This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/34352e3232362e3130342e302f32322d3331203d3e20323637303133.roa
File:                     34352e3232362e3130342e302f32322d3331203d3e20323637303133.roa (raw, json)
Hash identifier:          7RK03ieEv5Tfc+rwiS+AeFwd68oGj2d3NLjuUTSkmVk=
Subject key identifier:   20:7A:A9:35:D9:05:DC:95:21:C5:53:AD:6A:10:F4:3E:60:03:85:B8
Certificate issuer:       /CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
Certificate serial:       42365BEB6F22A192CC8B8AA024C5EB20D57863C6
Authority key identifier: 1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/34352e3232362e3130342e302f32322d3331203d3e20323637303133.roa
Signing time:             Wed 09 Apr 2025 20:44:19 +0000
ROA not before:           Wed 09 Apr 2025 20:39:19 +0000
ROA not after:            Wed 08 Apr 2026 20:44:19 +0000
asID:                     267013
IP address blocks:        45.226.104.0/22 maxlen: 31
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:36:5b:eb:6f:22:a1:92:cc:8b:8a:a0:24:c5:eb:20:d5:78:63:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
        Validity
            Not Before: Apr  9 20:39:19 2025 GMT
            Not After : Apr  8 20:44:19 2026 GMT
        Subject: CN=207AA935D905DC9521C553AD6A10F43E600385B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:e5:ad:7c:ed:8a:4a:00:fe:44:e0:7b:cc:
                    56:3a:e2:f8:8f:92:51:e5:e9:e4:b5:04:d6:7a:71:
                    fe:94:63:7d:72:e8:a7:62:72:97:06:60:18:36:e1:
                    d0:36:2a:9a:4c:22:52:fa:ae:5d:f1:60:b3:ba:ef:
                    a0:8e:14:56:d7:0b:40:89:dd:50:97:03:32:35:c9:
                    29:f9:79:16:84:c7:eb:a3:ef:fc:18:68:ab:f4:74:
                    66:de:fb:f5:82:80:38:67:54:c3:86:bd:a3:c3:fa:
                    a4:ad:81:b7:9a:e8:db:9d:a8:ac:c1:0a:97:aa:e3:
                    b3:f7:0a:1e:a1:87:ed:2f:c7:33:11:95:90:f8:46:
                    e2:f7:07:9c:24:93:d6:10:05:47:92:89:b2:c8:b3:
                    24:57:03:aa:82:ed:87:22:18:b9:8a:89:67:26:e3:
                    55:9c:cf:03:46:cf:6e:86:87:31:fb:eb:84:fd:c9:
                    a8:08:e4:56:d2:00:a8:6c:f1:b8:9d:35:4d:c6:a7:
                    ae:82:ad:36:19:55:9c:af:eb:c9:1c:77:b9:ad:f5:
                    8d:8e:8a:f2:fb:9b:d5:1b:da:32:b7:ae:94:22:a8:
                    3f:a3:fe:4d:e0:af:ab:ff:1d:cc:14:d5:8e:70:9e:
                    61:43:f0:90:bd:7b:64:95:24:4a:56:af:e7:84:ad:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:A9:35:D9:05:DC:95:21:C5:53:AD:6A:10:F4:3E:60:03:85:B8
            X509v3 Authority Key Identifier:
                keyid:1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/34352e3232362e3130342e302f32322d3331203d3e20323637303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:17:42:17:06:b9:0e:a2:2e:35:e8:ff:cc:c3:48:5c:e2:8b:
         10:44:92:d9:34:6e:de:cf:d7:83:cb:a2:e0:9c:1c:21:80:63:
         ff:cd:70:6d:cd:0c:84:07:e9:bf:a7:a6:ee:48:64:22:41:6a:
         12:16:84:2c:77:9c:35:68:2d:07:db:4b:68:16:5a:5b:90:a8:
         f1:55:9e:90:5d:dd:56:62:49:07:c6:f5:68:31:30:0e:08:aa:
         cc:45:e5:97:c7:7f:f1:7f:46:9a:07:dc:db:11:29:a6:00:9f:
         79:dd:97:19:86:5a:b0:ae:bf:e1:3e:68:e1:4d:e1:35:a9:31:
         56:05:60:ed:bc:94:86:c2:84:f6:18:83:9c:d5:fc:e5:88:e0:
         ee:da:4c:87:0d:d9:44:66:e8:b1:33:7d:ec:68:22:f9:75:6b:
         de:f5:49:16:01:e9:da:3a:66:7d:1a:4c:69:68:79:51:af:56:
         7e:0a:f1:9c:0c:9a:95:0c:18:e3:f6:0e:b8:b5:63:b4:22:4a:
         e9:26:7e:a1:15:5f:d0:82:74:58:66:e8:8a:e5:ce:32:3d:ca:
         e8:1a:1a:7d:4c:b3:a1:0a:0b:6b:d2:ad:81:fd:1c:97:28:69:
         2b:e5:2e:93:e8:d8:10:4f:36:4b:71:d5:4b:10:64:16:fc:31:
         a1:1e:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----