This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32382e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          zzh1r1KbEFv/xBCi+zmg08jRUGoN8Qk+zTm5PVpjoCc=
Subject key identifier:   31:4E:7F:AC:62:25:7F:F4:BE:34:77:74:70:40:49:7F:8F:7E:E6:4F
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       22A4F70FC22E8DD6121546F40FF145B0A4CA222F
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:57 +0000
ROA not before:           Thu 06 Mar 2025 03:11:57 +0000
ROA not after:            Thu 05 Mar 2026 03:16:57 +0000
asID:                     262663
IP address blocks:        186.216.28.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 17 Sep 2025 14:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a4:f7:0f:c2:2e:8d:d6:12:15:46:f4:0f:f1:45:b0:a4:ca:22:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:57 2025 GMT
            Not After : Mar  5 03:16:57 2026 GMT
        Subject: CN=314E7FAC62257FF4BE3477747040497F8F7EE64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:16:7f:a7:55:a7:62:49:26:89:be:a9:18:
                    2e:e9:6f:a8:0b:ba:39:75:07:a6:ea:35:de:19:98:
                    f7:52:38:9c:69:29:48:9e:dd:94:20:85:8e:c1:e0:
                    d9:87:e6:5b:17:7f:35:55:79:28:02:7c:e3:e6:3c:
                    ed:35:eb:52:10:83:5e:18:3b:86:c7:36:cf:3a:d9:
                    96:8a:4a:f3:91:00:ca:b3:e8:3c:32:c4:b8:bb:85:
                    52:e0:83:6f:57:82:24:05:dc:eb:6f:92:7a:b4:20:
                    70:a1:2a:44:27:fb:d5:a9:d5:30:f0:7d:9b:c8:ba:
                    59:d5:cb:59:3c:c0:34:3b:89:b2:94:2a:a0:7f:4c:
                    80:aa:d6:42:5a:3a:1c:4d:7c:ba:08:e4:5f:a9:c2:
                    d5:9e:49:37:fa:6f:15:a0:69:34:2f:74:81:10:68:
                    07:54:f7:04:36:1c:86:ea:31:f2:c3:b4:d6:ef:a3:
                    c9:f2:49:0b:99:ef:25:48:26:b9:d7:af:3e:8a:4e:
                    e7:5e:21:81:dd:bf:5c:32:98:16:7f:c6:9f:b6:d3:
                    75:23:5e:29:b9:bd:3d:10:38:42:72:0e:d0:48:6b:
                    02:c7:2f:ad:42:82:d7:3c:61:76:6f:4e:5c:be:93:
                    c8:48:ef:17:a5:75:bd:3c:ca:1c:b0:2e:56:88:d1:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:7F:AC:62:25:7F:F4:BE:34:77:74:70:40:49:7F:8F:7E:E6:4F
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:42:c0:7b:c0:27:fb:b3:e9:c3:84:b2:ac:09:3b:49:87:e4:
         94:28:73:fb:25:c4:1a:5c:9a:17:17:ee:5a:d9:23:4e:04:9a:
         64:1c:13:11:cc:ec:ca:f4:d7:ce:c7:82:33:b9:5f:85:e8:48:
         86:87:c6:a7:b7:37:2c:3b:31:dc:e3:66:97:80:70:1a:48:c3:
         f2:72:73:85:83:13:19:a9:eb:82:2e:b9:fc:72:a0:73:34:78:
         23:7d:ac:50:d9:2c:1e:16:27:14:9b:ca:34:80:60:f6:02:97:
         0b:53:3d:c9:bf:d2:c9:cc:f4:75:2c:1e:e2:d1:0e:c8:54:29:
         9b:63:57:5d:91:af:d7:0e:c5:37:79:e0:53:27:1e:97:07:e0:
         3c:87:35:00:b8:0e:70:f0:e6:da:d5:c9:f6:b3:26:01:db:24:
         d5:83:8f:f2:af:f2:3f:a5:94:29:90:35:32:14:c5:aa:4f:54:
         2f:30:aa:af:53:62:49:b1:bb:6d:54:25:60:b3:3d:df:4f:6e:
         3a:1a:cf:02:5a:7d:81:12:e8:3b:72:ba:d5:ec:46:7c:5f:cf:
         db:d9:53:31:e2:87:ac:6a:28:e6:4f:2e:2c:3a:c1:40:01:b7:
         21:66:78:d0:06:aa:b9:5d:62:94:1c:82:32:86:f4:55:99:f3:
         43:bf:fe:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIqT3D8IujdYSFUb0D/FFsKTKIi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzExNTdaFw0yNjAzMDUwMzE2NTdaMDMxMTAvBgNV
BAMTKDMxNEU3RkFDNjIyNTdGRjRCRTM0Nzc3NDcwNDA0OTdGOEY3RUU2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtxZ/p1WnYkkmib6pGC7pb6gL
ujl1B6bqNd4ZmPdSOJxpKUie3ZQghY7B4NmH5lsXfzVVeSgCfOPmPO0161IQg14Y
O4bHNs862ZaKSvORAMqz6DwyxLi7hVLgg29XgiQF3Otvknq0IHChKkQn+9Wp1TDw
fZvIulnVy1k8wDQ7ibKUKqB/TICq1kJaOhxNfLoI5F+pwtWeSTf6bxWgaTQvdIEQ
aAdU9wQ2HIbqMfLDtNbvo8nySQuZ7yVIJrnXrz6KTudeIYHdv1wymBZ/xp+203Uj
Xim5vT0QOEJyDtBIawLHL61Cgtc8YXZvTly+k8hI7xeldb08yhywLlaI0S51AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMU5/rGIlf/S+NHd0cEBJf49+5k8wHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62BwwDQYJKoZIhvcNAQELBQADggEBAMRCwHvA
J/uz6cOEsqwJO0mH5JQoc/slxBpcmhcX7lrZI04EmmQcExHM7Mr0187HgjO5X4Xo
SIaHxqe3Nyw7MdzjZpeAcBpIw/Jyc4WDExmp64IuufxyoHM0eCN9rFDZLB4WJxSb
yjSAYPYClwtTPcm/0snM9HUsHuLRDshUKZtjV12Rr9cOxTd54FMnHpcH4DyHNQC4
DnDw5trVyfazJgHbJNWDj/Kv8j+llCmQNTIUxapPVC8wqq9TYkmxu21UJWCzPd9P
bjoazwJafYES6DtyutXsRnxfz9vZUzHih6xqKOZPLiw6wUABtyFmeNAGqrldYpQc
gjKG9FWZ80O//us=
-----END CERTIFICATE-----