This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa
File:                     3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa (raw, json)
Hash identifier:          3oCLWaEdX/XcgphXXEdAOhEbGJaeM9n3y/GrsvKXo80=
Subject key identifier:   51:D5:25:9C:A9:E6:CD:7F:A7:04:1E:1C:08:4E:B7:7E:C9:69:6A:6B
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       2BFD92965385979DC23E9BCDF6D29BE3A4C1A064
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:19:55 +0000
ROA not before:           Fri 05 Sep 2025 12:14:55 +0000
ROA not after:            Fri 04 Sep 2026 12:19:55 +0000
asID:                     263057
IP address blocks:        170.244.236.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 14:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fd:92:96:53:85:97:9d:c2:3e:9b:cd:f6:d2:9b:e3:a4:c1:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:14:55 2025 GMT
            Not After : Sep  4 12:19:55 2026 GMT
        Subject: CN=51D5259CA9E6CD7FA7041E1C084EB77EC9696A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:78:30:e5:93:81:68:98:9f:f3:57:95:da:
                    58:34:01:6d:c0:30:68:18:82:ec:7a:36:e6:08:49:
                    5b:a6:e1:20:b4:59:23:2e:c6:f6:c0:e0:36:48:41:
                    86:76:3f:6a:a8:6c:91:a1:eb:51:ec:d5:ff:07:70:
                    c2:a9:d2:f7:0a:86:4c:37:e4:37:ee:12:a6:6d:11:
                    a3:70:c2:48:2c:82:4e:b3:93:5b:2d:cc:f0:79:d5:
                    86:1c:5a:e8:cb:c0:99:60:27:7f:ae:d6:6b:07:f4:
                    ab:9d:1a:1f:6e:cb:e5:40:ad:9d:95:8f:fb:b7:c9:
                    60:17:ab:70:e2:d0:73:40:62:f3:4b:02:f0:98:4d:
                    6c:59:a9:f9:d0:ce:db:e6:f3:39:8f:9e:49:61:82:
                    1f:f1:47:68:fe:81:16:dd:d5:10:86:ab:bd:9c:73:
                    d6:4f:37:94:9d:6b:87:18:a5:d7:12:4a:eb:7e:1a:
                    a0:38:6d:9d:bb:5f:11:28:6a:20:9a:d9:28:3f:26:
                    21:39:8f:38:bf:a5:e2:72:9f:f8:ef:e3:51:33:2c:
                    36:9c:a5:f4:49:63:f9:90:80:5c:a7:f7:d2:93:0e:
                    0f:bf:29:b1:2a:aa:17:d6:f4:76:f4:1e:a0:da:4f:
                    b9:88:ce:a3:6e:cc:50:58:b3:dd:ca:25:95:86:43:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:25:9C:A9:E6:CD:7F:A7:04:1E:1C:08:4E:B7:7E:C9:69:6A:6B
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:bc:55:44:8e:da:ce:61:44:9e:2e:53:92:40:da:e1:3d:
         19:df:53:68:aa:21:d8:7f:e1:e5:f4:dd:53:70:8d:af:60:25:
         79:bd:6e:d3:11:fd:b1:aa:63:1e:0f:5d:02:68:34:c9:be:30:
         b6:56:12:14:e1:96:0d:f1:81:86:f8:6c:b2:45:d2:b3:13:0a:
         e5:1f:52:9b:3e:e6:db:58:73:79:e3:65:d3:dd:03:4e:ed:6f:
         22:c0:ac:c1:3a:d5:34:72:f1:7c:b8:6e:be:5f:c6:f5:df:d5:
         9c:de:fd:68:17:19:2b:83:42:76:d8:e6:4e:ab:6a:4d:9d:c1:
         72:3b:da:80:45:c0:f1:fc:70:02:d1:51:47:11:91:4a:ca:61:
         e1:aa:63:e7:e6:03:85:7b:ec:c6:f2:43:8f:60:2e:7a:e7:5d:
         a7:42:82:28:7b:24:bc:4c:5e:98:78:6f:09:88:a3:7a:36:d4:
         53:4d:01:6a:c1:f3:5b:37:54:0c:52:3c:4d:2e:50:33:fa:76:
         55:1d:71:02:a0:a0:eb:6d:27:4b:f8:30:7e:b9:20:9f:ce:d9:
         3a:4a:df:ee:3f:dc:d8:0b:ed:2b:8b:d6:3e:fa:50:b4:49:d4:
         9b:be:21:a0:8f:07:e7:97:4d:4d:05:8b:b0:5e:b7:50:b2:ae:
         d0:d7:ff:7f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUK/2SllOFl53CPpvN9tKb46TBoGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0MEVENTM2N0FFOTNCRUI4RDZGRDJFOThCNkI5MTEx
M0NERDJCQzAeFw0yNTA5MDUxMjE0NTVaFw0yNjA5MDQxMjE5NTVaMDMxMTAvBgNV
BAMTKDUxRDUyNTlDQTlFNkNEN0ZBNzA0MUUxQzA4NEVCNzdFQzk2OTZBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywngw5ZOBaJif81eV2lg0AW3A
MGgYgux6NuYISVum4SC0WSMuxvbA4DZIQYZ2P2qobJGh61Hs1f8HcMKp0vcKhkw3
5DfuEqZtEaNwwkgsgk6zk1stzPB51YYcWujLwJlgJ3+u1msH9KudGh9uy+VArZ2V
j/u3yWAXq3Di0HNAYvNLAvCYTWxZqfnQztvm8zmPnklhgh/xR2j+gRbd1RCGq72c
c9ZPN5Sda4cYpdcSSut+GqA4bZ27XxEoaiCa2Sg/JiE5jzi/peJyn/jv41EzLDac
pfRJY/mQgFyn99KTDg+/KbEqqhfW9Hb0HqDaT7mIzqNuzFBYs93KJZWGQzefAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUdUlnKnmzX+nBB4cCE63fslpamswHwYDVR0j
BBgwFoAUdkDtU2euk7641v0umLa5ERPN0rwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BCZ3hKZVhwNXJOYmRMMlNZYkVLR1VBZjVjdmhxTXpCRjNUN2RQbjNI
VW0vMC83NjQwRUQ1MzY3QUU5M0JFQjhENkZEMkU5OEI2QjkxMTEzQ0REMkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDBFRDUzNjdBRTkzQkVC
OEQ2RkQyRTk4QjZCOTExMTNDREQyQkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQQmd4SmVYcDVyTmJkTDJTWWJFS0dVQWY1Y3ZocU16QkYzVDdkUG4zSFVtLzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzMwMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr07DANBgkqhkiG9w0BAQsFAAOCAQEAfCG8
VUSO2s5hRJ4uU5JA2uE9Gd9TaKoh2H/h5fTdU3CNr2Aleb1u0xH9sapjHg9dAmg0
yb4wtlYSFOGWDfGBhvhsskXSsxMK5R9Smz7m21hzeeNl090DTu1vIsCswTrVNHLx
fLhuvl/G9d/VnN79aBcZK4NCdtjmTqtqTZ3BcjvagEXA8fxwAtFRRxGRSsph4apj
5+YDhXvsxvJDj2Aueuddp0KCKHskvExemHhvCYijejbUU00BasHzWzdUDFI8TS5Q
M/p2VR1xAqCg620nS/gwfrkgn87ZOkrf7j/c2AvtK4vWPvpQtEnUm74hoI8H55dN
TQWLsF63ULKu0Nf/fw==
-----END CERTIFICATE-----