This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa
File:                     3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa (raw, json)
Hash identifier:          RZQSj0NGs5FAgG7/VNOKXxWotBBqDhobniklikkF76I=
Subject key identifier:   40:6C:C6:7D:D3:0B:B9:B7:6D:86:5A:12:15:09:AF:85:A8:2A:1E:E4
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       14F33D92763274B09ABADA0D7E224A8C031907E4
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa
Signing time:             Thu 06 Mar 2025 20:13:53 +0000
ROA not before:           Thu 06 Mar 2025 20:08:53 +0000
ROA not after:            Thu 05 Mar 2026 20:13:53 +0000
asID:                     272193
IP address blocks:        170.247.108.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 12:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f3:3d:92:76:32:74:b0:9a:ba:da:0d:7e:22:4a:8c:03:19:07:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Mar  6 20:08:53 2025 GMT
            Not After : Mar  5 20:13:53 2026 GMT
        Subject: CN=406CC67DD30BB9B76D865A121509AF85A82A1EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:fe:04:94:e6:06:5d:92:c0:df:09:69:9f:
                    1e:6b:a0:d9:17:93:69:c4:b0:07:fc:ed:b2:62:de:
                    3c:8c:5d:7f:d0:e5:73:e4:30:6b:87:2b:8b:1d:cb:
                    d5:d2:da:f9:e8:09:4e:7a:ca:c1:eb:3f:61:b6:32:
                    88:37:d5:eb:ef:4d:e4:50:9f:b9:b4:99:1c:66:52:
                    75:05:e6:fc:fc:28:6a:b9:81:95:1e:86:04:b8:70:
                    cc:9b:19:ec:71:d8:78:bd:58:83:ca:55:c0:8a:28:
                    3a:87:2e:9b:a2:10:60:a9:2d:f5:1d:e5:b7:dd:c6:
                    b9:16:de:b1:b0:ea:54:66:5c:db:70:69:5b:5e:f9:
                    99:76:95:fe:40:c8:81:de:ac:c1:a9:65:e8:c2:a4:
                    9a:7a:87:9a:f2:0e:03:5d:fd:0d:b4:f3:45:33:ae:
                    b1:31:08:9b:95:7d:4a:59:17:62:89:3f:7e:fd:bc:
                    70:de:b0:17:71:3d:fc:1a:46:4b:9d:45:b7:d9:ba:
                    74:b3:d9:e8:9c:dc:90:1a:0e:5c:cf:81:63:e6:a6:
                    21:63:2a:53:7f:55:95:93:1f:7b:70:89:b3:7f:7c:
                    05:01:6a:1c:ec:97:5e:1e:a3:fe:7f:e5:9c:41:19:
                    0e:0f:6b:55:52:73:8b:0e:b2:1f:6c:78:8b:f1:b0:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:C6:7D:D3:0B:B9:B7:6D:86:5A:12:15:09:AF:85:A8:2A:1E:E4
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:b6:74:a8:9f:75:1c:f6:91:3c:55:ce:32:95:0b:93:b9:
         35:5a:55:4f:50:fb:c2:73:bd:82:37:fd:76:5a:00:a8:5f:78:
         e7:36:77:5b:a2:64:1b:b7:b4:23:97:21:f7:f4:b1:13:b6:f1:
         04:2e:58:5d:79:7f:60:cc:4d:dc:cd:6a:ca:ac:e9:0c:70:4d:
         32:19:3a:23:bc:e8:93:81:4a:be:f6:93:9d:c0:5d:ce:75:75:
         53:09:97:4f:d7:59:ef:fc:27:d8:40:01:54:bb:98:c3:3c:63:
         b6:44:d6:00:dd:65:fc:a6:04:f8:3c:91:f3:70:98:77:2f:15:
         9e:cf:ea:52:3f:c0:2a:47:49:3a:58:6a:3f:f5:cc:d8:cc:b7:
         1b:2a:ea:b4:86:47:ab:12:43:14:30:9a:53:58:30:f8:86:76:
         6c:b5:90:3d:77:93:8b:ca:fd:f2:2e:36:28:14:35:1c:35:9c:
         00:9b:de:6b:f0:e5:24:ff:b8:a1:94:bc:81:86:86:e3:09:e9:
         31:61:2c:f0:c6:29:5d:70:ed:01:34:d0:26:82:9c:2e:41:2a:
         61:97:d2:2a:81:d7:1a:c8:95:0c:2e:f4:a3:00:67:6c:80:71:
         68:87:bf:06:9f:e9:a7:81:af:30:22:77:50:12:c6:7a:da:d7:
         e7:99:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----