This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a653030303a3a2f33362d3336203d3e20323636323937.roa
File:                     323830343a333561303a653030303a3a2f33362d3336203d3e20323636323937.roa (raw, json)
Hash identifier:          HZrJJk+kXMFDgLH6g6Nbp08lKLyFaYUJUXcvwFkCJ6w=
Subject key identifier:   32:4B:23:CC:13:66:5C:A6:F0:99:43:7D:BE:35:87:D6:B9:0C:F5:82
Certificate issuer:       /CN=6B05973B3F0E6046EDE1D64AD43C5E2499AA4036
Certificate serial:       65E9E8D23623CE1E64697FBBE4BEDC409F256647
Authority key identifier: 6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a653030303a3a2f33362d3336203d3e20323636323937.roa
Signing time:             Mon 01 Dec 2025 19:02:51 +0000
ROA not before:           Mon 01 Dec 2025 18:57:51 +0000
ROA not after:            Mon 30 Nov 2026 19:02:51 +0000
asID:                     266297
IP address blocks:        2804:35a0:e000::/36 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e9:e8:d2:36:23:ce:1e:64:69:7f:bb:e4:be:dc:40:9f:25:66:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B05973B3F0E6046EDE1D64AD43C5E2499AA4036
        Validity
            Not Before: Dec  1 18:57:51 2025 GMT
            Not After : Nov 30 19:02:51 2026 GMT
        Subject: CN=324B23CC13665CA6F099437DBE3587D6B90CF582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:f6:41:38:fc:31:9d:fa:b0:3c:e9:a8:73:
                    1a:df:aa:b9:50:71:07:a8:17:67:12:65:64:ff:a6:
                    67:e1:ad:0c:62:63:9f:89:20:f6:ca:50:c4:8d:0c:
                    9d:51:12:e5:e8:19:d3:49:df:a4:89:41:a6:4c:cf:
                    fb:a9:5f:83:27:32:20:6e:dd:0e:77:1b:3a:40:cb:
                    87:3e:17:d2:b7:0e:13:5b:85:b8:86:69:e9:b7:8f:
                    c5:e9:54:97:9f:cf:b4:45:72:87:7e:e3:04:89:53:
                    74:a3:55:75:ea:d4:b8:51:8b:d2:1c:97:88:85:74:
                    53:e5:07:01:ea:11:0a:02:da:2e:48:ae:78:2a:2e:
                    24:31:a8:a8:0e:ac:fc:51:4f:1c:2c:9e:e0:17:e0:
                    e8:69:f8:4b:c4:71:34:a9:51:f0:dc:ea:22:4a:c0:
                    aa:da:f3:bf:43:ec:4e:a3:48:74:f0:a5:2b:c6:58:
                    d4:47:0e:2d:cb:0a:c3:32:2a:a9:72:15:6e:e2:ae:
                    de:75:43:5b:bd:36:78:be:a3:66:a0:50:7b:3a:03:
                    71:aa:1f:c8:72:bd:50:28:60:be:1b:f1:8b:b4:a0:
                    e2:35:5c:33:7e:70:e0:00:05:7c:ac:5e:a5:4d:c5:
                    f1:27:94:91:6c:56:c0:67:4e:6a:cb:6a:aa:16:ef:
                    f5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:23:CC:13:66:5C:A6:F0:99:43:7D:BE:35:87:D6:B9:0C:F5:82
            X509v3 Authority Key Identifier:
                keyid:6B:05:97:3B:3F:0E:60:46:ED:E1:D6:4A:D4:3C:5E:24:99:AA:40:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B05973B3F0E6046EDE1D64AD43C5E2499AA4036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/1/323830343a333561303a653030303a3a2f33362d3336203d3e20323636323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b6:97:89:95:1c:a5:b1:28:02:8f:60:f5:99:68:e9:f3:1a:7e:
         78:01:8c:c8:ca:43:38:4f:12:d0:b6:4e:2f:75:96:d7:20:23:
         12:a3:47:19:68:09:6c:62:97:73:18:e7:e5:0e:a9:e5:ab:8d:
         38:23:e1:7d:67:d4:e6:91:82:51:65:ac:ee:52:8d:3e:cd:54:
         de:5a:00:3a:af:d2:63:14:81:2a:d8:12:28:c0:ee:fb:ae:2e:
         47:34:a1:0d:29:10:67:bf:5e:b7:2c:04:13:a6:e8:a5:1c:59:
         28:7c:28:41:05:18:7a:8f:8e:1e:1b:2c:1e:71:30:bc:f4:05:
         9f:a3:e7:7b:00:e1:97:d8:00:7f:71:23:18:9b:d8:a7:1f:58:
         52:71:4f:56:98:75:ac:00:e2:b7:ce:e1:54:19:a5:b6:5a:5a:
         00:6e:5d:91:66:a6:68:e8:df:2b:56:0f:10:b1:2a:fa:ff:75:
         cd:94:14:80:5b:fa:92:55:1f:99:ed:dd:0a:9c:e2:29:36:46:
         bc:e7:c1:d8:f0:fb:5e:78:9a:f2:11:a4:93:83:b9:4c:1b:ae:
         34:09:ce:89:1b:eb:4d:49:a1:45:91:1c:8e:34:26:3b:8d:d5:
         b4:5a:56:33:49:df:32:2d:57:07:9f:ad:9e:bc:5f:46:42:98:
         e9:ea:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 16:02:58 2025 by rpki-client