This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31312e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          hMuPa/iC44lQyiWZxj3VfYuBiFgx5/WKPxwqIbQS9/0=
Subject key identifier:   45:09:87:AD:8A:B6:58:70:62:3B:B1:9A:22:CA:84:69:2C:5E:14:81
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       293DE4C4267A5A75FB1B9D2724BAD28914495F6E
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31312e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:09 +0000
ROA not before:           Thu 06 Mar 2025 03:12:09 +0000
ROA not after:            Thu 05 Mar 2026 03:17:09 +0000
asID:                     262663
IP address blocks:        186.216.11.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 17 Sep 2025 14:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3d:e4:c4:26:7a:5a:75:fb:1b:9d:27:24:ba:d2:89:14:49:5f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:09 2025 GMT
            Not After : Mar  5 03:17:09 2026 GMT
        Subject: CN=450987AD8AB65870623BB19A22CA84692C5E1481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:f7:7b:73:06:16:61:b0:8f:44:93:ed:18:
                    bc:d2:c9:47:0a:eb:4c:25:1d:53:f6:82:89:92:ae:
                    46:61:d6:05:d9:fd:b4:fc:3c:71:1f:16:6d:0e:6f:
                    e8:10:2e:bd:38:5c:b9:8c:d6:ca:89:21:94:24:59:
                    c8:66:25:02:b3:ac:1b:3b:ef:cc:ec:f5:49:3b:fb:
                    16:fd:63:68:c6:83:33:d8:2f:82:1e:0a:87:38:6d:
                    1e:ff:df:b5:0a:08:9d:bd:1d:e2:63:26:b4:4a:0b:
                    2a:d4:1d:c1:ff:e3:5d:d7:20:b3:92:ec:43:76:34:
                    04:6d:af:15:4d:6e:4b:9d:93:46:0a:8d:32:9d:36:
                    3d:74:a5:e0:78:1a:15:ce:60:39:a3:73:cf:b8:68:
                    b5:97:a0:dd:43:5d:06:f7:82:06:1e:7c:b7:a4:99:
                    b0:3d:72:b8:62:30:04:d1:7d:14:a8:bc:35:6c:cd:
                    cb:6c:76:55:e0:a8:cd:c3:63:17:1f:5b:89:2f:d9:
                    60:4a:16:82:43:03:47:ed:7e:18:a7:a3:b5:1a:9d:
                    9c:a6:52:73:1c:fb:f8:42:02:44:42:c6:96:77:be:
                    7a:a1:9f:80:5d:6f:60:35:54:5e:1d:95:9d:fb:84:
                    67:f4:04:d8:bf:04:fb:c4:a2:a2:bb:dc:0b:0f:8d:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:09:87:AD:8A:B6:58:70:62:3B:B1:9A:22:CA:84:69:2C:5E:14:81
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:98:b7:cd:44:97:bc:05:fd:5f:28:ad:c0:25:4c:02:b2:
         43:0c:86:ff:64:b9:0d:95:f9:d8:38:a4:6d:60:79:a9:d1:6f:
         29:cc:e1:e8:64:ad:d0:06:f6:9a:cb:62:87:fe:74:05:13:1f:
         3f:b5:58:ba:cb:d9:42:b7:40:5f:9f:5e:2d:f4:bd:e2:bc:94:
         b9:92:d4:10:a2:16:6a:e2:ed:7e:bf:56:89:e1:31:32:52:ae:
         f4:58:1b:af:d3:ac:12:e6:3b:db:8a:e6:04:92:55:0d:87:62:
         e2:d1:31:50:2a:5f:3f:0e:33:78:54:5a:3d:d6:f6:b9:b6:9e:
         d3:bb:e9:ca:45:1e:95:29:8c:3e:c3:6c:38:99:53:df:d7:68:
         10:8b:97:52:4b:05:e6:42:ce:7a:f5:af:56:e1:17:2a:ad:4a:
         cb:b1:e9:36:5d:2c:c8:e2:8e:bf:47:a7:f8:ae:ff:b5:9e:28:
         b3:70:89:bf:0d:54:8a:95:2d:01:96:cc:d6:39:eb:87:d0:a4:
         55:e5:26:5d:0e:41:05:3b:5a:fc:ea:3e:29:60:f2:af:d3:de:
         22:22:ca:09:e5:c5:c5:a4:18:5b:70:a2:df:97:77:49:77:6b:
         92:6c:21:78:7b:f9:57:af:3b:f6:11:f1:29:1a:f8:7a:75:f9:
         99:a1:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----