This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32302d3230203d3e203131393231.roa
File:                     3230302e3233332e36342e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          FhFwrn2A77NkJSij/SDphbbq/jqpSFPj8+zSCd1e/GE=
Subject key identifier:   8C:23:86:2F:D3:91:B6:CC:AA:53:01:A4:FD:09:20:67:F8:68:E4:FF
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       03B1E12FF4847EE0FAD88913BB143DE72AFE1200
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32302d3230203d3e203131393231.roa
Signing time:             Tue 22 Oct 2024 20:00:59 +0000
ROA not before:           Tue 22 Oct 2024 19:55:59 +0000
ROA not after:            Tue 21 Oct 2025 20:00:59 +0000
asID:                     11921
IP address blocks:        200.233.64.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b1:e1:2f:f4:84:7e:e0:fa:d8:89:13:bb:14:3d:e7:2a:fe:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Oct 22 19:55:59 2024 GMT
            Not After : Oct 21 20:00:59 2025 GMT
        Subject: CN=8C23862FD391B6CCAA5301A4FD092067F868E4FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:0b:7f:91:62:d0:72:00:15:b9:2a:b8:9b:
                    be:07:a7:55:12:a8:2c:c7:15:48:24:57:e3:d4:a3:
                    a5:9f:63:35:39:c9:9e:73:bd:85:d5:d9:21:1d:41:
                    8a:d5:56:71:d3:47:7d:b7:5d:df:f9:7a:bd:69:8f:
                    9e:dd:ec:74:08:25:ae:6f:47:77:d1:81:92:4e:e4:
                    ab:d7:3f:8d:ec:9b:0e:9b:1d:40:0d:f0:24:9a:81:
                    03:b6:1e:8d:28:4e:42:db:b8:fb:95:cf:0c:55:5b:
                    3d:ec:7a:8b:63:19:69:8a:5e:69:5e:21:8c:ef:80:
                    70:2f:2e:52:22:f8:71:1f:50:bf:84:d6:51:90:b9:
                    03:1c:3d:e4:3d:b6:14:d7:5d:81:92:75:64:10:64:
                    36:eb:50:d1:e9:26:f9:ac:87:70:28:68:1f:ae:24:
                    b7:a4:83:9c:b9:be:72:39:19:4b:ca:5f:63:08:90:
                    f8:d7:53:15:02:06:14:d7:9f:69:d6:f0:70:47:76:
                    3b:87:ea:fa:93:93:6c:4a:53:2c:f7:4b:c3:e9:ce:
                    ed:53:cb:c1:f4:ab:66:2e:51:d8:47:36:b6:34:45:
                    3a:fa:d0:f2:fe:0c:cd:aa:cb:e7:73:5f:ee:4f:39:
                    3d:31:ab:b6:f8:5d:8a:67:fb:d8:42:69:dd:58:40:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:23:86:2F:D3:91:B6:CC:AA:53:01:A4:FD:09:20:67:F8:68:E4:FF
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:e9:ff:45:e3:2c:28:e0:99:30:e7:37:b2:73:e5:83:08:
         57:e9:0a:67:ac:0b:21:bd:77:f6:e4:c0:c1:c0:cb:72:44:b8:
         28:16:df:e4:5e:b8:f0:88:87:8e:ca:e8:98:89:27:ad:63:67:
         c6:f5:99:cb:38:bf:6d:4a:b8:af:7e:e7:06:ef:c1:09:82:65:
         cc:79:60:2d:6d:af:aa:64:f1:cd:d2:f5:f8:27:5e:cf:20:20:
         1d:70:9b:73:89:30:f2:f9:3f:75:1c:a9:71:38:22:2e:92:bb:
         26:5c:71:71:fc:73:07:60:c1:c2:e0:c4:1b:c7:03:67:6b:0c:
         7f:23:c3:d6:64:06:e3:f2:a0:fb:0a:9a:ca:f9:be:b1:9d:7e:
         cd:47:9f:a8:c5:71:13:6b:e3:ad:d7:c7:29:51:09:96:c0:18:
         94:fe:65:bd:42:18:d3:50:a9:49:69:af:6d:d6:35:7d:72:01:
         b7:75:f1:61:58:bb:a3:75:70:82:3c:89:ed:ec:85:52:f6:46:
         cb:cb:b6:be:00:fd:eb:83:b0:0d:d0:db:b0:a0:96:ce:74:7b:
         99:1c:c2:28:27:1d:83:03:0b:f1:36:71:f3:3a:14:09:62:c0:
         53:df:8e:63:77:c0:1b:cc:05:ce:b3:6b:b6:05:ad:74:1d:11:
         76:de:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----