This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa
File:                     323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa (raw, json)
Hash identifier:          uYnyOiCFdcAFee7XYDSzdPox0Z1i0fHaboMJZz1Eh98=
Subject key identifier:   6D:A7:57:41:BC:24:E2:53:98:1D:E0:31:E9:C5:83:AB:3C:26:8E:6F
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       4D462AC84EE75733FDC22225A68041B0E13A1E14
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa
Signing time:             Mon 22 Dec 2025 18:34:36 +0000
ROA not before:           Mon 22 Dec 2025 18:29:36 +0000
ROA not after:            Mon 21 Dec 2026 18:34:36 +0000
asID:                     263634
IP address blocks:        2804:1068:2000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Tue 23 Dec 2025 13:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:46:2a:c8:4e:e7:57:33:fd:c2:22:25:a6:80:41:b0:e1:3a:1e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 22 18:29:36 2025 GMT
            Not After : Dec 21 18:34:36 2026 GMT
        Subject: CN=6DA75741BC24E253981DE031E9C583AB3C268E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:83:79:43:c2:37:29:7c:a5:ef:e2:ae:1d:
                    d4:dc:c7:47:04:86:ae:57:71:8c:5d:0f:c6:5e:a2:
                    75:22:ac:e7:6f:22:e5:84:e8:05:1c:b9:cc:cb:cf:
                    df:01:ef:10:8b:a3:e5:87:c0:ce:f7:81:9c:88:40:
                    0f:a6:40:7e:bb:01:f0:a6:01:f8:41:1f:1a:42:7c:
                    ce:d5:83:fd:74:5a:d4:63:c6:49:84:ec:9b:4f:e2:
                    29:84:50:12:cf:0f:27:44:37:e7:99:65:14:f6:5c:
                    70:75:29:23:0d:51:90:f5:85:87:87:d0:10:9b:57:
                    ef:6d:f0:66:97:8e:3c:af:b8:0e:ee:35:bc:86:31:
                    ee:17:6c:ce:de:be:2b:37:91:bb:7b:25:68:bb:c4:
                    c3:4c:f4:3c:e4:e6:20:72:bd:30:dc:a1:15:65:b3:
                    87:79:4f:49:3d:71:56:79:75:70:17:45:b0:49:1d:
                    7a:6a:0c:b0:41:1c:0a:9f:eb:56:e1:8a:7e:d5:1b:
                    a3:54:eb:7d:c2:64:df:f4:7f:68:2b:af:d4:35:eb:
                    8b:7d:d8:83:53:5d:26:c7:ce:93:b5:fb:28:c0:d5:
                    af:a8:57:ce:a4:da:66:9e:d6:e8:c6:c7:bf:fc:52:
                    68:5c:56:c5:6d:73:89:f9:cb:e5:c5:5a:1d:07:98:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A7:57:41:BC:24:E2:53:98:1D:E0:31:E9:C5:83:AB:3C:26:8E:6F
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:37:01:26:1b:52:84:f6:ff:5e:c9:60:af:08:78:37:29:
         c5:61:ea:f4:29:de:de:77:33:be:44:54:51:ee:6f:23:4c:82:
         c5:14:17:09:56:2f:79:4c:33:af:ff:db:0b:91:0a:58:7c:8e:
         32:eb:fa:19:8f:4d:63:75:95:87:83:e8:07:dc:c1:e7:ed:92:
         f0:36:c1:04:1d:de:d5:58:3c:1a:ca:64:c5:a3:7d:1d:79:ce:
         b1:59:f5:59:e8:74:85:25:6d:db:91:df:c7:5b:9a:35:92:2a:
         6b:a8:0d:37:73:3c:cf:7b:0c:35:a8:e0:78:05:89:9d:8c:0f:
         58:10:4a:e8:29:4f:d9:92:99:43:41:7e:ae:0c:14:63:01:07:
         74:56:de:f2:a9:9c:3d:2b:82:e6:04:1d:3e:da:a1:ec:96:6d:
         ee:38:da:c0:d2:ca:95:fc:e2:e9:3f:ed:7b:17:33:c2:91:e2:
         c1:71:15:ab:15:9d:1d:37:a9:c8:21:88:52:48:87:9b:a5:04:
         89:89:7e:e0:24:9a:67:20:21:fc:35:61:3d:a5:d1:66:c1:34:
         82:3b:b2:70:17:14:59:c1:8b:f9:86:a3:ed:fb:06:5f:b5:95:
         fb:d8:66:d2:65:38:c7:0f:43:06:c8:f1:0b:a8:1a:1b:48:36:
         64:06:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----