This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d313238203d3e20323636343338.roa
File:                     323830343a333764343a3a2f33322d313238203d3e20323636343338.roa (raw, json)
Hash identifier:          tTMmJpcQ8xd6ij+UEiuJXN1gPTPCcQkF93NaUog30B8=
Subject key identifier:   51:6C:D5:BC:A8:19:E3:02:66:A3:F2:14:EF:E5:E4:F7:C6:2E:5F:BC
Certificate issuer:       /CN=ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5
Certificate serial:       23E956041D0A42DF0862DFFA9A48A6A22ED7C0E6
Authority key identifier: AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d313238203d3e20323636343338.roa
Signing time:             Fri 16 May 2025 19:09:27 +0000
ROA not before:           Fri 16 May 2025 19:04:27 +0000
ROA not after:            Fri 15 May 2026 19:09:27 +0000
asID:                     266438
IP address blocks:        2804:37d4::/32 maxlen: 128
Validation:               Failed, certificate revoked on Wed 22 Oct 2025 21:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e9:56:04:1d:0a:42:df:08:62:df:fa:9a:48:a6:a2:2e:d7:c0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5
        Validity
            Not Before: May 16 19:04:27 2025 GMT
            Not After : May 15 19:09:27 2026 GMT
        Subject: CN=516CD5BCA819E30266A3F214EFE5E4F7C62E5FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:e0:62:4c:dd:c8:34:f5:57:d9:97:7a:40:
                    c1:7d:c5:5e:36:80:f4:a0:21:ad:ea:5c:18:c1:91:
                    b0:e3:97:97:44:20:91:80:45:90:55:e3:9e:35:fe:
                    37:1c:92:d4:66:0e:9f:c3:73:bd:bb:f6:b2:23:37:
                    61:f1:f4:88:ed:50:8c:89:f5:98:48:83:42:4f:b7:
                    ef:63:99:83:51:c7:29:ad:b8:7e:2f:43:5c:7c:a0:
                    ba:60:19:3b:dd:9d:e6:c1:5c:3e:df:87:ee:77:30:
                    cb:87:d7:41:4a:97:8a:65:46:b4:66:a5:18:ba:2e:
                    dd:4b:0c:40:77:f2:4b:31:d0:2b:97:7e:b9:ad:4b:
                    86:26:dc:b6:b0:f3:ad:e9:97:55:7e:70:5a:e0:f5:
                    48:f0:4c:70:85:70:95:46:e4:94:91:a9:e7:1a:80:
                    67:ca:1e:be:7b:69:79:47:9d:1a:48:3b:ce:f4:0f:
                    80:42:18:ad:a9:be:9c:dc:7e:28:f1:3f:1c:78:40:
                    cf:ae:e4:30:76:14:1b:fc:4b:70:60:bf:61:d3:1c:
                    09:7c:eb:37:c1:95:7f:7f:67:4d:a6:cd:d8:26:04:
                    cd:3f:ec:7d:90:60:49:ae:80:6c:64:5c:28:ef:00:
                    f5:f8:54:9a:b7:45:b6:d1:ff:29:15:33:56:6e:8a:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6C:D5:BC:A8:19:E3:02:66:A3:F2:14:EF:E5:E4:F7:C6:2E:5F:BC
            X509v3 Authority Key Identifier:
