This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333830303a3a2f33372d3337203d3e20323633363334.roa
File:                     323830343a313036383a333830303a3a2f33372d3337203d3e20323633363334.roa (raw, json)
Hash identifier:          CrRVGlFV4t0h+OiFab+tWYpqTL+vQuNg7WamWr851i8=
Subject key identifier:   72:85:BC:35:3A:80:EE:E7:37:43:88:34:64:AE:F9:CB:3E:30:35:46
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       1A4250DBBB4B8CE6CCB1CE37494FF68ABCC2BD22
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333830303a3a2f33372d3337203d3e20323633363334.roa
Signing time:             Mon 22 Dec 2025 18:34:34 +0000
ROA not before:           Mon 22 Dec 2025 18:29:34 +0000
ROA not after:            Mon 21 Dec 2026 18:34:34 +0000
asID:                     263634
IP address blocks:        2804:1068:3800::/37 maxlen: 37
Validation:               Failed, certificate revoked on Tue 23 Dec 2025 13:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:50:db:bb:4b:8c:e6:cc:b1:ce:37:49:4f:f6:8a:bc:c2:bd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 22 18:29:34 2025 GMT
            Not After : Dec 21 18:34:34 2026 GMT
        Subject: CN=7285BC353A80EEE73743883464AEF9CB3E303546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:55:5a:71:e0:a7:8e:42:4c:ac:bb:22:b6:
                    23:7b:fc:39:b6:e6:44:c9:24:0c:3f:f1:a8:1d:be:
                    57:fe:1a:c8:0f:6c:d7:d8:7f:db:85:72:8e:e9:c0:
                    78:a5:7b:b3:3c:79:83:6a:76:bb:42:ea:bd:c8:16:
                    ed:e0:2c:eb:f3:60:65:25:df:fa:8f:08:0a:29:bb:
                    cf:24:9a:09:6f:b1:2a:14:db:0d:85:fd:6a:d3:49:
                    29:86:24:4a:f4:e3:ce:71:08:1a:73:c0:d8:04:6f:
                    07:97:e4:10:7f:94:4c:19:2f:43:70:00:9b:35:b0:
                    45:d0:fe:a6:ff:ef:f8:a0:1a:b0:99:61:07:97:35:
                    08:82:95:9d:bf:74:21:3a:92:6d:15:ce:df:df:93:
                    48:97:c8:3b:77:a1:40:0b:44:36:88:87:13:cc:bf:
                    58:c9:af:9b:07:85:35:24:dd:b5:3f:5f:bd:69:cd:
                    32:31:3b:ec:2e:e1:04:6d:9a:1e:e4:dd:ff:b4:18:
                    9f:80:5f:3b:41:02:7f:e3:a4:e2:d4:0c:6d:39:2f:
                    0a:e9:cd:e8:c2:8f:c9:d1:8b:d5:ce:e1:62:b5:d4:
                    d5:49:b0:f3:5b:c9:4c:11:44:00:35:46:7b:0b:c3:
                    92:4e:c3:13:a9:34:62:87:52:c9:f7:43:e5:8c:9f:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:85:BC:35:3A:80:EE:E7:37:43:88:34:64:AE:F9:CB:3E:30:35:46
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333830303a3a2f33372d3337203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:3800::/37

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:3f:3c:6a:fc:2a:97:47:09:50:09:19:e3:44:46:13:38:
         42:21:f4:52:f9:22:8e:32:92:dc:ad:e6:44:0b:c1:1d:63:41:
         f8:c9:54:b0:bc:b5:f3:82:f8:6c:01:45:5d:cb:cf:67:11:e9:
         cc:b9:c0:f2:7b:cd:8c:1a:15:bb:33:49:1c:e3:82:91:42:42:
         4e:fb:82:4d:d4:a0:2f:50:4f:b2:48:c6:95:e0:30:c7:4e:52:
         28:b7:fd:49:ae:eb:1b:1e:b6:c2:11:43:32:7f:38:ff:33:ea:
         f1:b9:c1:45:4d:03:27:6e:83:23:87:e1:3b:06:b3:f5:08:28:
         c1:6d:97:90:d4:0d:23:14:40:18:d1:67:12:e8:4d:59:c9:4f:
         6c:a0:1b:52:ce:65:4a:0f:17:d1:d1:9e:13:66:3d:f9:c9:f0:
         c4:e1:ca:9f:76:41:fd:23:b7:13:f3:21:76:76:45:2a:35:21:
         be:2e:67:ca:ce:db:6a:64:a2:3c:d4:1c:d6:0b:1a:c5:48:9a:
         66:49:5f:f1:82:8f:db:ce:79:20:ea:ac:b3:42:35:d4:fd:69:
         be:df:cc:33:81:44:4b:2f:f5:5d:33:48:62:c6:ca:58:7e:ed:
         5f:6f:26:e1:07:78:ce:44:e4:12:6d:de:df:97:23:79:8d:81:
         19:b1:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----