This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          GYoePm4kdaZ5DSBf6FWDApbepVTpP/mxmC+HwHzpHH0=
Subject key identifier:   94:9C:98:5B:A5:C2:C4:61:B1:6B:48:11:B3:AE:BC:BB:3B:D3:2F:DA
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       509D1362659C09836AC46E3E5AE8A3DB28722C0C
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:05 +0000
ROA not before:           Thu 06 Mar 2025 03:12:05 +0000
ROA not after:            Thu 05 Mar 2026 03:17:05 +0000
asID:                     262663
IP address blocks:        187.62.238.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 17 Sep 2025 14:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:13:62:65:9c:09:83:6a:c4:6e:3e:5a:e8:a3:db:28:72:2c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:05 2025 GMT
            Not After : Mar  5 03:17:05 2026 GMT
        Subject: CN=949C985BA5C2C461B16B4811B3AEBCBB3BD32FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:96:98:59:84:80:dd:7e:f1:fc:5d:c7:9a:
                    13:33:42:2d:22:b6:9b:18:e7:13:ba:58:ce:f5:78:
                    8b:56:9e:44:f3:30:b4:a7:ae:f9:d0:9e:a4:5d:eb:
                    90:c4:11:30:42:79:8d:ff:1b:b9:ce:d5:9a:ab:71:
                    cb:6b:28:04:c8:7b:b5:be:e0:50:99:f8:94:96:eb:
                    81:04:25:55:1d:71:b2:5a:10:91:e8:4e:f3:4d:c8:
                    45:a5:36:36:ca:d0:ec:6e:3b:25:54:a2:c4:c7:0a:
                    f5:65:df:c5:91:ca:20:62:82:bb:88:48:4b:f9:b5:
                    34:83:a0:58:6e:02:32:43:31:b9:4e:49:ab:af:0b:
                    29:d1:8a:fd:8f:c3:c9:37:4b:e2:75:a3:78:11:45:
                    1a:3a:70:94:74:c5:15:85:39:d6:54:3f:fa:d1:7b:
                    03:b8:e2:a1:0a:88:41:de:f0:73:e6:a6:55:1c:4c:
                    0f:38:40:94:f9:66:c3:07:e1:81:16:c6:a1:ff:73:
                    e2:ea:ab:9a:4d:01:37:3a:ec:b6:8a:e6:bb:25:04:
                    83:e1:52:19:90:df:0b:f2:bd:6a:91:7c:67:8e:ed:
                    f3:ee:1d:a5:5c:92:bc:de:a7:34:67:75:2f:08:fb:
                    b4:f8:63:08:d9:76:59:f2:63:2b:1b:e8:88:f6:3e:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:98:5B:A5:C2:C4:61:B1:6B:48:11:B3:AE:BC:BB:3B:D3:2F:DA
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:39:b5:84:6f:f9:dc:75:b8:25:93:15:d1:e7:53:e1:36:69:
         55:89:8a:98:e8:3e:b5:ea:8f:7e:ca:4e:c1:0c:fe:c9:25:aa:
         cf:d9:9c:68:fb:ac:70:84:27:c4:14:a9:dd:a2:fc:a7:7e:a8:
         7d:e6:5a:60:28:43:aa:3c:23:8b:49:cd:20:6a:13:21:a6:8b:
         34:bf:ba:68:97:07:49:29:27:e2:0e:e5:cf:db:b9:96:bf:e2:
         e3:77:40:93:54:a9:b6:d3:1c:e3:f9:b6:f0:96:d1:04:f6:94:
         c0:4c:38:2a:18:e9:07:e4:69:b4:de:16:0b:b3:cb:a5:a8:10:
         ae:dd:10:65:36:d4:76:f5:c6:e8:ea:e4:c5:35:8a:11:e8:97:
         f7:10:e5:07:6e:b3:6e:eb:96:75:51:ce:50:dc:4d:31:8a:64:
         42:d2:b1:49:61:8b:29:a9:3b:32:8b:64:75:8b:ed:15:3c:63:
         c3:0d:ee:b2:eb:b2:04:df:22:1d:95:6b:d5:63:d5:a5:12:7d:
         7c:8d:54:83:dc:47:af:05:48:9a:b7:b3:4d:68:95:19:a8:bb:
         82:83:aa:53:43:3b:af:43:fa:0f:e6:b5:e5:82:1b:c8:b3:cc:
         26:45:c8:0d:06:58:67:91:c6:b6:7d:8c:3c:23:b3:1f:b7:e0:
         a9:25:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----