This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa
File:                     3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa (raw, json)
Hash identifier:          rKk1bYcdFK/iu72p7vZIkdyN4blnijFoXKXZiQmZMk4=
Subject key identifier:   ED:B3:96:D8:A6:61:E6:CF:74:00:05:51:C5:89:3F:6A:A4:D3:94:80
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       5BE5471246DE90E125E5514038D6B8611A159443
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa
Signing time:             Wed 30 Apr 2025 18:28:55 +0000
ROA not before:           Wed 30 Apr 2025 18:23:55 +0000
ROA not after:            Wed 29 Apr 2026 18:28:55 +0000
asID:                     264487
IP address blocks:        131.255.112.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 22 Sep 2025 14:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e5:47:12:46:de:90:e1:25:e5:51:40:38:d6:b8:61:1a:15:94:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr 30 18:23:55 2025 GMT
            Not After : Apr 29 18:28:55 2026 GMT
        Subject: CN=EDB396D8A661E6CF74000551C5893F6AA4D39480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:04:fd:b5:1f:53:9c:34:17:91:62:e6:1d:
                    ed:73:96:90:9c:2e:cb:ed:db:49:0e:1c:d7:d7:0b:
                    aa:3e:0d:58:50:1a:aa:a3:ef:b9:fa:61:c1:9d:34:
                    80:95:6e:77:f1:4c:1b:ad:5e:78:a6:72:09:e6:06:
                    31:ed:3c:25:4b:b7:6e:3c:28:6c:c2:e8:2c:61:9c:
                    be:62:88:80:3d:b6:b9:17:88:9a:ec:94:90:13:09:
                    1a:ad:18:0a:07:05:ff:ca:87:81:62:83:b9:5e:b3:
                    c6:c4:90:ff:d4:72:7e:7a:5b:28:43:46:2b:4b:59:
                    51:2a:54:c5:d1:d3:d5:19:d8:27:b2:2f:1c:f7:56:
                    b4:61:0c:4f:ba:2f:1e:97:0a:fb:c3:8b:85:3f:6e:
                    89:36:74:96:80:12:65:77:45:08:be:42:90:69:0b:
                    d5:e2:85:d6:1e:f3:12:e7:4e:cd:3f:48:6b:5b:68:
                    20:84:30:ea:ab:0f:5e:f7:08:aa:99:78:2b:f1:4a:
                    2c:f9:0c:b3:6f:8e:7c:fb:72:24:84:3a:de:12:2a:
                    fd:03:df:3d:b8:8b:e6:b3:6f:0d:3a:1d:d8:58:25:
                    bc:bd:b6:4c:11:60:76:31:5d:72:d3:b9:b6:a4:cb:
                    c5:15:16:11:88:b3:52:67:cd:3d:d7:a3:12:2a:2e:
                    e7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B3:96:D8:A6:61:E6:CF:74:00:05:51:C5:89:3F:6A:A4:D3:94:80
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131322e302f32322d3234203d3e20323634343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:35:0d:72:23:8d:e2:69:2a:0c:73:fc:df:bf:58:b5:e6:
         9a:3f:e7:00:24:5b:78:a1:fc:d5:d4:10:f9:22:ba:ef:15:b4:
         cc:a3:bf:be:78:b3:75:9d:b8:13:d1:ed:4f:a4:ce:c8:6b:63:
         ab:e3:a1:be:e5:e0:55:b9:19:c3:3c:b6:60:84:73:59:42:1f:
         cc:c4:43:40:4e:ca:89:19:7a:61:2d:1c:8d:f7:59:ac:2a:38:
         29:f4:64:c1:08:c9:43:12:59:10:39:3e:6d:0f:95:7e:a5:66:
         fc:a0:fd:2a:bc:c0:cf:6d:5d:87:04:3b:e2:50:6b:22:18:b5:
         52:c6:30:33:dc:12:19:7e:54:3d:8c:b0:20:9e:91:f0:14:28:
         2b:a6:a6:e4:c6:95:1b:d0:b4:0c:ed:1a:f6:1a:35:25:10:61:
         75:79:b1:7a:45:63:94:fd:70:25:55:5e:49:c9:29:f7:be:03:
         53:ac:3f:56:78:99:43:5d:c7:cd:cf:f0:db:3e:92:35:79:45:
         f8:53:ed:be:3a:ec:c4:73:d3:09:b9:7d:bb:9e:8e:45:23:70:
         9f:97:7a:20:4e:75:1b:de:b7:9b:3a:dc:dc:83:86:d8:8a:45:
         7d:6e:86:e5:1c:fa:e5:53:06:3e:30:87:c5:46:e1:c5:36:d6:
         15:31:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----