This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32332d3233203d3e20323638333439.roa
File:                     34352e3233392e342e302f32332d3233203d3e20323638333439.roa (raw, json)
Hash identifier:          DStVdQzvyolbI5UnIztHfiUivqJ7h4w08bNhUXSPKBs=
Subject key identifier:   AF:2D:5B:4C:F4:F9:24:F1:2A:78:C7:05:1D:13:51:21:C7:60:D5:38
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       03AECB041E1D3D440902B1D14113C552ED3D9F13
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32332d3233203d3e20323638333439.roa
Signing time:             Wed 02 Apr 2025 21:52:59 +0000
ROA not before:           Wed 02 Apr 2025 21:47:59 +0000
ROA not after:            Wed 01 Apr 2026 21:52:59 +0000
asID:                     268349
IP address blocks:        45.239.4.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 25 Jul 2025 22:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ae:cb:04:1e:1d:3d:44:09:02:b1:d1:41:13:c5:52:ed:3d:9f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: Apr  2 21:47:59 2025 GMT
            Not After : Apr  1 21:52:59 2026 GMT
        Subject: CN=AF2D5B4CF4F924F12A78C7051D135121C760D538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:a8:89:98:0c:bc:11:2a:cd:76:e0:98:08:
                    2a:db:fb:ee:76:ca:d4:57:8a:dc:ec:0e:b1:73:10:
                    fe:bb:5b:3f:0f:58:b6:85:f0:63:a5:50:42:3b:12:
                    45:13:47:93:db:fd:b6:0b:74:1e:e1:b1:ce:ab:25:
                    af:8e:90:f0:02:49:dd:86:b5:88:b3:e3:2d:4c:03:
                    4c:f6:2f:67:ec:1d:c0:b3:8e:a6:73:47:34:89:b7:
                    49:28:e8:ad:c1:2a:04:53:13:2d:1e:8c:84:ad:ad:
                    f9:f3:08:ca:70:d3:50:28:66:93:c0:cb:b3:e4:02:
                    62:cb:49:c2:0b:29:a4:d1:62:4f:df:19:f4:06:ff:
                    da:0b:05:43:46:98:5b:2d:e1:ec:f9:21:51:f5:09:
                    7b:79:6d:ac:0d:ec:5d:bd:8e:20:44:2d:56:28:b7:
                    41:3f:7e:58:13:e8:b5:59:5f:d7:aa:45:59:5a:c4:
                    aa:fa:78:2b:fa:9a:95:67:fc:7b:b7:9d:cd:50:58:
                    50:7c:56:f8:f6:0f:20:74:e5:1f:3d:20:7b:00:5b:
                    a8:89:aa:47:d7:e9:7a:01:d9:3a:0a:26:4e:d4:3a:
                    95:48:7e:bc:57:53:6f:49:f9:a0:20:36:02:b2:8a:
                    30:90:44:85:32:30:4d:d4:35:68:ea:e0:35:5a:fb:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2D:5B:4C:F4:F9:24:F1:2A:78:C7:05:1D:13:51:21:C7:60:D5:38
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32332d3233203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:e2:52:99:c6:07:2a:fd:23:2e:03:36:90:7b:f5:c1:b4:
