This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e36302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          GWmIjseXL82QU3Wsr+ZmKV0yBESWUq10E/lVM4lOplM=
Subject key identifier:   3E:F8:5B:9D:70:89:34:FE:FD:FB:09:9C:83:AC:1E:8D:F4:03:4D:41
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       510A07E06795E4993191755458DE892A357D1D56
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:57 +0000
ROA not before:           Thu 06 Mar 2025 03:11:57 +0000
ROA not after:            Thu 05 Mar 2026 03:16:57 +0000
asID:                     262663
IP address blocks:        186.216.60.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 17 Sep 2025 14:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0a:07:e0:67:95:e4:99:31:91:75:54:58:de:89:2a:35:7d:1d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:57 2025 GMT
            Not After : Mar  5 03:16:57 2026 GMT
        Subject: CN=3EF85B9D708934FEFDFB099C83AC1E8DF4034D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:80:c4:01:c5:98:27:3b:aa:f9:23:c0:00:
                    da:2b:06:af:24:be:11:c9:a8:03:62:34:81:9e:fc:
                    1b:5f:9f:91:af:fe:f8:f5:e9:b2:0f:b7:b6:6a:34:
                    29:44:c7:54:0a:b5:aa:31:7c:e3:fe:b0:93:fc:38:
                    44:34:7d:55:b5:ef:df:58:4e:6c:14:ec:30:72:0e:
                    d4:3e:00:55:12:ad:d1:ac:01:d1:99:aa:b6:96:9c:
                    a6:84:d3:07:6d:d7:af:68:8d:e4:16:b4:42:8f:d8:
                    d9:27:d5:62:43:12:1f:02:49:5a:98:1f:35:c4:55:
                    14:ae:7c:33:e2:99:d6:bd:12:58:a1:58:a2:16:19:
                    4e:1d:83:b8:ea:79:3d:9c:f6:9b:03:d3:34:a5:17:
                    0b:23:65:84:53:5d:40:d8:34:d7:ca:70:f3:06:cc:
                    04:97:d0:f3:e8:e9:4d:41:89:28:f3:14:3d:dc:f1:
                    40:4f:99:78:be:d8:5d:b4:8f:36:c2:c5:10:b3:92:
                    5f:c9:73:f2:a2:4b:fd:73:5b:01:a6:b8:9b:c3:e8:
                    fd:a6:78:6d:a2:0e:38:36:ea:81:34:e0:cf:47:35:
                    58:fc:d9:cb:f8:6a:ff:0f:9a:44:fc:6f:f9:00:d5:
                    5b:98:80:16:e8:2b:44:7d:8b:27:2b:ce:9c:48:ed:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:5B:9D:70:89:34:FE:FD:FB:09:9C:83:AC:1E:8D:F4:03:4D:41
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:22:fd:89:04:62:f5:37:57:e8:57:82:32:ca:f6:f9:a8:19:
         d1:de:dc:9b:29:77:96:f4:05:00:e8:c4:51:a2:f1:79:25:65:
         4d:6b:5d:4f:e6:d1:87:f3:53:3d:a6:ba:98:ba:ac:de:db:83:
         46:7e:7c:27:ce:ed:ef:38:c6:9d:33:d0:75:67:8b:63:a3:c9:
         eb:4a:a9:f5:b2:de:95:2c:4b:5b:bb:b3:0f:ca:fc:42:3c:be:
         f8:e8:f9:2e:f8:69:a8:7d:4b:6b:5c:06:fc:d3:7c:52:76:73:
         ba:47:73:e1:60:f6:df:3e:1f:1a:cb:a3:f4:05:5e:4a:3d:1a:
         dc:4f:87:7b:10:4d:30:77:63:9c:82:fd:96:53:09:08:93:31:
         bf:9c:68:3f:ad:4b:36:e2:ad:b0:9a:10:67:2c:a2:14:d4:bd:
         90:4a:8c:46:1e:fa:51:4e:24:8b:98:b3:0b:83:c7:8f:20:72:
         d0:2d:e7:72:fb:78:88:0b:8f:7e:cc:95:02:4e:d4:30:f5:9d:
         d4:77:ad:7f:29:90:94:88:6c:d9:43:b1:34:84:e5:81:fb:77:
         a8:2d:0d:c6:08:e7:d0:5e:e4:b5:f0:c8:0a:c3:87:2b:ea:26:
         98:70:dc:26:82:a8:e9:f2:53:ff:c6:6d:d2:33:69:0c:53:e5:
         cf:6d:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----