This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d3438203d3e20323733363839.roa
File:                     323830343a386162633a3a2f33322d3438203d3e20323733363839.roa (raw, json)
Hash identifier:          rUu1WD3v6rnQOV2P+/5JdTYMrXKT75iQg9qRjPCLRvI=
Subject key identifier:   F9:03:E6:26:F0:59:C7:E0:8F:7F:95:74:5B:3E:BC:F5:F2:4C:08:94
Certificate issuer:       /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
Certificate serial:       7001DD57864527CE1A3902C2C7E65503746A4F50
Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d3438203d3e20323733363839.roa
Signing time:             Wed 07 May 2025 19:31:18 +0000
ROA not before:           Wed 07 May 2025 19:26:18 +0000
ROA not after:            Wed 06 May 2026 19:31:18 +0000
asID:                     273689
IP address blocks:        2804:8abc::/32 maxlen: 48
Validation:               Failed, certificate revoked on Thu 09 Oct 2025 18:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:01:dd:57:86:45:27:ce:1a:39:02:c2:c7:e6:55:03:74:6a:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
        Validity
            Not Before: May  7 19:26:18 2025 GMT
            Not After : May  6 19:31:18 2026 GMT
        Subject: CN=F903E626F059C7E08F7F95745B3EBCF5F24C0894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:98:f5:0a:a8:e0:fc:3c:0b:0b:1f:bd:37:
                    9b:b0:40:e6:c5:b4:6e:d6:f9:57:98:a9:72:66:cf:
                    c4:84:f4:d7:aa:d6:18:1d:ce:4b:85:a4:c8:49:01:
                    b2:c2:77:36:ac:62:ed:4f:48:24:ac:9f:67:62:9c:
                    4b:6d:b4:6d:2f:a3:19:eb:76:e0:47:03:b6:2d:a1:
                    39:0c:87:3d:fa:03:b9:26:3f:60:e7:fb:a6:53:c0:
                    f1:ad:3e:3e:8a:7d:31:98:df:28:81:9a:5f:c7:2e:
                    de:3d:4d:5e:40:3f:58:93:f6:ca:cb:c4:67:97:26:
                    87:3c:41:e5:51:09:2f:35:97:20:90:62:55:02:34:
                    12:27:6e:88:3c:11:12:7d:d5:3d:96:f0:69:db:f2:
                    90:83:8f:3b:c8:00:74:9c:89:51:e4:43:c2:dc:26:
                    5c:0c:d4:8e:de:fd:40:27:ea:55:26:0b:8a:6e:0f:
                    3b:20:29:b9:94:8b:2d:eb:58:0a:74:8e:74:e9:c4:
                    7f:33:dc:61:c9:25:5e:51:b6:58:4f:05:9e:93:ea:
                    49:8c:3e:e1:33:d9:01:c3:55:56:c2:5c:7b:40:fc:
                    48:88:05:fb:c2:2c:20:b1:4f:ad:c4:1d:3b:d8:c1:
                    b4:ee:94:b8:da:5f:e6:67:cf:e1:a7:bd:09:70:87:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:E6:26:F0:59:C7:E0:8F:7F:95:74:5B:3E:BC:F5:F2:4C:08:94
            X509v3 Authority Key Identifier:
                keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d3438203d3e20323733363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:e8:8b:00:9b:2b:a8:63:ba:3a:a8:d0:41:85:6b:e6:a2:
         4f:3e:d3:ab:d9:89:54:78:6d:5f:22:fa:96:a8:61:2e:d8:f1:
         46:03:a0:b6:51:32:6d:47:fd:7c:35:a5:ba:a8:cd:ab:db:f7:
         9e:a4:31:08:c7:36:69:54:b3:b6:79:d9:f6:3d:96:9a:18:e7:
         7a:a1:e5:c4:1c:f2:b0:2c:d8:65:fa:65:dc:c6:5b:81:f3:fb:
         72:0e:79:fd:6b:db:65:d6:fd:2a:c2:91:67:48:78:44:a3:a8:
         ba:89:52:01:ef:91:19:05:c0:b0:8f:69:48:f4:90:11:2f:c3:
         8d:b2:4f:ae:b4:9b:3d:01:7f:9a:26:3c:d9:c9:ca:55:8f:a6:
         f9:b4:8e:a2:0d:2b:28:a5:b9:62:a6:54:36:f9:db:85:a5:2e:
         df:99:c1:80:40:c5:63:9c:a7:97:c4:4c:25:a9:25:c4:95:09:
         6d:e9:36:11:3e:36:ce:7e:b1:51:98:07:80:36:9f:09:db:9e:
         80:41:97:03:b4:87:a1:08:24:63:81:57:5a:4b:39:9b:66:0f:
         0c:2a:b7:c8:4b:b0:53:22:24:3e:45:e9:58:da:99:02:47:95:
         11:92:63:ae:a9:62:42:b7:b4:ad:ef:48:74:82:5b:27:c9:e6:
         9c:c4:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----