This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e35302e302f32342d3234203d3e20323633363334.roa
File:                     3137302e38312e35302e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          Qz/0O2Pn2Z5sgUsSZfb1hqjBLT+Qeh8/NOZyfc3DYV8=
Subject key identifier:   2C:F1:F4:D8:F8:00:AA:68:A4:B5:91:8A:D2:AE:23:6A:B9:F9:EF:86
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       1C29DCB35BD951539C56BAA9932A6565C1AFB3DE
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e35302e302f32342d3234203d3e20323633363334.roa
Signing time:             Mon 22 Dec 2025 18:34:36 +0000
ROA not before:           Mon 22 Dec 2025 18:29:36 +0000
ROA not after:            Mon 21 Dec 2026 18:34:36 +0000
asID:                     263634
IP address blocks:        170.81.50.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 23 Dec 2025 13:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:29:dc:b3:5b:d9:51:53:9c:56:ba:a9:93:2a:65:65:c1:af:b3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 22 18:29:36 2025 GMT
            Not After : Dec 21 18:34:36 2026 GMT
        Subject: CN=2CF1F4D8F800AA68A4B5918AD2AE236AB9F9EF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:51:45:2f:c1:25:6d:e3:1b:b0:7b:46:5e:
                    59:d9:63:75:cc:da:65:4c:f9:a7:db:13:89:4f:c8:
                    79:c4:a7:18:e7:d0:16:b2:ba:23:76:02:60:43:b5:
                    14:1f:bb:43:f7:5f:7e:f8:ed:64:d6:ad:65:32:d3:
                    c6:3c:7f:e2:e8:5b:e0:8b:b2:01:3b:0c:43:28:2b:
                    cc:f1:4c:46:f7:90:e2:cf:4f:a5:b9:46:08:c3:85:
                    45:da:11:55:28:22:4a:67:d7:fe:b2:dd:20:cc:5b:
                    aa:7e:50:98:18:83:a9:51:33:75:0e:b7:4e:63:34:
                    60:7d:c2:e7:7a:36:bc:ca:4b:23:f6:31:a0:7b:30:
                    71:88:e3:e3:d4:f6:17:ca:fe:59:17:b6:98:a2:d8:
                    68:0b:37:90:ff:35:de:0b:90:fd:bf:6a:f1:9b:3f:
                    e7:bf:aa:63:0c:51:85:f7:b6:3a:74:c2:a4:7f:62:
                    80:a4:aa:15:0c:75:7c:3c:03:6b:5a:c8:54:37:af:
                    e8:3d:5d:46:25:32:23:12:e6:db:61:95:9c:0a:71:
                    c3:65:8e:ca:6f:34:f5:0b:81:c3:fa:2c:36:e4:a5:
                    6d:0f:6e:69:9c:2c:56:ff:c4:b5:74:50:f1:5b:87:
                    5e:ce:1a:92:a0:66:45:e6:cc:0e:b5:ee:8d:9b:98:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:F4:D8:F8:00:AA:68:A4:B5:91:8A:D2:AE:23:6A:B9:F9:EF:86
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e35302e302f32342d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:4b:7a:7a:04:e0:e2:79:47:25:63:fd:4e:70:b5:89:9a:20:
         68:f3:46:8f:d7:b5:8b:1c:ba:a6:67:b0:a5:5d:49:a3:65:7d:
         3d:c4:66:46:58:bc:42:5f:78:dc:4b:67:aa:25:3e:98:67:f3:
         c3:85:4a:a5:63:a8:94:45:0d:28:34:bd:e4:36:ff:71:e0:d3:
         82:10:21:1d:e3:d8:f5:e8:65:d6:dc:0b:86:12:e7:fc:31:c8:
         63:79:4d:9d:8c:4d:5e:dc:b1:d7:32:d1:32:a6:55:60:dc:76:
         99:f8:8f:f6:40:21:b6:c3:10:bf:d0:6a:68:5c:53:d7:85:12:
         a7:22:70:72:0a:60:78:da:23:21:cc:0e:47:8b:09:eb:35:f7:
         fa:ef:7b:a7:ab:d8:e8:ac:e7:a3:6d:ed:10:34:0e:7e:6d:63:
         83:db:9d:fc:ec:92:3c:48:aa:e8:26:58:8e:e7:20:e5:f7:f8:
         31:a4:92:78:4c:6d:33:a1:cd:b1:9b:d7:92:63:e4:f0:39:04:
         bf:f3:6a:a5:fd:7d:a3:ac:c0:d5:d2:d3:f7:17:02:e6:1a:79:
         b1:c9:cb:11:9d:61:7d:9c:24:f6:15:de:62:81:be:79:aa:cd:
         ea:7d:a8:cc:33:67:4b:6b:07:bf:9d:3b:71:42:b8:7e:00:7e:
         2a:b8:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----