This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/323830343a366262303a3a2f33332d3333203d3e20323730343137.roa
File:                     323830343a366262303a3a2f33332d3333203d3e20323730343137.roa (raw, json)
Hash identifier:          4210K9mOQWYb2+Kb+pUkoJoVYTK5GFn4u5TenQFTIxI=
Subject key identifier:   B2:D5:6E:82:6C:47:F6:14:BF:FD:37:76:1A:9E:7D:E0:97:6C:B7:1E
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       689C3CF09FBA5C63548613EAD27A25584E78BFFB
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/323830343a366262303a3a2f33332d3333203d3e20323730343137.roa
Signing time:             Mon 13 Jan 2025 14:11:17 +0000
ROA not before:           Mon 13 Jan 2025 14:06:17 +0000
ROA not after:            Mon 12 Jan 2026 14:11:17 +0000
asID:                     270417
IP address blocks:        2804:6bb0::/33 maxlen: 33
Validation:               Failed, certificate revoked on Mon 13 Oct 2025 11:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9c:3c:f0:9f:ba:5c:63:54:86:13:ea:d2:7a:25:58:4e:78:bf:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Jan 13 14:06:17 2025 GMT
            Not After : Jan 12 14:11:17 2026 GMT
        Subject: CN=B2D56E826C47F614BFFD37761A9E7DE0976CB71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:a7:e1:da:e6:5c:1d:14:dd:f8:1d:a9:5c:
                    9f:96:f8:03:11:d0:99:cf:f7:f7:d7:90:7b:a1:c5:
                    cf:9e:9f:34:49:99:e9:14:4e:ae:4d:cc:fc:4c:36:
                    3e:7b:cc:fa:de:52:74:88:7e:51:8f:1d:ef:3c:f5:
                    ad:57:f8:9b:54:c2:cd:3d:5b:9c:78:5e:23:4c:eb:
                    f3:1b:d7:a5:1e:28:60:32:6a:8d:00:10:c7:88:e3:
                    66:78:b8:bc:fa:4d:16:aa:e7:02:70:5b:f9:d5:48:
                    5d:d9:79:d2:c4:4c:87:7a:54:93:48:bf:46:f4:e1:
                    bb:9f:6f:c8:01:81:02:e2:1b:b0:69:57:9b:24:f5:
                    6e:c3:15:e1:b1:64:38:93:df:59:b7:1e:32:73:d2:
                    84:02:b6:bb:e8:d5:24:0d:c8:4a:31:91:88:0d:04:
                    b1:d6:4d:6a:16:cd:c9:1a:dd:49:9b:d6:8e:31:8b:
                    76:81:44:f4:85:5a:0b:55:54:b7:31:ba:90:eb:07:
                    ef:97:eb:85:d7:3a:b8:fa:5e:93:64:01:b3:62:22:
                    b6:a3:f4:96:a0:58:6e:3f:95:50:f2:56:be:69:10:
                    b5:82:2e:00:03:00:aa:90:3a:1b:37:bd:91:e0:c0:
                    4a:fb:d5:8a:f2:aa:ea:c1:a9:42:71:6d:f8:a6:cd:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D5:6E:82:6C:47:F6:14:BF:FD:37:76:1A:9E:7D:E0:97:6C:B7:1E
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/323830343a366262303a3a2f33332d3333203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:b5:69:ba:6d:3e:fa:99:31:0a:38:73:58:d6:1f:6c:75:fe:
         b2:5d:8a:a2:2e:2d:98:d1:fc:5e:01:93:4c:20:2e:89:4c:67:
         54:9e:28:b6:ab:70:30:3d:d1:62:f7:49:0a:a2:8f:7c:d0:ff:
         bb:bb:3d:57:f9:94:0a:cb:b1:3e:02:5b:72:dd:32:aa:f8:e7:
         56:ee:a0:98:f5:40:3d:c3:84:6c:45:eb:e1:6b:0b:c1:c0:3d:
         8c:f9:3b:d3:02:6d:e7:65:e0:a1:85:7e:3c:4e:29:fb:83:f8:
         e5:05:5e:22:17:a7:22:76:05:ad:1f:c0:4b:40:69:bf:96:ba:
         49:6e:e3:4d:c9:c1:56:2b:77:40:ee:9b:2d:13:56:05:b1:84:
         75:1c:de:49:e8:79:2a:ef:79:16:15:0e:bd:67:57:fd:68:f9:
         c4:99:99:e0:1b:94:b5:84:3d:2a:87:78:9d:e4:b0:ac:e7:7c:
         90:cb:2f:77:70:d1:3f:b3:82:5a:0d:ff:f6:0a:01:cd:55:af:
         35:60:da:90:51:5e:b9:c3:b3:81:6b:0c:a5:79:dd:4c:be:0e:
         12:41:aa:84:19:eb:59:d8:1e:d9:7d:70:96:49:06:93:e5:e8:
         df:9d:fe:a2:db:28:88:9a:28:69:ca:60:d3:68:69:3f:c7:ee:
         d4:ee:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----