This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          bjx7txlAKvAkrbVBNCj5VN9MvKIJh7RsOTJ+jHxC0VA=
Subject key identifier:   C2:6B:DA:65:F2:57:95:DC:3B:15:31:D2:C3:E0:61:8D:C1:C9:CF:70
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       6D989AD5A92AF2B0F548CC808372C5039CC44D3A
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
Signing time:             Mon 11 Aug 2025 13:19:37 +0000
ROA not before:           Mon 11 Aug 2025 13:14:37 +0000
ROA not after:            Mon 10 Aug 2026 13:19:37 +0000
asID:                     267027
IP address blocks:        45.227.169.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:98:9a:d5:a9:2a:f2:b0:f5:48:cc:80:83:72:c5:03:9c:c4:4d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Aug 11 13:14:37 2025 GMT
            Not After : Aug 10 13:19:37 2026 GMT
        Subject: CN=C26BDA65F25795DC3B1531D2C3E0618DC1C9CF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:6d:e4:0a:d8:64:04:f2:8a:11:bf:c8:c2:
                    7d:4d:8e:25:2b:43:83:a4:2c:07:f1:20:83:fb:59:
                    9a:37:6d:d5:76:54:20:40:c5:21:37:a8:1a:1a:80:
                    ac:f0:f5:2c:44:93:fe:e7:fb:e0:c9:77:d5:48:b8:
                    91:a6:ca:5d:f9:a2:21:00:9b:e9:41:89:23:1d:7f:
                    31:0a:9e:22:2a:fa:c5:48:5d:d4:1d:c7:b1:56:0c:
                    9a:4b:c3:91:4e:d4:75:76:bd:23:67:e2:2f:9c:e3:
                    28:08:ba:7a:79:c2:75:a7:fd:0f:6a:fd:aa:c9:60:
                    f9:43:06:ce:73:4d:a5:01:c6:29:75:24:69:23:45:
                    ca:19:8f:05:88:89:86:c0:5f:0d:57:51:09:4b:05:
                    f9:f3:80:f5:dd:de:52:4f:e5:b1:19:fa:71:c8:57:
                    06:30:ec:bb:c7:3c:41:f2:fc:6f:1d:73:84:f4:b5:
                    65:3b:de:aa:81:22:01:f6:1b:fb:9e:de:d3:16:6d:
                    26:de:ff:ba:ac:29:00:71:55:c9:e3:02:ca:0d:d1:
                    d7:d7:fa:79:aa:6a:b7:83:2d:94:d9:ad:2e:6c:2c:
                    0f:b6:5a:7d:48:84:2e:03:53:b6:52:bf:4c:5a:44:
                    f9:14:ec:5e:e4:e9:89:8a:b1:8b:31:fb:48:76:3d:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6B:DA:65:F2:57:95:DC:3B:15:31:D2:C3:E0:61:8D:C1:C9:CF:70
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:9e:db:a3:44:69:96:b9:73:42:1e:7d:20:73:38:0f:bc:63:
         69:d8:a3:c0:8d:66:95:b5:10:19:b1:6e:a9:62:5f:07:9e:7a:
         5a:db:19:94:d1:3d:7a:67:05:a9:b4:72:62:19:b2:1a:39:fe:
         71:96:3b:a3:14:56:88:35:46:53:69:95:4a:97:df:70:55:7d:
         e3:78:bc:c0:6f:62:bc:c9:85:9d:89:f2:ff:b2:26:84:28:e5:
         cb:1a:fa:b2:ad:0e:c7:43:95:cd:08:c8:74:04:79:24:ca:5a:
         3f:cd:c4:99:85:03:8c:6c:e2:a6:c5:fd:30:a6:02:6f:cf:93:
         5d:e3:4f:6a:aa:86:e2:b4:7e:d0:fc:2f:38:f7:6e:f7:73:47:
         73:83:b6:a5:4c:44:e2:ec:32:04:81:e0:45:a4:38:5b:95:4f:
         eb:a6:99:55:c6:ae:87:ce:f2:e2:d3:54:c6:5d:e0:eb:99:cf:
         a5:24:ff:59:01:0d:87:f1:99:d3:22:2f:db:ce:ef:4d:5f:64:
         d8:5e:7d:ff:0a:5a:e8:62:14:a1:40:f6:64:a2:ca:cf:65:69:
         71:02:6a:bd:0f:28:77:49:65:69:21:f6:30:b7:0c:fd:db:19:
         60:4e:57:85:0d:99:ef:cf:15:b7:81:8a:1d:61:c4:d2:26:6e:
         96:30:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----