This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32342d3234203d3e20323633343832.roa
File:                     3137302e38332e3231322e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          iG9Rg3UY2i/r+RVJjn0ANVw8hutVJGMCaNw+bOsL5q4=
Subject key identifier:   59:F9:5C:D7:61:A5:CC:FE:AD:BF:F6:6A:91:8D:B9:75:EB:F1:9C:E8
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       572E9C74D94281A63C9B99B09AB0A85425E5D46B
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32342d3234203d3e20323633343832.roa
Signing time:             Thu 17 Apr 2025 13:22:21 +0000
ROA not before:           Thu 17 Apr 2025 13:17:21 +0000
ROA not after:            Thu 16 Apr 2026 13:22:21 +0000
asID:                     263482
IP address blocks:        170.83.212.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 11 Jul 2025 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2e:9c:74:d9:42:81:a6:3c:9b:99:b0:9a:b0:a8:54:25:e5:d4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Apr 17 13:17:21 2025 GMT
            Not After : Apr 16 13:22:21 2026 GMT
        Subject: CN=59F95CD761A5CCFEADBFF66A918DB975EBF19CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:7a:3d:a9:76:a2:9e:e6:b2:fd:e8:08:c1:
                    dc:40:3d:99:79:cb:d0:86:24:6a:2f:33:0e:14:d9:
                    81:ee:e1:77:dc:5d:da:51:d0:72:39:08:13:fb:d1:
                    9f:a4:07:74:7a:b0:51:69:e9:19:50:a3:3c:5c:47:
                    13:dd:89:51:44:85:2f:73:03:15:a8:80:fc:6a:5d:
                    4a:98:64:b2:a8:35:97:92:22:ff:33:9e:cf:ac:75:
                    24:d7:32:eb:d9:6e:3b:f4:6b:b9:08:b2:95:7b:fb:
                    17:8b:57:fe:f1:f0:e1:1c:0d:d2:d1:d9:84:0f:77:
                    d5:3b:77:d2:da:67:c5:4a:06:a2:17:c2:92:65:7a:
                    ea:a7:a6:7d:a0:57:13:75:7e:b5:d7:c5:91:cc:76:
                    ad:73:ff:4a:9c:4a:ca:91:35:7b:50:a9:8d:38:0b:
                    06:9b:d7:0e:19:27:5a:cc:f9:47:db:35:78:50:95:
                    51:1a:2b:94:5b:a2:c6:2b:81:d7:fe:5f:e0:39:6c:
                    c2:90:fe:a8:cd:74:c9:54:5e:ed:98:f4:66:ee:8b:
                    2b:10:ee:55:a4:57:43:b5:49:51:71:83:8f:0e:b0:
                    b7:ea:1b:e6:0f:90:7b:83:0b:2e:e6:98:91:42:b2:
                    3e:c4:a9:eb:8a:aa:bb:b7:ed:a8:c8:93:82:16:cc:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:5C:D7:61:A5:CC:FE:AD:BF:F6:6A:91:8D:B9:75:EB:F1:9C:E8
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:df:47:8c:00:89:ed:3e:f1:23:44:03:e0:e9:55:62:63:a1:
         b1:c7:94:33:2f:4c:83:5d:68:cf:de:61:34:7c:47:57:78:ca:
         6e:f2:f9:bf:56:31:fb:26:99:05:28:58:56:af:64:70:cc:8d:
         0e:29:4a:2d:47:27:9d:fc:91:51:26:30:9b:53:c6:2d:41:70:
         46:a9:4b:a2:f2:a9:81:ea:e2:9b:66:0d:93:6c:d3:45:90:41:
         d3:e7:3f:fe:18:5e:a9:2e:c9:5d:9e:66:34:31:ee:1f:3a:f8:
         2a:82:7c:b7:3e:17:b4:2a:50:13:17:39:b9:62:91:7f:67:36:
         05:ef:29:bb:9e:7f:da:fa:b7:40:db:3f:ed:38:64:7b:af:9e:
         82:8b:96:b3:a8:cd:05:c0:26:03:98:e3:48:43:10:71:1f:37:
         eb:c6:cb:4d:bf:55:36:fb:30:c2:10:e2:92:39:85:01:75:3a:
         66:df:97:24:37:a9:bd:10:cd:e5:05:8d:41:f7:fa:e1:a1:5c:
         2b:49:cc:ac:28:0c:1c:c8:f8:94:13:45:14:2c:cc:95:1a:1a:
         d6:69:ef:31:7b:50:ae:89:64:a2:95:91:50:02:0e:56:14:d2:
         da:f5:ce:2a:54:1f:08:ce:1e:21:32:bf:74:d8:b2:e2:f9:69:
         a6:73:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----