This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          IxNS6ulw0UAdfv0fKK8l1JBpV8feqxJO++jk0ZvN1Yo=
Subject key identifier:   39:C3:3B:23:43:29:C2:C1:9F:44:CD:5F:97:4E:27:FD:20:D9:93:1E
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       32D38A5AE3D999F8789A64862AE9CED3E68D16E1
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 02 Sep 2025 14:06:01 +0000
ROA not before:           Tue 02 Sep 2025 14:01:01 +0000
ROA not after:            Tue 01 Sep 2026 14:06:01 +0000
asID:                     265175
IP address blocks:        2804:2bc8:2000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Tue 01 Sep 2026 14:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d3:8a:5a:e3:d9:99:f8:78:9a:64:86:2a:e9:ce:d3:e6:8d:16:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  2 14:01:01 2025 GMT
            Not After : Sep  1 14:06:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:36:fd:44:43:42:df:4a:61:90:2b:61:92:
                    01:a0:9d:37:24:20:78:f3:88:9f:94:30:51:5f:c4:
                    4f:a9:fb:77:51:de:5a:de:5c:d3:39:fe:08:a8:89:
                    2a:30:94:25:ad:9b:67:03:74:af:bc:00:e9:e8:c9:
                    f3:bc:e8:55:92:a9:5d:fe:e5:89:65:49:5b:8e:11:
                    60:a8:9e:88:30:19:6d:ec:d5:72:ec:25:9f:c3:52:
                    87:99:e6:36:7f:90:df:5e:4b:2d:a2:dd:7b:fc:f7:
                    0e:04:27:28:e0:4d:0b:8b:7d:7f:0a:e7:d0:31:b6:
                    66:c7:e7:18:0b:f4:62:ca:7e:b5:03:d4:b0:44:a5:
                    e1:0c:70:d2:07:6e:74:8f:7c:47:9c:d6:16:96:ce:
                    f1:1c:05:a0:fe:58:4a:81:3c:cc:f3:bc:db:13:94:
                    59:d9:2c:ce:55:d3:32:c1:10:c6:d8:d1:f0:b4:77:
                    aa:9a:06:bc:d9:f8:a7:11:dd:31:c7:9f:15:b9:4d:
                    e5:e5:7e:aa:75:eb:19:a0:5d:df:a7:d1:91:11:1e:
                    54:87:99:14:61:56:6c:bc:d4:28:3d:bd:7f:db:81:
                    0d:f1:d2:17:11:28:3e:c3:b2:d1:37:a9:f9:16:e9:
                    27:3f:5b:6c:4d:57:6e:bf:e2:ca:06:a9:c1:16:55:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C3:3B:23:43:29:C2:C1:9F:44:CD:5F:97:4E:27:FD:20:D9:93:1E
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a323030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:87:64:4e:67:18:4c:75:7f:0e:bb:e9:f1:9b:18:0c:f2:ae:
         92:df:04:54:b9:4d:dd:07:4b:a3:c0:a6:3c:af:6e:cf:71:79:
         5d:fc:76:30:81:95:da:11:a2:17:65:fa:0a:1f:af:57:ad:c6:
         cb:02:83:89:4a:4d:1e:08:10:f0:25:f3:6e:a1:cf:38:13:ff:
         64:2e:6a:6f:32:42:85:50:4c:66:6e:9b:eb:53:0b:35:d2:51:
         10:79:3a:57:37:86:7f:d5:50:f8:40:11:f5:b9:b9:df:af:1f:
         47:5d:bb:2f:06:38:a6:7c:a4:6b:b1:19:76:21:2d:da:bc:39:
         4c:3e:c5:8a:02:bb:d2:3b:11:11:27:2f:0d:15:93:e6:26:d9:
         a3:1a:97:18:50:44:10:ef:43:08:c5:3d:53:b9:8e:96:a7:3c:
         a6:f7:59:99:04:db:aa:3f:fe:dc:e4:e6:1c:19:bd:9b:6e:89:
         ee:f3:96:63:34:3c:44:95:83:5b:f1:50:72:3d:c6:ff:46:4d:
         c5:1c:cd:87:5d:d9:59:e0:65:e7:0c:e9:31:1e:43:17:22:77:
         8d:82:36:bd:f0:7a:84:53:c0:58:14:5c:22:47:ed:86:2a:01:
         2f:2b:a2:19:a5:c9:c7:67:ec:8e:c2:ba:52:05:27:92:e8:a0:
         8b:0f:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----