         75:eb:3f:d7:bf:b2:00:a8:5b:02:5f:8b:da:ff:66:13:82:b0:
         4e:24:eb:50:6b:83:d1:71:5e:16:66:ff:dd:3b:23:86:80:9f:
         2a:15:2b:31:66:15:33:16:67:b9:c9:24:5f:e4:0b:7f:2a:d8:
         db:fd:e4:97:84:b7:7f:0a:df:e8:89:99:02:e0:16:28:f2:5d:
         f7:cd:55:7d:81:c2:ee:d6:93:c6:28:13:97:d0:09:64:60:a7:
         b2:db:80:54:68:a8:4f:4e:a0:e5:a9:1c:cf:1d:8f:9c:4c:a6:
         d2:a1:16:32:0c:7a:4c:3f:27:28:96:d9:b1:15:1d:5a:3a:e6:
         67:69:f1:ad:25:6a:08:e7:14:11:53:0a:2a:c7:19:ff:30:0d:
         b6:9c:aa:3f:6d:f3:e5:3d:19:98:d2:78:5c:ab:55:e4:1d:ff:
         3f:03:1c:0a:fc:99:1b:63:d2:55:85:52:92:4a:89:93:e3:f3:
         5e:33:6b:3d:2c:ab:25:11:76:68:a1:40:37:bf:ec:9d:1d:e1:
         bf:00:ce:0a:7e:85:b1:a8:e1:a3:65:cb:f6:0b:12:f9:0f:61:
         2c:10:66:b1:86:42:82:ca:de:29:9b:e1:9a:2d:22:b8:54:83:
         d3:d6:5f:13
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUA67LBB4dPUQJArHRQRPFUu09nxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIxMzg1MDU1RDRCQTAwQUYxRUMzN0FGNTNDOTFDMDAz
QjZBNUY4QTAeFw0yNTA0MDIyMTQ3NTlaFw0yNjA0MDEyMTUyNTlaMDMxMTAvBgNV
BAMTKEFGMkQ1QjRDRjRGOTI0RjEyQTc4QzcwNTFEMTM1MTIxQzc2MEQ1MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMqiJmAy8ESrNduCYCCrb++52
ytRXitzsDrFzEP67Wz8PWLaF8GOlUEI7EkUTR5Pb/bYLdB7hsc6rJa+OkPACSd2G
tYiz4y1MA0z2L2fsHcCzjqZzRzSJt0ko6K3BKgRTEy0ejIStrfnzCMpw01AoZpPA
y7PkAmLLScILKaTRYk/fGfQG/9oLBUNGmFst4ez5IVH1CXt5bawN7F29jiBELVYo
t0E/flgT6LVZX9eqRVlaxKr6eCv6mpVn/Hu3nc1QWFB8Vvj2DyB05R89IHsAW6iJ
qkfX6XoB2ToKJk7UOpVIfrxXU29J+aAgNgKyijCQRIUyME3UNWjq4DVa+ztrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUry1bTPT5JPEqeMcFHRNRIcdg1TgwHwYDVR0j
BBgwFoAU8hOFBV1LoArx7DevU8kcADtqX4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0czYmc1Q291aVFmdFJYTExnRGRGbUpoeExqREo4YkNRNGRzekRhelho
MUcvMC9GMjEzODUwNTVENEJBMDBBRjFFQzM3QUY1M0M5MUMwMDNCNkE1RjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMTM4NTA1NUQ0QkEwMEFG
MUVDMzdBRjUzQzkxQzAwM0I2QTVGOEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHM2JnNUNvdWlRZnRSWExMZ0RkRm1KaHhMakRKOGJDUTRkc3pEYXpYaDFHLzAv
MzQzNTJlMzIzMzM5MmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzODMz
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS3vBDANBgkqhkiG9w0BAQsFAAOCAQEAioviUpnGByr9
Iy4DNpB79cG0des/17+yAKhbAl+L2v9mE4KwTiTrUGuD0XFeFmb/3TsjhoCfKhUr
MWYVMxZnuckkX+QLfyrY2/3kl4S3fwrf6ImZAuAWKPJd981VfYHC7taTxigTl9AJ
ZGCnstuAVGioT06g5akczx2PnEym0qEWMgx6TD8nKJbZsRUdWjrmZ2nxrSVqCOcU
EVMKKscZ/zANtpyqP23z5T0ZmNJ4XKtV5B3/PwMcCvyZG2PSVYVSkkqJk+PzXjNr
PSyrJRF2aKFAN7/snR3hvwDOCn6Fsajho2XL9gsS+Q9hLBBmsYZCgsreKZvhmi0i
uFSD09ZfEw==
-----END CERTIFICATE-----