This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa
File:                     3137372e35352e3139322e302f32302d3234203d3e203238323130.roa (raw, json)
Hash identifier:          IodP28TKWkZIEuDHRw8/qIHKtllm8hMpLSY8XHucKYw=
Subject key identifier:   E0:AE:84:55:CE:F2:AF:0F:00:B2:9F:D9:8A:4A:9B:A2:B1:EC:87:E8
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       1D44A39A918C5479345BB5AEE4B34612221C4B29
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa
Signing time:             Thu 29 May 2025 20:56:45 +0000
ROA not before:           Thu 29 May 2025 20:51:45 +0000
ROA not after:            Thu 28 May 2026 20:56:45 +0000
asID:                     28210
IP address blocks:        177.55.192.0/20 maxlen: 24
Validation:               Failed, certificate revoked on Thu 11 Sep 2025 19:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:44:a3:9a:91:8c:54:79:34:5b:b5:ae:e4:b3:46:12:22:1c:4b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: May 29 20:51:45 2025 GMT
            Not After : May 28 20:56:45 2026 GMT
        Subject: CN=E0AE8455CEF2AF0F00B29FD98A4A9BA2B1EC87E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:d5:fe:f6:e5:8e:35:13:25:00:29:26:60:
                    0d:a1:28:62:11:fe:4d:d4:7c:c1:5b:3a:f0:ad:a9:
                    1c:c4:62:a6:63:c1:f2:9b:67:fc:85:ea:7c:c1:08:
                    94:c3:0b:9d:a9:b7:6d:fe:bd:10:22:2d:6f:4b:5e:
                    5b:3b:d5:c8:55:bc:37:c1:20:b9:3a:45:5d:0c:fa:
                    03:0d:21:e4:e5:0e:59:ae:38:39:1e:8c:0f:02:19:
                    2a:46:0c:1b:51:5c:a7:c3:47:69:28:3e:80:bb:96:
                    d0:4d:1e:6b:52:fe:b5:b5:22:2f:52:69:da:a3:e2:
                    39:b5:97:ca:bb:f6:4e:0a:9b:c9:9b:2d:ce:b3:e0:
                    b1:cb:9a:47:96:1e:b2:80:58:d1:f6:6f:b1:cc:71:
                    6e:6d:f8:72:f0:40:b5:f3:91:49:c2:d2:75:2a:79:
                    bb:da:5c:c2:8b:f3:74:20:c3:11:c4:27:2f:31:3c:
                    39:f5:94:70:76:3c:be:03:34:43:c5:74:f5:32:b1:
                    19:90:2c:28:f7:a3:1c:20:be:7e:94:c7:cc:e7:3a:
                    bd:c2:a1:2e:73:1d:3e:9b:38:82:0c:00:d0:a6:11:
                    94:e6:6a:ae:c2:43:97:08:eb:bd:1e:f3:fa:d3:77:
                    35:e6:24:73:80:3a:c6:cc:7e:cf:a4:5c:df:d6:fd:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AE:84:55:CE:F2:AF:0F:00:B2:9F:D9:8A:4A:9B:A2:B1:EC:87:E8
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:2b:33:36:7f:3e:8f:bd:4b:78:80:8b:68:0d:f3:fa:d2:d8:
         c4:aa:68:d7:e7:52:92:44:64:ac:26:28:3d:8b:fd:7f:b5:1f:
         9a:a9:5d:d6:82:14:dc:b5:93:f1:30:aa:8c:74:5f:77:5d:12:
         ec:ad:2b:94:b5:a3:80:3a:e2:4f:53:0c:22:c7:34:59:08:96:
         f4:94:27:4c:21:eb:ee:40:3d:8b:da:45:f3:b6:6e:3f:ca:3a:
         66:11:65:7c:91:d5:ce:9e:e6:a1:01:c5:fd:2f:79:2b:d2:21:
         39:4f:3a:f0:a4:71:29:28:28:46:61:36:a1:b6:45:5b:c7:7d:
         ed:95:a6:0c:a1:e0:a2:fd:b4:46:b7:88:3a:91:e0:88:18:50:
         f2:2f:17:b2:03:e1:37:18:e7:e5:ae:f0:00:ea:bc:a0:7e:a4:
         7f:5c:53:5b:90:1b:a2:06:cf:e3:91:ab:ce:4d:54:00:0f:52:
         3b:aa:a7:0d:58:c4:11:90:70:f6:5b:ca:31:12:33:45:87:7b:
         52:56:8f:ce:57:5a:9a:8c:ee:1d:e8:6b:2a:5e:26:ee:63:85:
         fd:93:97:3f:07:da:12:c5:8a:d3:68:0f:06:33:86:17:94:c1:
         f4:71:8f:68:e1:85:d6:5e:30:86:28:9d:4b:18:1e:f7:d1:cc:
         27:9a:db:6d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUSjmpGMVHk0W7Wu5LNGEiIcSykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNTA1MjkyMDUxNDVaFw0yNjA1MjgyMDU2NDVaMDMxMTAvBgNV
BAMTKEUwQUU4NDU1Q0VGMkFGMEYwMEIyOUZEOThBNEE5QkEyQjFFQzg3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5tX+9uWONRMlACkmYA2hKGIR
/k3UfMFbOvCtqRzEYqZjwfKbZ/yF6nzBCJTDC52pt23+vRAiLW9LXls71chVvDfB
ILk6RV0M+gMNIeTlDlmuODkejA8CGSpGDBtRXKfDR2koPoC7ltBNHmtS/rW1Ii9S
adqj4jm1l8q79k4Km8mbLc6z4LHLmkeWHrKAWNH2b7HMcW5t+HLwQLXzkUnC0nUq
ebvaXMKL83QgwxHEJy8xPDn1lHB2PL4DNEPFdPUysRmQLCj3oxwgvn6Ux8znOr3C
oS5zHT6bOIIMANCmEZTmaq7CQ5cI670e8/rTdzXmJHOAOsbMfs+kXN/W/RvtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4K6EVc7yrw8Asp/ZikqborHsh+gwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzNzM3MmUzNTM1MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsTfAMA0GCSqGSIb3DQEBCwUAA4IBAQBXKzM2fz6P
vUt4gItoDfP60tjEqmjX51KSRGSsJig9i/1/tR+aqV3WghTctZPxMKqMdF93XRLs
rSuUtaOAOuJPUwwixzRZCJb0lCdMIevuQD2L2kXztm4/yjpmEWV8kdXOnuahAcX9
L3kr0iE5TzrwpHEpKChGYTahtkVbx33tlaYMoeCi/bRGt4g6keCIGFDyLxeyA+E3
GOflrvAA6rygfqR/XFNbkBuiBs/jkavOTVQAD1I7qqcNWMQRkHD2W8oxEjNFh3tS
Vo/OV1qajO4d6GsqXibuY4X9k5c/B9oSxYrTaA8GM4YXlMH0cY9o4YXWXjCGKJ1L
GB730cwnmttt
-----END CERTIFICATE-----