This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234342e302f32332d3234203d3e20323730343137.roa
File:                     34352e3232352e3234342e302f32332d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          5L8U7VKx9GvXYoL54qiPMHUajywwtuJxTa23QSBebTc=
Subject key identifier:   05:15:7A:1D:68:B9:E4:DC:12:9D:00:96:FE:7C:86:DB:50:DE:2B:88
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       7D3A9D054F2A3048CA717AFE8E26FFF135DC1532
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234342e302f32332d3234203d3e20323730343137.roa
Signing time:             Thu 06 Mar 2025 17:33:27 +0000
ROA not before:           Thu 06 Mar 2025 17:28:27 +0000
ROA not after:            Thu 05 Mar 2026 17:33:27 +0000
asID:                     270417
IP address blocks:        45.225.244.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 13 Oct 2025 19:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3a:9d:05:4f:2a:30:48:ca:71:7a:fe:8e:26:ff:f1:35:dc:15:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Mar  6 17:28:27 2025 GMT
            Not After : Mar  5 17:33:27 2026 GMT
        Subject: CN=05157A1D68B9E4DC129D0096FE7C86DB50DE2B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:a8:88:b5:e0:e1:c3:21:af:dc:b5:ef:13:
                    a2:17:ae:47:79:f9:99:74:44:af:ea:ec:e7:e3:72:
                    3e:e9:22:bd:39:1d:76:71:f6:8b:f9:aa:b6:6f:ec:
                    9c:f3:ab:ae:53:ef:65:bf:9a:ba:f1:fc:85:43:98:
                    52:d3:4b:98:d3:3a:bd:0a:5d:ad:75:cc:74:9b:c6:
                    54:7d:6c:9c:71:9a:c4:41:d6:2f:48:1f:57:a3:9e:
                    8d:6b:f0:26:d4:b0:f8:ec:26:31:7b:9d:13:dc:06:
                    c9:08:54:95:f8:92:7f:8d:63:91:1c:62:45:38:8a:
                    e5:04:88:79:3e:0e:f6:f2:be:87:a0:34:c3:5d:9f:
                    e5:95:3a:23:b3:90:5d:ff:0d:5b:4a:6e:c2:b3:39:
                    11:f8:ea:76:17:68:f1:d1:49:71:93:fa:74:47:32:
                    05:c1:2a:53:3e:fa:ae:d4:4e:40:fa:02:2d:d7:c1:
                    a7:33:ca:d1:52:8c:7b:84:19:99:0b:4d:aa:89:2b:
                    b4:13:b1:fc:74:72:8c:5f:74:bb:12:50:e8:6c:9b:
                    7a:b3:e5:54:0a:38:0f:bd:b4:bc:4a:18:de:d1:9f:
                    a2:fd:17:45:33:91:5b:30:b0:d3:66:58:4c:d3:ed:
                    d0:1a:be:f0:48:23:5c:03:40:fd:63:79:d2:bf:ad:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:7A:1D:68:B9:E4:DC:12:9D:00:96:FE:7C:86:DB:50:DE:2B:88
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234342e302f32332d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:76:14:21:c5:37:cb:cb:8e:35:fc:62:cd:07:eb:32:1b:b5:
         f8:1d:43:08:fd:9a:40:5c:fd:6d:b5:bb:e6:78:5a:e0:88:c4:
         ef:62:4b:2b:fe:cb:2b:96:d3:7a:e0:74:c9:71:9b:1d:41:65:
         34:80:bc:11:be:ba:1a:80:59:d0:87:1f:f8:3e:08:b0:21:6e:
         86:6a:b7:8d:30:66:d7:50:69:aa:b5:0e:ea:4b:61:ac:b2:60:
         c7:05:8b:4d:ea:82:25:7c:dd:76:05:74:ee:4a:1e:9b:fd:4e:
         24:55:9e:6a:75:38:15:45:72:93:aa:19:a8:78:73:3a:6d:28:
         f7:02:a4:ed:0c:b5:32:8b:8e:76:e6:0d:9b:43:19:c6:17:9c:
         66:fc:32:bc:76:20:e5:dd:87:c4:a2:3d:33:1b:be:35:e4:25:
         ef:1a:b7:ec:59:ef:b3:87:7f:bd:10:7a:ea:38:f3:04:f5:40:
         38:7b:03:f5:63:27:50:65:3a:fb:cc:ee:83:aa:b3:95:10:3e:
         8e:b1:ab:f7:85:00:2f:3b:f4:36:f6:e3:54:0f:d7:64:5a:0b:
         f5:3c:23:d5:7a:92:2f:a0:01:03:03:34:19:c1:e4:7b:8a:0b:
         58:c0:0a:de:4f:74:f2:86:df:53:14:85:88:a6:ad:a3:74:9e:
         db:dd:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----