This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa
File:                     3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa (raw, json)
Hash identifier:          2T0ObRxo5BMGuagiajA9IIMVotrKZHgUC8Y0CTXt9eU=
Subject key identifier:   00:FA:C5:5D:D5:DC:6B:BE:96:CA:7F:35:46:30:E3:70:E4:EA:07:4C
Certificate issuer:       /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial:       0B7C8B100D0292BB66FD34B38AED9755922BA66A
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa
Signing time:             Mon 21 Apr 2025 19:31:58 +0000
ROA not before:           Mon 21 Apr 2025 19:26:58 +0000
ROA not after:            Mon 20 Apr 2026 19:31:58 +0000
asID:                     263445
IP address blocks:        177.91.164.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 16 Jul 2025 19:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7c:8b:10:0d:02:92:bb:66:fd:34:b3:8a:ed:97:55:92:2b:a6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
        Validity
            Not Before: Apr 21 19:26:58 2025 GMT
            Not After : Apr 20 19:31:58 2026 GMT
        Subject: CN=00FAC55DD5DC6BBE96CA7F354630E370E4EA074C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:12:f0:61:94:42:7d:dc:ab:0b:03:2e:c7:
                    9a:46:36:2b:e0:80:b7:0f:5a:62:99:ef:f1:5d:f3:
                    e0:7e:80:c3:cb:9d:21:98:c5:0a:d8:7c:d5:09:6a:
                    71:15:a5:ae:d2:40:d9:46:14:b3:a5:bd:7d:18:a6:
                    cb:4b:73:82:1a:86:90:7c:01:17:6c:73:b3:01:f4:
                    0f:f2:d6:0f:25:8e:b7:d0:f4:12:19:b1:9d:f1:82:
                    25:cf:cb:39:03:1d:cd:88:44:74:0e:4d:aa:c9:47:
                    97:b6:4a:5c:7d:79:4a:36:93:1f:1e:d4:49:98:87:
                    07:de:53:cf:c1:fc:4d:23:aa:0e:6f:56:7b:1c:f9:
                    8d:31:a5:62:b4:1e:8f:5a:56:ea:52:60:42:93:6d:
                    1d:39:c4:48:e8:bc:05:cc:64:47:87:cd:8f:8a:4b:
                    79:1a:b0:68:b4:81:9f:3f:bb:8a:4e:43:80:1e:6d:
                    3d:6a:f2:be:ac:fc:41:f5:a4:ce:e1:23:19:77:0a:
                    db:e5:cc:c3:c9:d1:ca:b8:e4:d9:1a:d8:16:25:d6:
                    ad:1f:f6:82:12:b4:5d:e0:e9:b2:7f:d9:a0:c4:ff:
                    18:d6:54:3a:11:0f:b3:a7:9f:f5:d9:7b:5d:f9:c1:
                    b3:87:26:d6:90:0c:18:8c:96:80:e0:d0:e8:61:fb:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FA:C5:5D:D5:DC:6B:BE:96:CA:7F:35:46:30:E3:70:E4:EA:07:4C
            X509v3 Authority Key Identifier:
                keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:b5:18:87:ec:95:0f:3a:18:41:a0:67:5d:a6:5d:3f:ec:
         ee:fd:1e:76:86:9f:1e:25:70:82:8d:6e:55:e9:3b:d7:a4:9b:
         6e:cf:e4:90:97:8d:33:cb:03:fa:0f:cc:46:22:fb:7a:39:f0:
         c7:5b:7a:d0:a5:49:6b:a8:4c:54:38:0c:df:21:dd:ba:f0:3d:
         b2:96:f5:59:09:10:48:cd:be:e6:02:72:18:0c:b9:b3:0f:92:
         c2:05:0c:bf:26:25:fa:0e:22:b8:37:17:1b:ef:81:c4:bc:94:
         b9:e9:78:77:7a:42:c3:d0:a4:04:f4:3b:33:73:e5:64:b5:ac:
         81:0a:e0:c9:f3:c1:25:e3:c6:70:d3:25:d9:70:e5:c3:82:2a:
         93:54:29:d2:22:4f:07:8f:e1:32:16:fe:3f:10:7f:86:ef:c7:
         a7:dc:eb:d3:87:89:8b:35:cf:18:3c:bc:97:c4:96:74:e1:26:
         8e:f6:d3:c1:21:ce:e7:ba:e8:0f:e9:b2:0c:45:b4:78:e5:df:
         42:01:c6:e9:72:b6:8e:ab:0c:d5:eb:74:b9:d3:bf:f1:cd:4b:
         7f:43:76:c2:76:4d:a5:84:f5:aa:9f:a5:15:a8:ce:55:97:fc:
         4b:7a:aa:a8:87:1c:9f:e8:90:38:b8:a5:4b:12:ce:63:7b:c3:
         6e:74:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----