This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a643030303a3a2f33362d3336203d3e20323636323937.roa
File:                     323830343a333561303a643030303a3a2f33362d3336203d3e20323636323937.roa (raw, json)
Hash identifier:          4qfKLbIuwclM5FnOS8eBaPB+dgpCYDlmIHWDG+ByB1U=
Subject key identifier:   33:6F:27:40:93:81:D8:4C:B0:D1:83:91:03:40:76:8C:30:DA:70:22
Certificate issuer:       /CN=6B05973B3F0E6046EDE1D64AD43C5E2499AA4036
Certificate serial:       03308BC3499E92D878BBC8766C1C7059A44CAE59
Authority key identifier: 6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a643030303a3a2f33362d3336203d3e20323636323937.roa
Signing time:             Mon 01 Dec 2025 19:02:48 +0000
ROA not before:           Mon 01 Dec 2025 18:57:48 +0000
ROA not after:            Mon 30 Nov 2026 19:02:48 +0000
asID:                     266297
IP address blocks:        2804:35a0:d000::/36 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:30:8b:c3:49:9e:92:d8:78:bb:c8:76:6c:1c:70:59:a4:4c:ae:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B05973B3F0E6046EDE1D64AD43C5E2499AA4036
        Validity
            Not Before: Dec  1 18:57:48 2025 GMT
            Not After : Nov 30 19:02:48 2026 GMT
        Subject: CN=336F27409381D84CB0D183910340768C30DA7022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:03:57:56:8a:37:47:ee:0f:29:84:65:09:
                    29:84:2f:38:78:c1:ef:91:e2:13:64:f5:1b:79:d9:
                    ae:48:6c:89:65:81:ec:70:d3:96:a6:69:2f:e9:82:
                    e4:ed:41:28:7e:63:f7:8e:6b:5e:c0:71:c3:e6:2b:
                    bd:20:d9:40:59:6f:b9:fe:09:7b:1d:6c:02:a5:d8:
                    27:2c:21:92:29:3f:6f:bb:18:e5:75:b6:76:22:55:
                    88:89:48:f0:d5:74:88:2f:49:18:3d:6a:be:7e:f4:
                    3c:24:f9:f7:cf:17:04:7e:a9:8e:6a:51:93:a6:77:
                    64:32:39:3b:7b:b1:72:c3:94:e0:47:1d:38:4c:22:
                    01:e5:69:1f:7f:00:22:2d:88:d8:b2:77:97:9c:2f:
                    a0:fc:c2:58:7a:8c:82:bf:3c:d0:48:7d:78:b2:e7:
                    c4:01:f5:10:59:b6:81:da:0f:65:98:f4:8c:db:af:
                    de:07:a0:58:7f:80:60:00:74:fe:63:e8:8d:5a:35:
                    a3:f6:c4:c4:e7:b8:3a:40:19:0b:07:a7:69:6c:c9:
                    d5:bf:84:67:a5:5d:f4:c4:be:4f:25:1d:6e:63:2f:
                    6b:6b:e0:92:04:17:71:61:7a:35:98:5d:70:ee:0b:
                    9f:51:23:84:50:d8:c9:72:7f:23:f7:cd:f7:5f:0e:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6F:27:40:93:81:D8:4C:B0:D1:83:91:03:40:76:8C:30:DA:70:22
            X509v3 Authority Key Identifier:
                keyid:6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a643030303a3a2f33362d3336203d3e20323636323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:ff:d7:52:95:e4:5c:86:93:4a:d5:d6:c3:39:48:2e:41:
         fa:04:77:74:6a:94:45:af:15:84:78:44:f5:bc:62:c9:4d:43:
         71:47:20:b1:f6:f7:a7:20:87:c0:bf:7e:ee:c8:38:c7:fa:ff:
         03:4a:c8:fc:19:44:f6:7d:41:ae:12:ae:bf:47:53:c1:ba:86:
         9a:12:32:8a:bd:3e:5f:78:4a:1d:48:3d:a0:ab:ad:8d:d6:8a:
         73:af:dd:18:6f:27:3a:2f:47:b8:1e:3c:6c:a2:94:e2:84:9d:
         00:e9:24:1c:44:69:03:6a:5b:49:99:e9:2d:64:c9:53:a4:19:
         80:c4:e8:fd:3c:fd:7b:64:c8:cd:8d:36:1e:eb:37:50:61:49:
         8a:06:44:ad:7e:c5:00:55:02:af:15:b3:fb:8f:10:13:a2:44:
         ff:94:75:f4:cc:ad:42:41:94:2b:80:77:6e:37:47:a7:25:46:
         40:59:e4:45:c1:f9:d8:14:72:1e:35:7c:04:37:dc:2e:e6:2e:
         33:61:86:26:54:0e:9b:46:8e:b3:07:99:c6:43:eb:ed:49:1b:
         fe:ea:8f:13:fc:76:9e:23:4d:01:9d:58:99:c5:53:13:37:3d:
         98:02:92:82:4f:06:62:5d:f5:be:9a:e1:d8:c9:79:e6:4e:dd:
         dd:7b:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----