This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa
File:                     3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa (raw, json)
Hash identifier:          PnDYYQ23Gg8BqUG0eEV3OeA4tHhHvfJLupkC7amYqUM=
Subject key identifier:   AF:28:7D:11:1A:C3:B6:04:2D:12:C3:5A:FC:FD:59:BB:E1:84:3F:4A
Certificate issuer:       /CN=F9EE5F3CAD582E50F346855D065B1378F925500B
Certificate serial:       412C2F0E486F788D272CA4859B80B0EF4ED6CB2A
Authority key identifier: F9:EE:5F:3C:AD:58:2E:50:F3:46:85:5D:06:5B:13:78:F9:25:50:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9EE5F3CAD582E50F346855D065B1378F925500B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa
Signing time:             Fri 19 Dec 2025 12:09:19 +0000
ROA not before:           Fri 19 Dec 2025 12:04:19 +0000
ROA not after:            Fri 18 Dec 2026 12:09:19 +0000
asID:                     272757
IP address blocks:        170.244.36.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 12:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2c:2f:0e:48:6f:78:8d:27:2c:a4:85:9b:80:b0:ef:4e:d6:cb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9EE5F3CAD582E50F346855D065B1378F925500B
        Validity
            Not Before: Dec 19 12:04:19 2025 GMT
            Not After : Dec 18 12:09:19 2026 GMT
        Subject: CN=AF287D111AC3B6042D12C35AFCFD59BBE1843F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:92:ec:c2:7a:9f:c0:63:50:42:09:f5:5a:
                    8b:26:50:2f:c2:30:14:a7:ef:c1:41:a8:4f:c3:63:
                    36:e0:2b:9a:86:5b:ef:59:0c:99:ae:b0:ff:a2:6a:
                    55:51:8c:d2:04:26:a7:e3:e5:ab:e0:96:ca:5d:a8:
                    35:3e:4d:4a:a8:19:9e:58:a1:d0:76:2d:9d:76:64:
                    9b:4d:3f:bb:03:74:8b:7c:66:1d:2c:e8:66:8a:a3:
                    a2:86:53:7c:b3:71:eb:12:f6:be:dd:b2:31:8e:84:
                    2f:e4:63:80:bf:bf:9c:e7:ea:6d:26:a3:9b:bd:3d:
                    f9:9a:4f:50:10:12:37:ed:a1:93:77:12:a6:21:af:
                    2e:da:1b:cf:3b:b0:45:ee:18:fe:6a:20:51:19:78:
                    db:e7:26:30:7c:89:8e:59:ee:88:3e:8c:d1:2e:c9:
                    3b:1f:0a:6d:78:1e:10:c7:2a:ca:e1:99:f6:f9:5a:
                    a8:10:70:31:51:99:94:7b:5a:14:cf:ae:6a:de:58:
                    76:05:cf:21:67:95:3b:51:9b:e8:33:80:fb:be:82:
                    b8:79:d1:83:02:30:57:37:e6:42:27:39:d5:33:fe:
                    bf:40:42:16:f9:81:94:2b:3e:c2:eb:c0:18:ab:1e:
                    8e:dc:d7:07:f0:e6:3f:96:c2:ad:20:92:3b:93:56:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:28:7D:11:1A:C3:B6:04:2D:12:C3:5A:FC:FD:59:BB:E1:84:3F:4A
            X509v3 Authority Key Identifier:
                keyid:F9:EE:5F:3C:AD:58:2E:50:F3:46:85:5D:06:5B:13:78:F9:25:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/F9EE5F3CAD582E50F346855D065B1378F925500B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9EE5F3CAD582E50F346855D065B1378F925500B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:af:b0:4d:de:be:ce:90:44:94:f8:55:09:ea:16:27:ee:b8:
         4d:bb:c7:fe:3a:5b:2f:7f:fb:5f:29:da:cf:d1:61:2e:97:70:
         d2:08:06:bf:62:00:35:e5:fb:30:ef:be:57:23:78:47:3b:07:
         f9:2e:2f:c8:82:a2:9b:42:a4:97:04:70:a5:bd:7a:22:fa:ec:
         59:19:26:04:9e:a8:4b:16:c6:0f:6c:58:1e:5b:e6:88:6d:af:
         81:18:58:fb:83:61:01:da:53:9e:c8:ac:eb:a7:10:ed:42:77:
         65:e4:63:ce:e8:68:27:80:ee:f6:c9:73:d6:df:12:01:20:88:
         5c:30:99:47:7a:fd:54:ce:f5:9a:b9:af:f1:e2:8e:06:ad:fa:
         c1:44:6a:5f:5f:6c:df:67:11:3a:0c:89:94:32:fe:08:b6:e9:
         86:18:5b:7d:9a:0a:a0:3f:3f:c3:dd:5d:75:49:18:0d:87:b1:
         5c:fa:34:5a:bf:d7:06:d1:8f:5b:11:7d:d8:c1:b0:6b:19:ac:
         73:2a:fd:3c:48:36:26:52:30:62:ca:62:74:9d:df:a7:73:ff:
         29:a9:ec:19:57:76:75:23:72:ef:e0:22:2d:7c:8a:75:c3:7e:
         51:9c:e7:3a:80:b3:02:d1:d6:c2:0f:32:93:05:24:6c:52:4c:
         73:8a:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----