This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234302e302f32312d3231203d3e20323733363833.roa
File:                     3230312e38372e3234302e302f32312d3231203d3e20323733363833.roa (raw, json)
Hash identifier:          2pCmun1B4ljS+lOv7g6HidnIHMfZ+E7doho8xSpZr0Q=
Subject key identifier:   A3:DC:E3:2F:F2:6B:DF:5E:59:9C:7D:E5:00:D3:A8:07:A4:A6:94:A5
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       129D398F3FB834CB92093C2B5B2EEBB2CBA614C6
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234302e302f32312d3231203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:00 +0000
ROA not before:           Tue 09 Sep 2025 12:44:00 +0000
ROA not after:            Tue 08 Sep 2026 12:49:00 +0000
asID:                     273683
IP address blocks:        201.87.240.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Wed 01 Oct 2025 21:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9d:39:8f:3f:b8:34:cb:92:09:3c:2b:5b:2e:eb:b2:cb:a6:14:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:00 2025 GMT
            Not After : Sep  8 12:49:00 2026 GMT
        Subject: CN=A3DCE32FF26BDF5E599C7DE500D3A807A4A694A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:21:cc:90:7c:b1:58:57:8e:6d:ab:5b:61:
                    c1:28:d9:13:96:80:7a:01:1f:e0:5c:b1:a0:bf:8b:
                    aa:ce:4a:0b:b8:be:60:be:02:1f:01:4f:fd:bf:b3:
                    b8:6a:d9:d8:f7:9a:ee:3d:b0:9d:04:2a:ea:63:1c:
                    6b:d5:60:c5:44:35:17:b6:7a:e0:8e:b0:b3:8f:e4:
                    d9:90:06:63:3e:2c:74:5b:aa:a0:0a:35:5f:a1:c8:
                    23:ec:bc:8e:17:40:d1:d5:c1:e2:4a:ca:f5:5f:71:
                    be:10:6a:9f:9b:d5:e7:1d:87:d7:a1:8d:50:f6:75:
                    13:89:78:34:1c:b0:0b:f8:81:3d:f4:f6:33:dd:4c:
                    2a:77:fa:35:95:04:cd:df:ff:f5:f9:ec:3f:7e:58:
                    7d:c4:c2:b6:73:cc:73:1b:59:2d:b0:73:cf:e7:15:
                    c3:43:72:ad:13:12:ca:c7:95:3a:6c:52:7b:7e:38:
                    e3:a0:fc:7a:22:7c:82:1c:be:b4:8b:93:2e:8e:ca:
                    65:a1:de:83:c9:4a:e1:f0:dd:b8:8c:45:cd:1d:fe:
                    a2:e0:e8:8f:49:c5:bf:9f:e4:be:d1:29:52:64:46:
                    38:6d:d5:93:11:64:0b:72:45:0f:ed:91:5c:e3:48:
                    fa:a6:ac:41:79:20:a2:41:4b:80:46:f1:5f:02:02:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:E3:2F:F2:6B:DF:5E:59:9C:7D:E5:00:D3:A8:07:A4:A6:94:A5
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234302e302f32312d3231203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:b8:4e:51:31:43:39:ce:0c:f9:30:e1:b2:6f:d8:f5:7d:29:
         62:18:ca:41:5c:04:6b:b0:ac:d0:96:96:b6:d1:a4:66:90:5b:
         ef:56:9b:3f:cb:f3:6d:01:08:b7:e6:74:91:0a:5a:3f:c0:71:
         5e:48:15:60:1d:5c:bb:1b:f5:1e:e1:2c:00:66:70:c4:a8:65:
         f2:fd:4c:db:7f:4b:31:11:7e:ea:c3:d7:fb:24:68:82:bf:f1:
         14:34:ee:89:88:16:03:29:45:a4:51:de:9f:ab:46:7c:cf:c3:
         5a:dc:49:59:a3:bc:e6:0f:69:89:ae:6b:e6:7c:a5:9a:a7:e4:
         8d:af:c2:89:48:73:10:3b:a1:8d:09:55:e8:c9:c9:55:a9:1d:
         12:ed:5f:8e:26:0d:d2:a6:a8:23:c1:05:a9:5a:5e:4f:32:27:
         5d:ca:c7:e6:83:64:bd:31:37:52:cc:61:d8:79:6c:71:20:bd:
         b0:88:a7:a7:01:4b:fa:74:47:fe:d3:72:8d:4b:fe:8d:95:16:
         df:8c:03:a7:c7:ae:ee:0e:40:a2:8a:82:fe:46:14:c7:0b:29:
         16:c4:7d:d9:43:cd:48:2a:da:6b:b8:f6:cd:f1:d9:23:a6:85:
         b9:9c:5c:09:a3:55:e9:e0:f6:1d:f5:8f:dc:c4:7a:cb:a9:9e:
         0a:db:b0:d8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUEp05jz+4NMuSCTwrWy7rssumFMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTA5MDkxMjQ0MDBaFw0yNjA5MDgxMjQ5MDBaMDMxMTAvBgNV
BAMTKEEzRENFMzJGRjI2QkRGNUU1OTlDN0RFNTAwRDNBODA3QTRBNjk0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRSHMkHyxWFeObatbYcEo2ROW
gHoBH+BcsaC/i6rOSgu4vmC+Ah8BT/2/s7hq2dj3mu49sJ0EKupjHGvVYMVENRe2
euCOsLOP5NmQBmM+LHRbqqAKNV+hyCPsvI4XQNHVweJKyvVfcb4Qap+b1ecdh9eh
jVD2dROJeDQcsAv4gT309jPdTCp3+jWVBM3f//X57D9+WH3EwrZzzHMbWS2wc8/n
FcNDcq0TEsrHlTpsUnt+OOOg/HoifIIcvrSLky6OymWh3oPJSuHw3biMRc0d/qLg
6I9Jxb+f5L7RKVJkRjht1ZMRZAtyRQ/tkVzjSPqmrEF5IKJBS4BG8V8CAoEnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUo9zjL/Jr315ZnH3lANOoB6SmlKUwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzIz
MDMxMmUzODM3MmUzMjM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAPJV/AwDQYJKoZIhvcNAQELBQADggEBAD+4TlExQznO
DPkw4bJv2PV9KWIYykFcBGuwrNCWlrbRpGaQW+9Wmz/L820BCLfmdJEKWj/AcV5I
FWAdXLsb9R7hLABmcMSoZfL9TNt/SzERfurD1/skaIK/8RQ07omIFgMpRaRR3p+r
RnzPw1rcSVmjvOYPaYmua+Z8pZqn5I2vwolIcxA7oY0JVejJyVWpHRLtX44mDdKm
qCPBBalaXk8yJ13Kx+aDZL0xN1LMYdh5bHEgvbCIp6cBS/p0R/7Tco1L/o2VFt+M
A6fHru4OQKKKgv5GFMcLKRbEfdlDzUgq2mu49s3x2SOmhbmcXAmjVeng9h31j9zE
esupngrbsNg=
-----END CERTIFICATE-----