This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          aO4MX6oCA21u0cTPVQ4P+f285LASCkjtzeQaOS3Bh1o=
Subject key identifier:   46:76:9C:6B:62:5B:8C:E4:CF:9F:DB:FB:87:DC:97:9F:6B:E1:61:F0
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       6878489CA038EB5F337B6CD1F33F3CF5956C3923
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
Signing time:             Mon 11 Aug 2025 13:19:40 +0000
ROA not before:           Mon 11 Aug 2025 13:14:40 +0000
ROA not after:            Mon 10 Aug 2026 13:19:40 +0000
asID:                     267027
IP address blocks:        45.227.168.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:78:48:9c:a0:38:eb:5f:33:7b:6c:d1:f3:3f:3c:f5:95:6c:39:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Aug 11 13:14:40 2025 GMT
            Not After : Aug 10 13:19:40 2026 GMT
        Subject: CN=46769C6B625B8CE4CF9FDBFB87DC979F6BE161F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:69:b3:c5:53:81:a3:ed:1e:b8:c0:14:ed:
                    26:32:f0:3e:73:04:12:0b:43:63:4a:8d:77:19:62:
                    58:d0:ac:13:24:17:b1:56:00:08:33:08:f5:17:88:
                    71:a6:bf:7b:0a:89:3c:29:7e:da:39:e4:4f:85:33:
                    05:30:c6:08:44:99:7b:d0:81:09:8a:c3:03:e8:80:
                    cc:a2:53:d1:47:39:0e:3a:48:d3:c2:9f:3b:fa:8d:
                    5b:f8:ba:8e:aa:37:17:89:2a:b9:d8:31:5e:07:7f:
                    95:61:73:c0:7f:b1:a9:7b:e7:36:74:89:43:23:7e:
                    02:db:9d:db:46:23:06:a4:f6:b2:8f:5c:d2:9c:62:
                    41:ac:61:0c:8e:5b:7e:6c:bf:7f:a5:bf:f0:a7:44:
                    b2:4a:0d:ce:18:6e:8b:34:b3:b1:c5:68:b5:e1:75:
                    c9:65:9b:82:bb:61:13:25:71:d7:6a:dd:d5:00:47:
                    05:60:cb:9e:24:de:e7:29:d9:57:0f:cd:e3:21:26:
                    bb:c9:66:82:d9:2c:f0:84:72:30:51:f6:13:98:25:
                    88:ca:e3:b8:c2:e0:cc:02:d6:9e:e2:26:0f:48:4b:
                    2b:ad:1a:01:d9:bc:70:01:8b:81:0f:ab:30:ce:73:
                    0b:b9:7f:98:9b:51:ed:12:cd:5a:10:e3:31:f8:5e:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:76:9C:6B:62:5B:8C:E4:CF:9F:DB:FB:87:DC:97:9F:6B:E1:61:F0
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f5:d0:91:bb:56:a2:cd:77:bb:43:fe:b6:47:f1:bb:3a:b9:
         e6:51:dc:34:53:7b:70:f4:a6:83:39:44:8c:4f:62:d1:72:df:
         cd:28:24:9f:48:c0:71:5c:17:4f:45:39:07:9d:15:67:53:d1:
         f1:cb:fc:c7:84:49:26:85:af:de:e6:f8:4b:f6:0f:48:27:82:
         35:95:49:be:4a:bd:6d:3e:d5:87:ee:aa:8f:a9:f5:0e:39:f8:
         c7:03:c1:2b:b0:e0:7a:0a:27:ae:3b:c7:ce:38:64:69:1d:6b:
         59:cd:62:f0:b6:ba:24:b5:a6:59:66:95:92:52:b0:29:70:df:
         f9:cf:1e:8f:4c:b7:b0:8c:e1:72:58:5f:fa:a3:6c:ec:2e:c5:
         df:4e:85:14:be:72:b2:8e:dc:fe:3a:d7:d1:44:e8:00:0a:28:
         a2:b1:6b:fc:37:21:d0:cf:01:16:3b:7b:c2:e3:e5:38:63:82:
         4f:97:a9:f9:37:be:0e:de:79:56:f8:5a:2c:93:0e:ed:35:2f:
         f9:e4:f8:f2:dc:f2:ef:44:a7:d0:bd:11:25:ab:87:e9:07:cb:
         8b:2b:fe:72:67:85:b7:d8:f9:44:6b:fe:67:a1:09:62:b9:16:
         28:bd:72:6f:17:1a:97:0e:70:27:68:ab:78:f2:c5:6a:93:c6:
         4a:c6:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----