This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32312d3231203d3e20323633303537.roa
File:                     3138362e3233322e34302e302f32312d3231203d3e20323633303537.roa (raw, json)
Hash identifier:          82QJZ+xQNE6Q6RoVxud/eLdDyvr6SdbiBOmh5Lc8+A4=
Subject key identifier:   B0:6B:DF:8B:AD:A9:37:6E:4C:5D:17:BA:B7:D1:DB:23:D1:CC:BE:2B
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       5824C5809F2182130EADC2C230D6BFF9E63B86E2
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32312d3231203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:20:06 +0000
ROA not before:           Fri 05 Sep 2025 12:15:06 +0000
ROA not after:            Fri 04 Sep 2026 12:20:06 +0000
asID:                     263057
IP address blocks:        186.232.40.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 14:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:24:c5:80:9f:21:82:13:0e:ad:c2:c2:30:d6:bf:f9:e6:3b:86:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:15:06 2025 GMT
            Not After : Sep  4 12:20:06 2026 GMT
        Subject: CN=B06BDF8BADA9376E4C5D17BAB7D1DB23D1CCBE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:8d:f4:ec:9d:cb:ae:b9:59:ac:40:6d:95:
                    6b:da:2e:ff:3e:d7:b9:1f:9e:88:39:a0:c2:8e:da:
                    ea:d0:cd:b7:e7:86:c1:72:7a:91:46:9f:cb:e2:98:
                    c3:57:7f:bc:33:03:70:d5:fa:67:9f:b4:25:24:d9:
                    e7:00:5a:f8:88:59:25:a3:93:77:a1:27:10:25:6f:
                    05:00:72:60:d0:f9:32:81:b9:cc:dd:d0:ab:e8:03:
                    8f:e8:e7:95:b5:ac:d4:fe:ac:e4:ce:43:b2:32:04:
                    7f:85:37:bb:a6:f3:88:a4:b2:9a:76:74:db:e7:63:
                    6d:ca:7c:0a:ad:d7:de:a7:fa:4c:29:96:a9:bd:51:
                    97:47:1d:02:77:5c:5b:57:6a:02:5f:3d:3c:af:2a:
                    6b:f7:ff:ef:c2:75:6d:d2:70:a9:44:49:53:01:42:
                    03:e9:19:5c:f4:43:66:0e:16:5b:b2:be:22:5c:94:
                    c8:69:f4:64:ea:ca:66:79:36:79:96:ca:61:82:17:
                    99:8a:3d:bf:f5:c2:35:52:14:f6:3f:13:70:46:76:
                    4b:a5:46:63:0f:0b:1f:d6:db:a6:07:eb:0f:e4:93:
                    77:2c:8a:f9:5d:54:6c:b4:b4:47:98:a7:1d:a8:7a:
                    01:1c:cd:f3:89:41:82:d7:47:04:10:76:60:ea:97:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:DF:8B:AD:A9:37:6E:4C:5D:17:BA:B7:D1:DB:23:D1:CC:BE:2B
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32312d3231203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:50:5f:96:69:c3:44:df:30:16:60:56:81:0b:f4:8d:59:94:
         71:28:13:61:77:8f:43:d5:15:e8:59:df:1f:63:a2:5b:bc:95:
         00:6d:c8:ed:cc:d3:e9:f0:9d:09:38:74:fb:b1:5e:2a:d3:36:
         7a:0d:37:1e:03:cc:3d:fd:51:50:5d:11:55:3a:d8:d4:a8:c5:
         e7:f0:dd:8a:cb:ef:e7:52:1e:0a:56:87:1b:bd:95:06:bb:4d:
         25:f4:a3:67:a5:52:09:c5:33:ed:d8:f4:3f:f1:c4:c2:c8:47:
         39:d8:cd:c1:13:49:6b:e6:4c:29:50:32:a0:b5:e2:ec:31:4b:
         0d:5f:d6:0a:db:06:2a:f4:cd:f9:cd:68:e4:41:d9:e6:9c:d5:
         43:2f:7c:91:db:f6:65:e0:e7:f9:83:89:1d:14:67:34:46:83:
         28:18:e9:42:98:4b:5f:c1:ff:e5:fc:cc:72:00:7d:d9:2d:7d:
         c8:13:ca:ca:aa:aa:a1:ab:42:9d:e9:0d:51:3d:16:fd:3e:e9:
         c2:fd:d6:a8:6e:ad:4c:72:8d:a9:c0:e0:95:52:b5:4f:fa:43:
         99:bf:f6:31:a9:6d:15:2f:33:ac:e1:86:6d:69:f8:e7:23:f0:
         a9:47:5f:27:c6:f1:88:34:d8:9a:8e:14:6f:1b:29:b7:f0:d9:
         50:4d:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----