This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          3/tH12fqSmt6mOUGysuUsc4JP6RuvjDRT+VE8JO+e90=
Subject key identifier:   F7:72:D4:D8:94:20:FC:47:04:3F:32:12:DD:7A:B4:27:19:FD:13:D1
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       5936667AFDB86ED1DFF35EB7C86F53D351AA9E61
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268070
IP address blocks:        2804:5788:4000::/34 maxlen: 34
Validation:               Failed, certificate revoked on Wed 04 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:36:66:7a:fd:b8:6e:d1:df:f3:5e:b7:c8:6f:53:d3:51:aa:9e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:d2:3a:17:7c:6e:c3:be:c6:49:be:e3:e6:
                    4b:a8:10:70:fe:69:56:61:cf:a5:e0:c9:a1:cc:51:
                    b0:5a:c7:a5:f9:3c:d2:9e:9a:6d:fb:94:26:8b:03:
                    33:88:28:78:71:2a:a7:f8:ff:de:f2:b4:ef:ba:13:
                    a2:c5:43:cc:bb:e1:6b:a5:62:fa:24:5d:c1:98:2d:
                    f8:77:ee:d5:fb:2c:67:11:bf:0e:35:94:c1:3e:46:
                    49:f1:d9:5a:e3:bf:96:a9:10:71:92:11:bf:29:9c:
                    73:97:48:33:e3:c0:59:5c:aa:23:9a:ef:f5:70:74:
                    65:d1:f9:1e:be:4e:1c:5a:4c:eb:1a:8d:64:19:9c:
                    f0:fe:b2:8b:75:53:d4:bb:1b:80:58:7a:b3:33:72:
                    1e:98:24:94:6d:60:bf:7e:a8:0f:00:f8:70:6c:8e:
                    30:b0:d1:50:36:b9:5b:49:c3:5b:dd:06:3f:0e:9f:
                    04:e4:0e:d9:d3:ab:65:9f:3c:23:42:8b:52:e4:2f:
                    ee:7f:ac:d1:fa:4d:d4:12:1c:89:98:8e:7d:5b:85:
                    db:c7:0a:72:02:19:7b:c1:f2:c5:6d:b8:0a:63:26:
                    ab:52:05:04:18:c2:f7:79:58:ea:1b:e9:4a:00:0e:
                    e1:07:29:57:5d:77:cf:77:3c:9c:08:92:05:55:db:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:72:D4:D8:94:20:FC:47:04:3F:32:12:DD:7A:B4:27:19:FD:13:D1
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         51:26:65:91:e6:0b:69:11:1d:b9:d0:dd:da:44:65:47:c9:14:
         1f:c8:94:11:10:c1:bf:17:72:8f:6b:f3:1b:5c:ae:31:60:4a:
         0a:c4:53:58:e0:0d:c9:72:bc:cf:b7:64:e5:a6:24:0c:5c:93:
         96:73:4d:46:2c:d4:6d:97:50:5b:03:98:db:59:89:0b:f8:6d:
         96:31:aa:de:50:3d:4f:1d:72:36:41:43:a0:e0:85:81:1f:3c:
         be:52:98:a1:24:db:ca:c1:c9:cd:e2:95:6c:24:ea:8f:44:97:
         35:2b:4f:25:86:d4:90:e2:94:45:95:c1:8c:a3:b1:cb:40:b6:
         09:78:6c:2f:a7:65:18:4c:5e:a2:72:a2:ba:a6:0a:e7:56:47:
         5b:a7:05:c2:19:95:d6:95:57:39:96:50:40:0d:70:a3:31:db:
         15:ff:ff:e4:ef:42:ff:b3:24:94:49:23:d8:55:8f:af:99:ff:
         9b:b8:04:ff:e5:7f:37:2c:09:8c:cd:ff:00:e2:49:12:ce:fc:
         9e:2b:e7:9b:28:b5:a2:85:87:99:76:0e:78:57:20:b5:f3:d8:
         5d:e3:a4:6d:c8:34:09:11:5b:57:af:8e:a4:87:8b:f1:b3:18:
         3d:35:df:a7:9a:2e:5b:27:63:36:70:90:d6:43:b5:44:ea:03:
         26:9a:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----