This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33322e302f32302d3332203d3e203238313430.roa
File:                     3138372e34392e33322e302f32302d3332203d3e203238313430.roa (raw, json)
Hash identifier:          Mjq32UBxf1pfLgDvw0rWhhfyKGIo9o/Nu9Ae5DC3zzA=
Subject key identifier:   7B:FE:28:98:2F:1E:59:4E:6C:54:7F:3A:87:E0:64:A3:C9:A1:8B:E7
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       6C867803432514E499071264177C1342D77343B5
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33322e302f32302d3332203d3e203238313430.roa
Signing time:             Thu 03 Jul 2025 20:55:46 +0000
ROA not before:           Thu 03 Jul 2025 20:50:46 +0000
ROA not after:            Thu 02 Jul 2026 20:55:46 +0000
asID:                     28140
IP address blocks:        187.49.32.0/20 maxlen: 32
Validation:               Failed, certificate revoked on Wed 09 Jul 2025 02:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:86:78:03:43:25:14:e4:99:07:12:64:17:7c:13:42:d7:73:43:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  3 20:50:46 2025 GMT
            Not After : Jul  2 20:55:46 2026 GMT
        Subject: CN=7BFE28982F1E594E6C547F3A87E064A3C9A18BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:50:67:52:9a:3e:af:d5:9f:ee:0a:a9:bf:
                    e3:09:16:d5:80:35:1f:99:8e:50:00:78:45:69:f3:
                    df:76:ab:75:9e:86:22:74:c0:12:f3:79:b7:bf:9f:
                    c2:7e:3e:e0:d2:25:4b:6d:fa:6d:cf:d5:0d:08:96:
                    d4:e5:12:1c:dd:fe:96:02:08:c1:6e:81:ca:31:05:
                    e2:59:91:7d:9a:fd:c4:00:d0:f0:97:d2:52:92:09:
                    64:61:0d:0b:71:0b:e7:b7:f6:2c:c0:d4:d8:77:3e:
                    8f:24:8c:c1:ec:05:9b:27:69:ec:f8:94:55:6c:e0:
                    74:43:27:49:1c:e1:a6:6f:f3:4e:65:02:14:10:26:
                    b6:a9:a8:d5:ff:cf:d8:bc:94:c6:73:ee:78:6b:cf:
                    79:43:37:85:a5:7a:d3:a4:a8:6d:55:11:48:00:81:
                    1b:a3:14:bb:91:2e:8a:5b:94:fa:29:46:2d:95:7f:
                    63:5b:9a:30:87:23:d3:5c:14:88:ce:9e:10:9b:90:
                    9c:b1:21:f6:b1:7c:83:27:ed:46:9b:37:b1:10:e9:
                    76:09:e4:1b:00:7e:43:42:30:99:ba:d7:53:e2:e5:
                    d6:a9:c5:d3:1f:c0:3a:6c:eb:26:f4:4f:50:d0:7e:
                    32:77:2d:4f:41:74:5b:2d:eb:b0:8a:9b:2a:20:b8:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:28:98:2F:1E:59:4E:6C:54:7F:3A:87:E0:64:A3:C9:A1:8B:E7
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33322e302f32302d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:98:e7:7d:59:ac:dc:d4:40:0b:a4:12:40:e5:02:e6:70:30:
         e7:f3:85:0c:63:07:ec:df:06:74:3c:fa:57:95:32:fe:93:66:
         f8:97:f2:d4:e2:43:d7:1a:95:7f:ae:31:97:79:01:e4:ba:a4:
         62:af:ab:5b:a9:f0:86:a6:a4:3b:52:9b:38:27:66:3f:f7:24:
         36:84:ed:18:f2:bb:18:83:cc:f9:a3:b9:ee:65:dc:27:4d:b8:
         25:82:61:05:83:30:a6:b9:cd:14:28:ab:78:2d:7e:f1:97:40:
         42:61:e0:1c:28:84:53:4e:3d:a7:b5:8d:21:31:4b:7e:79:3e:
         21:98:c4:e0:9c:30:86:1b:55:58:dc:94:50:61:ab:2d:79:40:
         25:36:71:27:c9:1a:ee:96:18:e1:9c:86:3a:5f:f2:f0:fc:d0:
         21:89:c4:6e:50:81:87:6f:36:83:ae:f7:10:79:81:5c:47:8e:
         b0:b2:78:c0:22:4d:6a:91:d7:ed:ca:30:13:9b:10:50:00:df:
         e8:9e:70:b3:5f:fa:d9:9b:2e:0d:ac:a0:0a:7b:a5:4e:59:6a:
         07:3d:93:1b:14:0b:94:cd:e5:bf:c3:6a:67:58:b5:c0:0b:e7:
         c4:24:af:0a:af:c0:1c:14:ae:9d:b7:08:44:ab:ec:e7:78:ce:
         68:0b:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----