This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233372e302f32342d3234203d3e20323633303537.roa
File:                     3137302e3234342e3233372e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          dQryDOBhCckk1uMt9X+gTdozGerwqFtRytAbXc9XcDg=
Subject key identifier:   BD:7D:7A:08:57:63:6B:0D:83:68:04:74:D9:A8:D7:66:E8:3D:1E:EC
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       7AEA2859A97545CF3AFBD407B9433E99011F62C5
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233372e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:24:29 +0000
ROA not before:           Fri 05 Sep 2025 12:19:29 +0000
ROA not after:            Fri 04 Sep 2026 12:24:29 +0000
asID:                     263057
IP address blocks:        170.244.237.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 14:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ea:28:59:a9:75:45:cf:3a:fb:d4:07:b9:43:3e:99:01:1f:62:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:19:29 2025 GMT
            Not After : Sep  4 12:24:29 2026 GMT
        Subject: CN=BD7D7A0857636B0D83680474D9A8D766E83D1EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:95:de:93:82:d2:af:1d:91:5f:ef:33:09:
                    2b:4a:52:ed:be:13:cc:d9:22:c3:a7:4c:ec:72:f7:
                    62:64:e6:04:0d:e4:8b:d5:81:7b:70:53:32:ba:49:
                    bd:20:f1:35:2d:78:79:81:42:95:b2:2d:55:72:4c:
                    97:cb:6d:c0:a1:7d:24:f8:0d:37:b3:2a:b7:e4:df:
                    f1:3f:8b:65:2f:e8:cd:f0:d7:ab:65:b9:8e:dd:ba:
                    62:42:ca:a7:f3:0d:54:38:c2:3c:26:f9:38:49:b3:
                    10:60:61:4d:47:45:75:f2:7c:4e:5f:21:b6:fa:22:
                    3d:62:49:07:85:85:71:a9:8c:2d:36:ff:6e:63:be:
                    3c:14:dc:c0:05:d6:1e:cc:46:5f:00:c3:b1:78:f6:
                    f8:cb:18:4d:46:f6:c7:b5:dd:d6:5b:a6:48:14:9b:
                    f0:9b:d2:bd:cb:10:d2:3b:5f:42:a8:8e:8b:7b:13:
                    53:a8:c2:3b:4b:60:fd:6c:19:b3:b3:d0:3d:82:d8:
                    00:fa:06:d3:8a:fc:10:1e:43:c5:1b:48:43:be:95:
                    b1:99:d4:e3:fe:fe:3d:90:da:85:72:70:ce:31:35:
                    6b:bc:20:11:f2:09:1a:d9:aa:1f:b0:82:07:1c:55:
                    39:63:be:bd:68:4a:7b:dc:19:92:57:29:d8:dc:11:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:7A:08:57:63:6B:0D:83:68:04:74:D9:A8:D7:66:E8:3D:1E:EC
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233372e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:45:a8:55:f6:6f:d6:3d:cb:08:8b:92:26:48:95:ba:76:
         f5:9b:4e:04:96:e9:59:d7:41:04:a7:46:a1:2e:ea:53:30:6e:
         2b:64:93:fa:fa:20:5e:d6:10:d3:32:71:34:91:ea:db:31:e2:
         57:78:dc:ca:04:88:67:fb:b4:41:02:00:36:17:a1:43:28:79:
         9b:99:7b:85:a7:1b:f2:f6:92:98:02:0a:da:cc:cb:37:89:c1:
         e6:e4:96:47:14:8a:95:ac:59:ab:2c:fd:f1:c7:de:71:c2:b3:
         aa:5c:ad:c8:27:9a:ec:13:f3:c4:c3:eb:4b:22:75:02:c0:e6:
         e6:a1:63:63:74:3f:63:5b:41:22:fe:dc:f8:f4:69:e0:aa:e4:
         4a:d6:c6:db:5c:30:61:cd:5a:e8:f8:97:d9:2b:7e:eb:7b:51:
         6b:46:e3:b4:f3:13:02:40:17:ad:4e:ba:c5:e8:3a:8d:80:42:
         bf:54:83:92:74:39:33:db:06:1b:5b:4b:ec:a2:99:89:4c:00:
         9c:0f:d7:fb:72:4e:e8:4d:c5:fe:75:2d:56:46:96:eb:6a:ef:
         bd:82:e9:96:4d:f9:b9:0e:38:d6:21:60:f0:ca:cf:1f:f9:92:
         21:07:13:b9:b8:03:91:3c:38:55:42:6e:24:5e:78:f5:77:31:
         56:54:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----