This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3332303a3a2f34332d3433203d3e20323635313837.roa
File:                     323830343a326330303a3332303a3a2f34332d3433203d3e20323635313837.roa (raw, json)
Hash identifier:          4rvIAGT5zL8HzUFZVvegi6RWNEJL3G9g0NlIVU8M9kk=
Subject key identifier:   17:33:76:B4:D7:A1:C9:B1:CD:96:33:E4:84:2D:70:B7:54:DC:20:F9
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       2FC9CFE49C45C24D658D7FD027303F7BA8D9D6EB
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3332303a3a2f34332d3433203d3e20323635313837.roa
Signing time:             Sat 01 Feb 2025 20:31:06 +0000
ROA not before:           Sat 01 Feb 2025 20:26:06 +0000
ROA not after:            Sat 31 Jan 2026 20:31:06 +0000
asID:                     265187
IP address blocks:        2804:2c00:320::/43 maxlen: 43
Validation:               Failed, certificate revoked on Mon 26 May 2025 20:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c9:cf:e4:9c:45:c2:4d:65:8d:7f:d0:27:30:3f:7b:a8:d9:d6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Feb  1 20:26:06 2025 GMT
            Not After : Jan 31 20:31:06 2026 GMT
        Subject: CN=173376B4D7A1C9B1CD9633E4842D70B754DC20F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:ce:ef:34:31:c0:0e:d3:3b:7a:fa:b9:0a:
                    0a:ba:ff:62:fa:29:ab:63:02:70:10:c5:95:d2:1b:
                    60:70:d8:b4:c9:48:82:52:62:7d:4f:2b:83:34:4a:
                    83:ed:e1:20:12:08:f0:f1:db:ea:26:f7:7e:76:fb:
                    51:6d:c6:db:c8:db:68:ff:fc:41:d4:24:db:07:e9:
                    7d:d2:f1:b3:0f:2c:c3:fc:a2:80:fc:10:ed:52:7a:
                    29:c3:20:62:7d:e7:1a:02:e2:d4:66:b8:09:ce:b4:
                    41:24:8a:75:c5:39:5b:4a:43:de:db:52:0b:d6:56:
                    0c:9c:26:3d:5b:e9:78:65:f5:aa:ea:28:f4:fd:9c:
                    74:30:68:98:31:33:98:3d:9e:a0:24:71:f7:28:45:
                    a4:5d:c9:a6:73:19:c5:ae:54:f6:18:42:d6:b6:6e:
                    fb:bc:82:e9:1d:bb:82:41:58:6d:0d:7a:e0:3b:cd:
                    ea:ef:7a:76:a1:21:a6:c9:c9:46:ff:77:eb:6b:f9:
                    0c:d9:9c:46:dc:4e:f0:b6:63:e2:1f:ea:6c:08:60:
                    64:66:dc:4c:b6:d0:be:b3:d1:dc:d6:aa:bb:be:94:
                    84:5a:0d:b2:cd:36:d4:aa:32:88:8e:82:99:cf:bb:
                    1f:5a:12:05:5f:e6:d6:d9:e6:54:cc:be:f8:e6:3c:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:76:B4:D7:A1:C9:B1:CD:96:33:E4:84:2D:70:B7:54:DC:20:F9
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3332303a3a2f34332d3433203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:320::/43

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:28:21:55:fe:df:22:af:c1:8f:46:97:94:f7:c3:33:fc:
         67:88:31:6b:8c:72:bf:9f:d3:81:42:0e:97:ff:bc:1e:41:05:
         ed:d9:53:24:89:d7:20:8c:d5:31:4f:69:5c:cf:7d:18:8b:b4:
         ce:c6:d5:5b:c5:cf:79:ab:2e:a0:04:54:69:6d:fe:90:6f:2e:
         c4:46:9d:a5:0c:ff:7d:29:12:6e:10:2a:6e:99:44:6f:9c:00:
         51:8a:f3:2a:5b:b2:5e:2f:ff:1f:76:48:73:07:cc:ce:f3:35:
         63:ae:0f:71:be:4c:5c:80:96:61:8f:80:f6:7c:05:7b:ce:d0:
         e6:ec:b7:a0:77:22:aa:ee:ac:1a:39:e6:e8:da:fb:47:d6:20:
         74:35:b6:32:42:02:02:aa:57:0a:ca:96:09:7f:0f:60:b2:bf:
         6a:ac:72:ad:c3:0c:86:1d:3a:20:b3:d4:7a:fb:77:79:d8:10:
         85:13:3f:eb:a2:04:65:1b:c2:49:a8:bb:de:5e:e4:ac:e9:de:
         58:a4:30:4f:c2:7c:9c:df:07:6f:0e:fb:23:44:d8:26:6e:5f:
         b3:34:c5:0c:a4:9e:ac:52:de:d8:f3:a9:90:fd:7c:73:98:26:
         cd:61:20:21:dc:a0:6a:56:09:48:31:56:b4:d9:6d:5b:50:59:
         b3:fa:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----