This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          dCNPLK6Jtw/QdaXVlq9Kfkg/o/vJjuASeB3x1zuCWYE=
Subject key identifier:   B4:69:ED:5B:CD:B8:34:CE:F1:4C:59:49:AD:12:47:54:95:5C:6F:44
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       3D0499F40FA58F0D258D44CB6319459EF342ED77
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 02 Sep 2025 14:06:02 +0000
ROA not before:           Tue 02 Sep 2025 14:01:02 +0000
ROA not after:            Tue 01 Sep 2026 14:06:02 +0000
asID:                     265175
IP address blocks:        2804:2bc8:6000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Tue 01 Sep 2026 14:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:04:99:f4:0f:a5:8f:0d:25:8d:44:cb:63:19:45:9e:f3:42:ed:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  2 14:01:02 2025 GMT
            Not After : Sep  1 14:06:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:94:b3:9f:fb:a5:4e:57:57:9e:dd:39:50:
                    da:a0:ab:38:a2:df:7c:c9:b5:01:31:e1:e2:46:42:
                    d1:5c:ba:c7:08:40:32:71:a2:50:20:23:7f:21:09:
                    29:e4:08:c9:06:52:84:8c:ab:3b:c0:31:bc:8c:3f:
                    8d:1c:84:82:c1:89:70:f0:c2:40:26:93:49:c2:21:
                    46:56:95:1d:ee:44:12:b0:b2:27:71:f7:9b:a3:fe:
                    c2:96:1a:f5:c4:e3:05:e8:69:eb:93:6c:1e:9f:5c:
                    ef:5e:1d:c1:60:5c:6b:cb:d6:6f:0d:f2:b3:14:fb:
                    cc:d8:9d:cf:85:5b:09:23:5f:c3:74:c0:a5:6a:24:
                    bc:bf:70:f5:0b:35:f5:ca:b5:2c:92:e2:31:9a:9d:
                    9d:4f:e0:91:f4:ff:36:7f:93:10:06:de:e3:75:3b:
                    9e:b2:0b:6d:e8:c1:a5:24:25:77:0e:5c:cf:92:a8:
                    53:b8:69:d8:56:25:1d:7e:b5:20:a8:2f:a5:00:7f:
                    e1:e8:7d:8c:4e:cd:77:3b:f6:f8:c0:ca:bc:3f:16:
                    3c:ca:a0:1a:b0:55:a7:5c:3a:83:4b:a7:91:3e:6b:
                    2b:5a:4f:01:0f:d0:d0:45:f4:3a:2e:60:76:eb:42:
                    75:83:8f:ba:8b:e6:be:1a:49:ff:ce:8e:8b:33:0c:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:69:ED:5B:CD:B8:34:CE:F1:4C:59:49:AD:12:47:54:95:5C:6F:44
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:e0:1b:bc:b1:ae:0c:db:bf:f1:b7:4e:9f:7a:d2:a4:ee:
         bb:dc:6b:b1:c9:00:3a:98:d7:fb:20:98:8c:5f:9e:57:17:b0:
         23:ee:4c:3b:1c:d2:f6:f9:45:8b:44:29:5c:56:a6:1b:95:6e:
         bc:ee:ce:df:ba:85:08:81:41:84:df:6b:a0:59:3f:81:58:60:
         2e:fe:60:71:09:a9:41:28:2e:d2:f2:60:58:46:00:21:ce:ea:
         f2:30:de:47:d6:6b:cb:d2:72:35:d2:1b:92:84:47:92:7e:09:
         de:96:43:9f:f9:d4:6c:f8:5e:f9:a5:0a:8a:de:a9:a8:58:63:
         b3:b3:83:90:4a:28:8c:9e:44:ec:0b:8a:da:eb:b9:f8:c5:7e:
         00:ea:a5:70:53:a9:20:e7:fd:cc:82:dd:0c:ce:2c:c4:cf:17:
         dc:6e:42:8e:6b:5c:25:00:ec:92:45:1e:e9:c6:63:ce:b8:6a:
         60:b8:69:aa:1c:b1:25:9c:34:f9:08:6f:53:e8:a1:55:ab:10:
         5f:31:04:47:57:58:7f:da:8c:6d:5b:ed:eb:eb:58:9b:56:46:
         1e:32:f9:72:2f:ac:63:12:14:06:74:7b:97:00:45:97:d4:a4:
         61:0d:47:22:17:a7:1f:df:2c:63:b0:9f:e9:c6:2c:50:81:67:
         37:3e:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:33:40 2025 by rpki-client