This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3332203d3e20323730343036.roa
File:                     3139302e3131312e3130302e302f32322d3332203d3e20323730343036.roa (raw, json)
Hash identifier:          rxL7uK45NsRcJhXTWXDGgG6rRYX6Uo1AY0n1jaAE8zM=
Subject key identifier:   AE:7F:D9:AF:06:63:51:2F:5E:A6:9D:7E:5E:AF:C9:9E:F8:F8:B3:07
Certificate issuer:       /CN=2CECFC86960C437277CA4FDF82CD3F36C7D009A8
Certificate serial:       5964D95BBCFE64E4D96FB9D0144474938F283F3C
Authority key identifier: 2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3332203d3e20323730343036.roa
Signing time:             Mon 29 Dec 2025 20:34:37 +0000
ROA not before:           Mon 29 Dec 2025 20:29:37 +0000
ROA not after:            Mon 28 Dec 2026 20:34:37 +0000
asID:                     270406
IP address blocks:        190.111.100.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:64:d9:5b:bc:fe:64:e4:d9:6f:b9:d0:14:44:74:93:8f:28:3f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CECFC86960C437277CA4FDF82CD3F36C7D009A8
        Validity
            Not Before: Dec 29 20:29:37 2025 GMT
            Not After : Dec 28 20:34:37 2026 GMT
        Subject: CN=AE7FD9AF0663512F5EA69D7E5EAFC99EF8F8B307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:cd:16:31:d8:e1:91:f2:df:d9:3f:03:3a:
                    35:8c:5c:63:9e:97:09:94:0e:ff:c3:b7:a4:02:08:
                    2d:2b:41:72:59:e9:aa:d3:30:95:99:11:76:bf:e5:
                    1a:7b:4e:25:5c:af:a3:e8:75:c2:22:7f:1b:94:06:
                    a1:5b:bb:cc:26:39:03:11:59:c0:49:ff:61:4a:a5:
                    96:1a:10:aa:a8:d3:d1:27:ee:06:dc:bb:d7:42:ab:
                    cd:00:62:ad:f1:8a:a0:05:fc:9c:53:f3:43:d4:7a:
                    69:07:63:c0:84:85:77:63:ff:33:dc:d4:c9:5b:8a:
                    04:e2:9f:fd:64:ae:56:c7:d9:86:80:02:33:d6:04:
                    ae:0d:52:e2:67:ca:a2:fc:78:f8:66:8b:e9:20:17:
                    85:cc:34:8b:83:8a:76:c4:86:0b:23:31:54:94:1a:
                    8b:e5:c8:5a:a0:f5:c2:2a:a4:2d:89:8a:3d:9c:29:
                    cb:11:f8:e1:4e:2d:0d:42:51:c0:ca:93:2c:9f:57:
                    74:b0:03:df:bf:8b:ce:12:90:b2:84:48:d9:34:45:
                    39:ba:dd:9b:08:88:a8:3e:52:85:d7:43:77:6f:f0:
                    f2:49:5b:b8:e0:3f:e3:65:ff:8a:36:e8:f4:c3:32:
                    2d:56:64:1e:ce:f7:c2:d9:9f:de:a0:c0:0c:cc:20:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7F:D9:AF:06:63:51:2F:5E:A6:9D:7E:5E:AF:C9:9E:F8:F8:B3:07
            X509v3 Authority Key Identifier:
                keyid:2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3332203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:f0:29:d4:4a:68:e0:de:79:23:a1:1d:b5:04:00:45:61:
         1f:79:81:bc:ad:6b:3f:76:39:16:d0:00:7a:dd:af:41:10:6b:
         25:dd:1e:b7:21:2f:35:d3:d5:27:56:e0:94:7b:15:3e:a6:9e:
         4b:91:6d:16:c6:65:8d:19:e3:49:39:a5:a0:29:de:3e:c2:6a:
         44:a1:26:75:c5:cf:4f:48:46:28:0e:93:0b:da:ca:8c:c9:5d:
         41:eb:c9:3c:aa:a1:9e:2d:ed:de:08:36:09:bb:bd:eb:f4:74:
         88:14:4d:73:ad:f1:e0:8d:c4:7d:1b:84:1e:f8:89:78:2f:88:
         da:2e:62:41:0f:66:31:79:83:4f:9d:f3:75:bc:9f:00:a3:f6:
         55:6c:e4:5b:06:c8:cc:4b:03:fc:95:f3:6f:b0:be:56:e3:62:
         70:94:71:e6:0e:4a:e3:2a:71:ad:5c:06:cc:f1:1c:5c:e4:a7:
         f1:14:63:03:32:86:3a:54:f8:80:d8:62:7f:b9:aa:76:6f:13:
         b2:2c:0b:f0:ba:0d:13:1c:cc:0c:71:5a:b9:53:ae:15:06:2c:
         44:54:9c:e9:86:b8:14:cd:a2:88:6f:a4:40:07:ee:f1:a4:8d:
         1d:8d:f1:89:01:68:56:ee:70:61:cc:f8:9e:5d:10:54:43:a9:
         32:12:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----