This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32342d3234203d3e20323633303537.roa
File:                     3138362e3233322e34302e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          EDuNjvzFdJ5LCfoGFjBk0Fbj0JarVglbrKuvGd41AmA=
Subject key identifier:   12:73:33:22:A0:6B:4C:51:16:A0:AA:33:86:3A:E1:D1:DD:82:A5:CC
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       2CABDB63510FE907DD11CB7657EF72007B92AB59
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:24:56 +0000
ROA not before:           Fri 05 Sep 2025 12:19:56 +0000
ROA not after:            Fri 04 Sep 2026 12:24:56 +0000
asID:                     263057
IP address blocks:        186.232.40.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 14:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ab:db:63:51:0f:e9:07:dd:11:cb:76:57:ef:72:00:7b:92:ab:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:19:56 2025 GMT
            Not After : Sep  4 12:24:56 2026 GMT
        Subject: CN=12733322A06B4C5116A0AA33863AE1D1DD82A5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:29:c0:a4:ac:fe:0c:3f:f2:89:54:a3:d8:
                    55:4d:56:90:e2:d4:b1:f8:33:9b:44:44:14:75:21:
                    92:ab:b5:f1:ce:5f:d6:50:89:ab:1b:13:8d:4b:f2:
                    12:01:de:92:f3:c0:39:84:12:93:84:85:c5:68:92:
                    83:47:c7:f6:7a:bb:3f:5d:95:ff:b0:ae:6b:d6:54:
                    50:32:f3:57:04:6d:e4:51:c0:bb:d5:0c:08:63:71:
                    4a:e1:03:c2:83:9c:54:8e:0c:8e:37:75:48:bb:ce:
                    c2:89:5f:d5:fc:07:07:fb:9e:f3:4c:04:01:2c:7a:
                    57:5b:70:4b:74:05:3a:82:ed:b2:5f:af:b1:8b:34:
                    48:4a:11:ba:90:bc:88:1e:8b:d0:d2:13:81:48:b8:
                    44:f1:b9:cc:f6:9a:4f:81:02:50:f3:50:4d:b8:7f:
                    bd:37:0a:a6:8a:3d:a0:44:b4:38:3b:46:01:cf:6f:
                    26:9e:b8:53:15:0e:16:93:3d:49:5d:ec:52:c2:86:
                    09:f0:a4:07:79:e5:6b:49:46:e4:90:b2:60:2e:d4:
                    65:1d:64:34:05:6e:b3:56:46:0c:fa:0b:ec:79:51:
                    1e:18:65:ce:07:ff:be:04:e9:27:51:2c:a7:90:7f:
                    e2:b0:80:1e:8c:72:31:3d:e2:6d:c7:92:e2:a2:f8:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:73:33:22:A0:6B:4C:51:16:A0:AA:33:86:3A:E1:D1:DD:82:A5:CC
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34302e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:f5:4a:db:14:83:54:da:3f:29:3f:1b:45:61:bb:3f:2b:
         8d:50:42:1b:0f:1d:81:b0:c6:ad:a8:70:9a:ef:29:d8:b6:94:
         7c:43:06:cd:a2:95:41:ab:cd:12:85:cf:ef:74:43:55:f9:b7:
         f9:99:74:ac:7f:35:38:1f:2e:99:8f:ce:03:cd:da:6d:15:44:
         11:80:2d:ac:2e:fe:fe:8f:69:28:50:6a:94:e9:ed:2a:34:53:
         86:08:2c:5c:43:33:a1:34:3b:09:aa:7d:9d:e9:d3:25:a9:ca:
         c8:dd:bc:a5:d9:b1:3e:10:ce:a1:13:74:e6:a3:52:24:5f:cc:
         96:c3:7c:94:5c:30:5c:f5:03:42:2b:1b:d5:27:a0:eb:a2:dc:
         a9:94:34:98:80:10:2a:2f:d8:3e:51:ff:c8:fc:5d:56:72:20:
         fc:e6:4e:a4:20:85:4d:93:7c:f9:bf:48:c2:61:0a:ef:5f:8a:
         f9:f2:23:5f:e9:db:85:f2:6e:87:cb:d8:5c:4d:1e:6f:20:22:
         c6:41:0f:e7:8e:8a:db:e0:f9:60:3a:0d:14:e6:f5:eb:82:c5:
         49:5f:38:e2:66:aa:3c:87:92:58:43:bb:3f:ee:d6:0b:80:5c:
         5c:1c:d2:4c:35:49:4c:b9:fb:a3:1c:1b:f3:35:a0:e9:06:57:
         95:bb:3e:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULKvbY1EP6QfdEct2V+9yAHuSq1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0MEVENTM2N0FFOTNCRUI4RDZGRDJFOThCNkI5MTEx
M0NERDJCQzAeFw0yNTA5MDUxMjE5NTZaFw0yNjA5MDQxMjI0NTZaMDMxMTAvBgNV
BAMTKDEyNzMzMzIyQTA2QjRDNTExNkEwQUEzMzg2M0FFMUQxREQ4MkE1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNynApKz+DD/yiVSj2FVNVpDi
1LH4M5tERBR1IZKrtfHOX9ZQiasbE41L8hIB3pLzwDmEEpOEhcVokoNHx/Z6uz9d
lf+wrmvWVFAy81cEbeRRwLvVDAhjcUrhA8KDnFSODI43dUi7zsKJX9X8Bwf7nvNM
BAEseldbcEt0BTqC7bJfr7GLNEhKEbqQvIgei9DSE4FIuETxucz2mk+BAlDzUE24
f703CqaKPaBEtDg7RgHPbyaeuFMVDhaTPUld7FLChgnwpAd55WtJRuSQsmAu1GUd
ZDQFbrNWRgz6C+x5UR4YZc4H/74E6SdRLKeQf+KwgB6McjE94m3HkuKi+PndAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEnMzIqBrTFEWoKozhjrh0d2CpcwwHwYDVR0j
BBgwFoAUdkDtU2euk7641v0umLa5ERPN0rwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BCZ3hKZVhwNXJOYmRMMlNZYkVLR1VBZjVjdmhxTXpCRjNUN2RQbjNI
VW0vMC83NjQwRUQ1MzY3QUU5M0JFQjhENkZEMkU5OEI2QjkxMTEzQ0REMkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDBFRDUzNjdBRTkzQkVC
OEQ2RkQyRTk4QjZCOTExMTNDREQyQkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQQmd4SmVYcDVyTmJkTDJTWWJFS0dVQWY1Y3ZocU16QkYzVDdkUG4zSFVtLzAv
MzEzODM2MmUzMjMzMzIyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC66CgwDQYJKoZIhvcNAQELBQADggEBAFQr9Urb
FINU2j8pPxtFYbs/K41QQhsPHYGwxq2ocJrvKdi2lHxDBs2ilUGrzRKFz+90Q1X5
t/mZdKx/NTgfLpmPzgPN2m0VRBGALawu/v6PaShQapTp7So0U4YILFxDM6E0Owmq
fZ3p0yWpysjdvKXZsT4QzqETdOajUiRfzJbDfJRcMFz1A0IrG9UnoOui3KmUNJiA
ECov2D5R/8j8XVZyIPzmTqQghU2TfPm/SMJhCu9fivnyI1/p24XybofL2FxNHm8g
IsZBD+eOitvg+WA6DRTm9euCxUlfOOJmqjyHklhDuz/u1guAXFwc0kw1SUy5+6Mc
G/M1oOkGV5W7Pgw=
-----END CERTIFICATE-----