This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa
File:                     323830343a333239303a3a2f33322d3336203d3e20323635303835.roa (raw, json)
Hash identifier:          KJyfgod/ZleOhEaweWjlo8twk6C7fqY8aR2Fia737G0=
Subject key identifier:   D8:D2:04:CC:A4:58:C9:44:89:CF:51:D2:FD:B2:F9:53:DE:DC:DB:9E
Certificate issuer:       /CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
Certificate serial:       0CEC9A666898EB46E52B076466992A432C8B3479
Authority key identifier: 99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa
Signing time:             Mon 15 Dec 2025 13:55:43 +0000
ROA not before:           Mon 15 Dec 2025 13:50:43 +0000
ROA not after:            Mon 14 Dec 2026 13:55:43 +0000
asID:                     265085
IP address blocks:        2804:3290::/32 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ec:9a:66:68:98:eb:46:e5:2b:07:64:66:99:2a:43:2c:8b:34:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
        Validity
            Not Before: Dec 15 13:50:43 2025 GMT
            Not After : Dec 14 13:55:43 2026 GMT
        Subject: CN=D8D204CCA458C94489CF51D2FDB2F953DEDCDB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:9a:bf:b2:90:af:a8:ad:0f:93:fa:ae:e0:
                    6a:ec:c3:0e:70:41:e4:f5:02:64:2c:e9:78:24:1f:
                    91:39:5d:c7:08:6c:98:b8:78:e7:76:71:03:5b:bd:
                    27:4a:ca:c4:cd:4a:00:19:77:57:34:54:23:ca:eb:
                    8f:da:0f:db:08:23:e5:e5:d6:8c:67:8c:56:32:1d:
                    d8:40:93:82:a8:b6:da:0b:4d:99:94:3b:05:40:dc:
                    0f:e5:d8:07:c7:8a:db:9d:fa:80:99:d4:64:9b:7b:
                    26:2f:c5:da:8c:6d:92:bc:64:63:d1:ef:e9:45:4e:
                    f0:80:c6:4d:68:43:73:aa:c3:15:6e:22:4d:10:b0:
                    ce:ae:09:24:36:80:e9:92:ef:84:d6:f7:fe:37:64:
                    7b:9d:b3:f8:8e:99:4e:e1:e2:4d:69:55:7a:7e:21:
                    cd:0f:88:1b:28:fb:bd:35:be:0e:72:53:02:78:85:
                    58:7f:87:09:fc:ff:97:4a:ad:b8:62:9a:92:90:ff:
                    9f:4e:80:41:9c:9b:9f:4e:a6:fe:33:36:e9:b3:a7:
                    72:50:5b:ce:8b:2d:52:6f:61:b7:e0:a6:cd:69:af:
                    c5:e0:a7:03:fa:19:bd:7e:fb:3c:e5:e8:79:5b:4a:
                    15:13:2b:36:57:da:be:31:f8:cf:32:ac:6d:23:dc:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:04:CC:A4:58:C9:44:89:CF:51:D2:FD:B2:F9:53:DE:DC:DB:9E
            X509v3 Authority Key Identifier:
                keyid:99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/323830343a333239303a3a2f33322d3336203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:84:49:ea:94:39:bf:42:68:12:87:c7:8f:34:44:52:0c:
         59:5d:b9:16:36:d9:d8:db:76:d4:08:dd:b6:a2:29:50:c1:f5:
         3f:0d:dc:ae:8f:9e:95:53:29:5f:bb:3b:b5:49:1a:3b:46:ea:
         e0:09:23:1e:bf:60:3e:fa:7a:7a:25:61:19:d7:72:19:90:d6:
         50:ff:5c:cd:44:e2:21:39:5e:bc:02:75:d7:09:32:b0:62:56:
         a8:42:b4:f0:9c:1c:95:d4:b5:e9:97:f2:5e:7a:09:a4:16:cc:
         f5:b3:08:41:41:93:2f:27:aa:c8:f1:d9:85:18:c1:6b:bb:9b:
         37:d1:18:36:eb:99:5a:36:f6:6f:b6:d9:d2:e8:19:08:46:dc:
         02:0d:28:55:f9:d9:4b:95:f5:85:e0:de:fd:a3:33:bb:93:7f:
         fc:ce:b4:dd:23:db:77:44:bb:24:70:59:6b:14:ec:9b:ea:6c:
         fe:b1:46:97:d8:2d:85:43:8b:11:a0:f3:60:d2:d2:73:ef:54:
         c1:1f:e7:2f:02:7a:c2:a1:03:bc:6f:02:ce:44:8b:6e:31:2c:
         a2:06:be:df:e0:59:6c:10:c4:da:34:b7:7b:2b:15:c9:1a:e6:
         2d:4a:27:f0:3b:57:69:b4:7f:28:67:74:97:59:d2:fe:d9:84:
         4c:a9:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:21:47 2025 by rpki-client