This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3233203d3e20323635393335.roa
File:                     3136342e3136332e32302e302f32332d3233203d3e20323635393335.roa (raw, json)
Hash identifier:          WDsAdzf1GTfwSCQozo68MxPfWHhH2y3WV9WITs/wY5U=
Subject key identifier:   F0:DD:2C:95:B0:99:EE:56:77:79:18:8C:CB:9C:79:8B:E0:5A:59:EE
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       78251EE32F3FEFE5336683DDCC81372C1897392D
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3233203d3e20323635393335.roa
Signing time:             Thu 06 Mar 2025 07:52:47 +0000
ROA not before:           Thu 06 Mar 2025 07:47:47 +0000
ROA not after:            Thu 05 Mar 2026 07:52:47 +0000
asID:                     265935
IP address blocks:        164.163.20.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 01 Aug 2025 10:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:25:1e:e3:2f:3f:ef:e5:33:66:83:dd:cc:81:37:2c:18:97:39:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Mar  6 07:47:47 2025 GMT
            Not After : Mar  5 07:52:47 2026 GMT
        Subject: CN=F0DD2C95B099EE567779188CCB9C798BE05A59EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:75:8b:c7:8b:dc:bc:9c:1f:2b:4c:c3:45:
                    a0:9d:4c:db:de:1f:6c:e0:90:46:3b:23:8e:3d:8d:
                    4d:fe:53:00:4f:af:e3:97:a6:c3:4d:11:14:72:a4:
                    98:e4:15:e9:f1:28:85:f3:a5:18:31:01:8b:3a:02:
                    b3:e5:cc:fe:2d:3b:ec:50:76:2b:73:a4:98:cd:14:
                    96:e5:08:bd:77:2f:4e:db:1c:bc:41:84:d2:35:8c:
                    e5:0a:f8:be:54:e2:08:ca:f3:ff:0c:33:57:72:83:
                    3d:4e:9e:93:3f:70:6f:f8:0d:e5:74:a1:bd:6c:50:
                    67:d3:4b:fb:68:fa:26:26:03:0a:b0:70:ff:31:be:
                    f6:0d:af:3c:1b:c5:c1:26:7a:a9:cb:af:45:b5:c8:
                    ef:ac:e9:48:bb:a1:17:f5:31:67:83:bb:7d:56:4c:
                    2a:67:03:e1:1e:69:c0:11:b6:bc:61:8e:8d:2f:5c:
                    9f:9d:77:48:0e:8a:81:16:af:07:ae:bf:52:f1:4f:
                    c4:37:a8:dc:66:8f:31:ed:e7:42:a3:3f:c0:3b:91:
                    69:8e:14:d4:23:e9:35:64:71:8c:72:35:db:93:54:
                    3d:15:36:d6:bc:c9:c8:39:96:e1:1b:15:76:47:ea:
                    21:f9:2c:b9:3d:85:93:4c:c7:ff:59:ed:10:16:83:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DD:2C:95:B0:99:EE:56:77:79:18:8C:CB:9C:79:8B:E0:5A:59:EE
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3233203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:ed:3d:ea:95:83:05:3e:48:df:43:b8:26:31:2c:f5:8c:
         c5:b6:ed:e7:e6:ac:9b:bc:d3:b9:05:bc:62:cc:a9:c8:ff:aa:
         67:3c:33:c1:89:38:bf:e0:fa:be:ab:48:b9:3d:69:ed:c8:4a:
         34:e3:56:3f:2c:b6:4a:9f:b1:d4:18:f5:a8:0c:d4:59:b3:00:
         22:15:d7:a3:15:e2:f4:d5:f6:2d:41:17:8a:22:e6:37:fa:af:
         88:5b:13:db:ff:92:33:0f:9c:fe:ad:67:de:2b:88:b4:54:e5:
         5d:34:67:ce:9a:01:3b:ff:39:cd:88:5d:cb:44:44:d6:1e:25:
         83:64:b6:93:24:55:31:3d:58:aa:10:cb:10:02:9d:77:d2:24:
         20:40:00:da:19:7d:b8:06:df:63:a7:58:55:60:b6:85:ec:05:
         c0:c8:b4:b2:15:5a:1a:ce:b8:f8:7b:f3:b0:37:0b:49:43:60:
         2a:85:aa:73:ea:cb:cc:ea:d0:76:42:2e:66:5a:15:06:03:83:
         7a:9c:65:52:a3:72:54:bd:91:74:c0:19:45:ee:e2:44:e0:7c:
         ea:6e:6c:82:fe:44:62:a7:31:56:68:44:b7:97:11:ef:3f:ec:
         dd:ce:9c:5d:a9:42:6c:0e:0b:9a:b2:38:c8:75:e6:7a:dd:e7:
         5b:e3:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----