This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          Tga/bcR1RPfmwv0KpXp61zVXVLceaCl4c8zX3m0oKVA=
Subject key identifier:   5A:4B:94:BB:0E:9F:54:20:3A:06:EA:D1:0E:E5:C9:48:CC:E0:A3:E2
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       3056FEBEF3618125D7FEB1A4C80EA5D9013339
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa
Signing time:             Tue 09 Sep 2025 13:20:00 +0000
ROA not before:           Tue 09 Sep 2025 13:15:00 +0000
ROA not after:            Tue 08 Sep 2026 13:20:00 +0000
asID:                     265175
IP address blocks:        167.249.208.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 08 Sep 2026 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:fe:be:f3:61:81:25:d7:fe:b1:a4:c8:0e:a5:d9:01:33:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  9 13:15:00 2025 GMT
            Not After : Sep  8 13:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:d3:7d:cd:fc:f8:db:2d:3f:35:a3:28:78:
                    b9:06:dd:6a:b5:e2:58:e9:e4:07:2b:ac:66:e0:60:
                    4d:6a:42:cd:58:54:ae:45:e2:ca:e5:9a:a4:0c:5f:
                    1a:4a:3e:23:3a:35:36:71:52:14:b9:5c:e6:a5:05:
                    84:1a:b7:cc:a9:f9:66:05:b6:79:1e:2d:6f:cf:11:
                    72:03:34:fc:a5:70:ac:24:00:e2:58:4a:e2:37:0e:
                    c8:72:ff:de:d9:be:8a:8d:55:63:b8:10:50:b7:62:
                    56:5f:29:03:0f:44:e5:c9:04:43:7c:c0:c0:b7:5e:
                    2a:a3:ed:5d:c4:c9:9a:2b:f3:c5:66:86:41:dd:37:
                    ff:6a:15:df:2c:e0:69:b2:2b:79:8e:46:63:90:64:
                    12:55:0e:25:aa:aa:cb:78:4c:2f:d2:ef:a1:86:46:
                    3d:94:45:d8:8f:3f:80:03:1c:e7:ef:ff:38:16:a6:
                    2a:cd:16:79:b7:5e:25:e1:75:e1:dc:1f:a6:f7:4c:
                    c5:a7:c0:c1:84:8d:62:df:b9:4a:07:65:11:30:84:
                    b7:ee:b2:b1:7e:2d:2e:5a:90:b5:54:35:6a:15:0d:
                    8c:f9:a7:11:c2:3a:36:c9:04:e8:80:19:c8:fb:43:
                    bd:6d:e5:1e:00:e6:ad:8f:7f:62:55:ac:dc:f8:44:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4B:94:BB:0E:9F:54:20:3A:06:EA:D1:0E:E5:C9:48:CC:E0:A3:E2
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32342d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b3:4c:c0:50:62:19:d9:39:3f:dd:d5:d0:e9:b7:10:e9:57:
         82:9e:c4:08:6c:9a:90:ef:8f:1f:99:66:65:46:cc:d6:51:3b:
         40:b4:cf:cb:21:20:2c:50:2c:e2:44:ae:fd:dc:ba:fc:22:2b:
         6d:08:18:c8:a6:08:67:fd:29:e4:76:95:6f:f2:a2:fa:cb:54:
         0d:21:4d:cd:12:78:63:8c:e9:97:f5:8d:0a:94:58:2c:a3:50:
         07:78:7e:ab:8d:ff:c1:b7:cd:3a:39:4a:57:51:c3:f6:74:3e:
         87:13:28:98:37:61:7f:45:2d:25:47:03:ea:78:58:89:91:d8:
         3b:33:31:87:cb:4a:97:be:fc:a6:52:e6:4d:d9:27:16:a5:c6:
         b9:57:24:5a:0a:b5:db:d0:56:ad:a2:d9:43:fe:7c:c1:b9:75:
         54:67:95:11:40:5d:be:71:c9:26:b6:0d:bd:62:45:c4:8e:8d:
         c6:bb:8d:4e:37:c4:23:82:a7:8a:6d:78:68:bb:20:d2:e0:fc:
         6f:c5:7f:79:50:2d:43:55:3e:f5:7e:0a:89:24:0f:35:ae:7b:
         59:c6:1e:6b:cf:df:6d:f4:85:b2:02:01:31:ec:88:79:6b:6e:
         76:70:a9:83:37:41:15:bc:56:90:f0:df:65:60:4d:e2:99:47:
         8c:57:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----