                keyid:AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d313238203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:f6:dc:19:b1:7f:57:a6:1c:46:a5:77:7c:bb:1c:af:25:
         23:19:c5:57:6a:37:a4:36:22:c0:f3:e3:d3:9b:76:3f:aa:2f:
         51:d7:9a:45:a3:3b:7d:f4:62:e9:15:96:8b:b0:ca:98:d4:ac:
         9d:fb:c3:7d:26:53:56:f4:09:4a:91:4a:36:35:ec:af:6c:78:
         49:5a:f9:c3:47:84:37:74:8d:73:49:5a:59:6b:27:69:ac:4c:
         fe:7c:81:c3:da:12:12:b8:8e:cf:41:f4:39:d1:fd:a0:fa:83:
         a5:b2:ef:68:f8:f4:f4:fa:16:93:c8:92:4a:4f:3b:5d:37:06:
         64:dd:c1:16:48:14:8c:93:14:86:c5:81:d1:2d:d3:22:fb:24:
         77:f8:87:eb:7d:76:1c:cc:ff:20:63:6e:2b:e0:b3:ed:b7:c8:
         d7:f4:f6:a2:d2:2f:d7:a5:1a:32:2c:01:b9:aa:0b:03:e4:43:
         55:d3:4e:f7:b8:d0:b6:c2:2c:b4:40:3f:88:9d:5a:32:7e:81:
         df:7f:65:60:98:7d:eb:ef:71:54:a0:35:cc:a8:0f:18:3d:e5:
         d4:cb:48:d6:11:c4:d7:67:ae:ba:72:48:52:be:a6:48:68:25:
         77:d9:1f:e8:8e:bf:de:a2:75:b3:19:41:c9:3f:48:39:5e:15:
         e2:bb:78:a1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUI+lWBB0KQt8IYt/6mkimoi7XwOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNENDhCNkU3QzUxOUY0M0U3NTQwQjlDOTg5NURDNEY1
RUI2QzNCNTAeFw0yNTA1MTYxOTA0MjdaFw0yNjA1MTUxOTA5MjdaMDMxMTAvBgNV
BAMTKDUxNkNENUJDQTgxOUUzMDI2NkEzRjIxNEVGRTVFNEY3QzYyRTVGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbuBiTN3INPVX2Zd6QMF9xV42
gPSgIa3qXBjBkbDjl5dEIJGARZBV4541/jccktRmDp/Dc7279rIjN2Hx9IjtUIyJ
9ZhIg0JPt+9jmYNRxymtuH4vQ1x8oLpgGTvdnebBXD7fh+53MMuH10FKl4plRrRm
pRi6Lt1LDEB38ksx0CuXfrmtS4Ym3Law863pl1V+cFrg9UjwTHCFcJVG5JSRqeca
gGfKHr57aXlHnRpIO870D4BCGK2pvpzcfijxPxx4QM+u5DB2FBv8S3Bgv2HTHAl8
6zfBlX9/Z02mzdgmBM0/7H2QYEmugGxkXCjvAPX4VJq3RbbR/ykVM1Zuii1dAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUUWzVvKgZ4wJmo/IU7+Xk98YuX7wwHwYDVR0j
BBgwFoAUrNSLbnxRn0PnVAucmJXcT162w7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmlFcDdONkphRmRkZEM1UGNaNktCOWtMVU05UHRaMVZEUjViZlRhWlF5
THYvMC9BQ0Q0OEI2RTdDNTE5RjQzRTc1NDBCOUM5ODk1REM0RjVFQjZDM0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRDQ4QjZFN0M1MTlGNDNF
NzU0MEI5Qzk4OTVEQzRGNUVCNkMzQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpRXA3TjZKYUZkZGRDNVBjWjZLQjlrTFVNOVB0WjFWRFI1YmZUYVpReUx2LzAv
MzIzODMwMzQzYTMzMzc2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDfUMA0GCSqGSIb3DQEBCwUAA4IBAQAg4vbc
GbF/V6YcRqV3fLscryUjGcVXajekNiLA8+PTm3Y/qi9R15pFozt99GLpFZaLsMqY
1Kyd+8N9JlNW9AlKkUo2NeyvbHhJWvnDR4Q3dI1zSVpZaydprEz+fIHD2hISuI7P
QfQ50f2g+oOlsu9o+PT0+haTyJJKTztdNwZk3cEWSBSMkxSGxYHRLdMi+yR3+Ifr
fXYczP8gY24r4LPtt8jX9Pai0i/XpRoyLAG5qgsD5ENV0073uNC2wiy0QD+InVoy
foHff2VgmH3r73FUoDXMqA8YPeXUy0jWEcTXZ666ckhSvqZIaCV32R/ojr/eonWz
GUHJP0g5XhXiu3ih
-----END CERTIFICATE-----