This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32302d3234203d3e203238353736.roa
File:                     3138392e33382e31362e302f32302d3234203d3e203238353736.roa (raw, json)
Hash identifier:          iRoKGqSRognc/XUiWqaUWdTl8sFrj/Vj6PF5Q9iE+uw=
Subject key identifier:   53:73:3B:A7:F3:0F:E6:98:F3:E7:E5:C3:8E:DD:D4:71:4E:3F:2F:56
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       026DE52609BF946A672805B5C0D5B265FD2624EF
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32302d3234203d3e203238353736.roa
Signing time:             Fri 18 Apr 2025 14:30:49 +0000
ROA not before:           Fri 18 Apr 2025 14:25:49 +0000
ROA not after:            Fri 17 Apr 2026 14:30:49 +0000
asID:                     28576
IP address blocks:        189.38.16.0/20 maxlen: 24
Validation:               Failed, certificate revoked on Fri 04 Jul 2025 21:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6d:e5:26:09:bf:94:6a:67:28:05:b5:c0:d5:b2:65:fd:26:24:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 18 14:25:49 2025 GMT
            Not After : Apr 17 14:30:49 2026 GMT
        Subject: CN=53733BA7F30FE698F3E7E5C38EDDD4714E3F2F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:87:f7:bb:b4:13:09:7f:2e:17:ec:f9:34:
                    dd:e5:39:5d:a5:08:54:fb:d8:b1:a6:87:f5:f7:9e:
                    0c:f6:9a:bc:df:ed:f1:2d:35:5d:8d:33:d5:98:6d:
                    76:e2:88:da:dd:48:92:ef:4a:36:24:f9:25:bc:e1:
                    3a:4b:27:97:18:1e:77:ac:44:46:1b:c1:1f:52:c0:
                    a8:91:34:b8:cd:b6:6f:6a:ad:e9:0c:b1:c1:f2:46:
                    90:02:dd:98:ad:a7:3a:f2:cc:1a:70:f6:35:0a:9b:
                    d2:63:78:2b:b3:ce:57:97:02:da:b4:0e:62:d9:80:
                    6c:11:da:79:a7:9c:49:e5:1a:fd:eb:6c:70:b2:e9:
                    3b:a8:11:2e:41:14:7c:2e:05:6a:3a:cd:6b:a8:57:
                    44:d9:b3:e1:62:a3:93:31:ff:68:39:d3:eb:f4:6a:
                    ca:5c:8f:52:b1:4f:1f:3f:3e:cd:cb:df:59:df:98:
                    c9:36:37:fa:c8:24:3e:f2:1a:7c:4a:e2:e7:f0:5c:
                    35:ca:32:8f:4a:ad:50:74:8c:a4:34:ab:89:54:b6:
                    c9:ba:ce:5d:74:6f:36:55:59:e3:d0:d0:dc:cc:f0:
                    58:a4:b9:d6:ad:78:df:6c:8b:3a:2d:60:8a:65:a6:
                    53:ce:66:61:59:53:1d:e1:66:6e:1a:c2:e8:84:52:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:3B:A7:F3:0F:E6:98:F3:E7:E5:C3:8E:DD:D4:71:4E:3F:2F:56
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32302d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:81:8a:38:91:d9:18:78:4a:f5:30:81:11:27:ae:46:4c:16:
         9a:ca:21:86:51:5b:37:53:37:80:1a:55:00:d9:48:d4:31:bd:
         ad:51:86:4a:57:f5:63:11:13:3a:14:6f:4f:0a:8c:d7:82:2b:
         3a:34:d2:b7:c9:85:c0:37:5d:08:fc:ad:42:0a:70:8c:07:70:
         bc:07:09:3c:20:2f:0f:fd:8d:6b:4d:c9:7b:46:aa:9a:bb:dc:
         2b:15:f1:9a:e1:cd:88:dc:3c:f5:4b:fd:37:a5:1a:0e:40:9c:
         90:c6:60:a9:ee:b5:b3:cd:46:e1:90:b9:4b:18:55:5f:d0:55:
         5e:92:b6:10:21:be:e2:1e:78:0b:bd:7b:48:69:c9:ce:4e:0e:
         86:7b:36:43:f8:21:ff:f7:5d:98:9a:8d:bc:23:c3:a1:f2:2c:
         09:bf:b9:b2:36:0e:c8:8c:41:5d:d4:14:67:9c:96:d1:81:62:
         71:bb:28:ec:e3:14:54:a3:b9:94:82:d2:76:45:9d:95:de:8c:
         d8:34:01:10:b4:b3:c1:2d:18:76:93:9b:c2:fe:45:37:34:58:
         6c:bc:54:a6:48:86:1e:ee:48:52:74:34:36:0e:9e:22:c5:3e:
         bb:47:fd:c3:6e:4a:cb:12:ed:c6:3c:17:f6:d1:98:e4:1a:42:
         3a:1b:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----