This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e34322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          3u96aHiJXxcmioRAUIPaYor8AF8uayZJYgJADygsPY0=
Subject key identifier:   BF:03:FD:78:C0:95:24:6C:4F:6D:B9:A9:08:A0:89:5B:A4:64:BB:69
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       6125CB93B30A462F5E7CD2339AACA24BACED916E
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:56 +0000
ROA not before:           Thu 06 Mar 2025 03:11:56 +0000
ROA not after:            Thu 05 Mar 2026 03:16:56 +0000
asID:                     262663
IP address blocks:        186.216.42.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 17 Sep 2025 14:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:25:cb:93:b3:0a:46:2f:5e:7c:d2:33:9a:ac:a2:4b:ac:ed:91:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:56 2025 GMT
            Not After : Mar  5 03:16:56 2026 GMT
        Subject: CN=BF03FD78C095246C4F6DB9A908A0895BA464BB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:0f:e7:cc:d4:ab:0d:d9:d5:ad:9f:8d:e2:
                    82:6a:8e:ab:89:51:e6:d7:ba:4f:69:da:f3:d4:8a:
                    f5:1b:34:c9:f1:29:32:50:57:15:f9:3b:e5:5a:c0:
                    f9:8a:8f:7d:f0:ca:1c:7f:b6:51:51:89:af:af:66:
                    42:5e:58:72:dc:22:f3:5c:d8:d9:60:c5:58:03:cc:
                    1f:74:fc:73:80:35:66:f0:c7:04:ae:9f:b1:af:d8:
                    0c:6d:91:6b:82:50:fc:ae:75:8a:b2:1e:1f:2a:d7:
                    bd:70:91:71:4b:02:65:85:b6:eb:31:a3:6d:03:d6:
                    c2:d7:d7:53:0d:9e:ad:d4:cf:4b:ab:ad:a1:a5:d8:
                    e2:49:8e:04:91:59:1a:e7:80:90:56:2c:f7:46:25:
                    08:7e:ff:38:80:03:04:a0:91:09:38:a4:cd:88:90:
                    b6:ef:18:56:07:0b:9c:10:f1:1a:e6:76:13:60:6e:
                    54:2e:66:85:0e:92:aa:b4:05:8d:ec:d7:d2:e4:54:
                    3b:6b:dc:14:44:48:7d:f2:d2:7e:7b:3f:c8:eb:d5:
                    72:96:33:8d:16:88:38:2d:50:f8:d8:0d:fc:2e:07:
                    f5:ce:55:c2:95:fc:e8:5f:f0:b6:5b:d8:1b:a6:41:
                    e5:40:5b:ec:0e:c8:19:af:f6:e2:c1:62:43:2b:d6:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:03:FD:78:C0:95:24:6C:4F:6D:B9:A9:08:A0:89:5B:A4:64:BB:69
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:7e:bf:04:c3:3d:e1:a5:29:1b:cb:fe:88:c9:27:a1:1a:
         9e:22:d6:66:17:70:84:bc:6a:79:5b:f3:ba:1e:5c:0a:47:80:
         04:01:f8:11:02:7c:7d:09:02:e5:24:bc:9c:92:9a:11:04:08:
         a0:23:a8:83:96:14:a0:1a:58:e7:85:e5:90:2e:61:5c:dc:c5:
         d2:2d:f0:b2:fb:d5:c0:d9:00:77:b3:c3:f9:9c:81:cb:5a:df:
         26:4e:89:1b:49:9c:b2:9b:3c:98:a2:d9:ec:02:01:f2:5f:64:
         77:f5:c7:9f:9d:88:47:8a:04:f6:52:36:70:c5:b7:dd:14:80:
         d5:f9:2d:55:4c:a2:66:c1:cf:e8:b9:8d:db:01:8d:37:b7:83:
         e0:10:db:36:02:3b:e3:5e:be:3f:f0:a0:62:0e:e5:a5:c3:d3:
         00:18:92:f5:28:02:ba:80:83:47:7d:55:8c:66:c3:5a:ee:94:
         48:59:25:00:4d:1f:b0:99:aa:e8:dc:6f:27:bc:16:08:d6:2e:
         1d:b2:7b:55:12:c7:25:a0:ee:b6:bd:2f:f5:e7:07:94:bd:65:
         48:f6:32:97:fd:8d:5f:ac:85:c2:f5:e7:8f:6c:68:c4:a2:cc:
         29:09:fa:f5:4a:29:06:e1:bb:ac:6b:fb:8e:b2:d1:c1:1d:29:
         9b:2e:82:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYSXLk7MKRi9efNIzmqyiS6ztkW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzExNTZaFw0yNjAzMDUwMzE2NTZaMDMxMTAvBgNV
BAMTKEJGMDNGRDc4QzA5NTI0NkM0RjZEQjlBOTA4QTA4OTVCQTQ2NEJCNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9w/nzNSrDdnVrZ+N4oJqjquJ
UebXuk9p2vPUivUbNMnxKTJQVxX5O+VawPmKj33wyhx/tlFRia+vZkJeWHLcIvNc
2NlgxVgDzB90/HOANWbwxwSun7Gv2AxtkWuCUPyudYqyHh8q171wkXFLAmWFtusx
o20D1sLX11MNnq3Uz0urraGl2OJJjgSRWRrngJBWLPdGJQh+/ziAAwSgkQk4pM2I
kLbvGFYHC5wQ8RrmdhNgblQuZoUOkqq0BY3s19LkVDtr3BRESH3y0n57P8jr1XKW
M40WiDgtUPjYDfwuB/XOVcKV/Ohf8LZb2BumQeVAW+wOyBmv9uLBYkMr1v6pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvwP9eMCVJGxPbbmpCKCJW6Rku2kwHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62CowDQYJKoZIhvcNAQELBQADggEBAFOLfr8E
wz3hpSkby/6IySehGp4i1mYXcIS8anlb87oeXApHgAQB+BECfH0JAuUkvJySmhEE
CKAjqIOWFKAaWOeF5ZAuYVzcxdIt8LL71cDZAHezw/mcgcta3yZOiRtJnLKbPJii
2ewCAfJfZHf1x5+diEeKBPZSNnDFt90UgNX5LVVMombBz+i5jdsBjTe3g+AQ2zYC
O+Nevj/woGIO5aXD0wAYkvUoArqAg0d9VYxmw1rulEhZJQBNH7CZqujcbye8FgjW
Lh2ye1USxyWg7ra9L/XnB5S9ZUj2Mpf9jV+shcL1549saMSizCkJ+vVKKQbhu6xr
+46y0cEdKZsugtU=
-----END CERTIFICATE-----