c5:f3:
         78:05:46:b0:28:c4:6e:d8:0a:e7:de:17:d8:6b:ea:52:d9:25:
         93:56:eb:ca:35:cc:91:cd:1f:0f:1c:ae:77:27:0b:f2:f5:2f:
         07:96:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:37 2025 by rpki-client