This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa
File:                     3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          wWqgDdOE8x06KDaVZytPbp4FutywMZHL38+zvcK8USk=
Subject key identifier:   BE:63:F7:CD:3F:EB:2D:F7:C4:9B:32:B7:40:D1:A5:8B:AF:39:ED:14
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       679ED5A734CCABDBC81E495D7012B2AC3397A2B9
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:14 +0000
ROA not before:           Thu 06 Mar 2025 04:37:14 +0000
ROA not after:            Thu 05 Mar 2026 04:42:14 +0000
asID:                     28210
IP address blocks:        138.255.144.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 11 Sep 2025 19:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9e:d5:a7:34:cc:ab:db:c8:1e:49:5d:70:12:b2:ac:33:97:a2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:14 2025 GMT
            Not After : Mar  5 04:42:14 2026 GMT
        Subject: CN=BE63F7CD3FEB2DF7C49B32B740D1A58BAF39ED14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8c:04:0c:c3:cc:61:cd:31:c2:6c:fc:df:24:
                    d8:68:f6:41:8c:77:1f:0e:00:b2:d2:04:45:09:3f:
                    ce:b9:83:97:4b:c3:cc:b1:5a:c5:57:34:32:23:7f:
                    14:85:8a:57:3f:24:a3:c4:ec:5b:e3:0e:2e:a6:4c:
                    bc:48:33:a7:2c:4d:18:7e:87:34:f2:7a:91:1d:30:
                    4c:5a:2f:49:e4:a9:35:db:ae:cd:48:c7:9b:d8:c7:
                    06:aa:c4:c7:58:82:5e:0f:66:a9:aa:b1:d0:b5:6e:
                    27:44:e2:2b:6d:ec:e5:08:79:81:c5:07:21:44:ac:
                    fc:67:bf:c9:2f:b2:f9:af:9a:24:92:a6:2f:0c:1e:
                    a3:24:d5:e7:0b:c9:36:b2:ea:ae:f1:d9:8b:ca:ab:
                    88:95:8a:44:1e:3f:06:e3:6c:c1:2c:bd:46:15:65:
                    a9:f8:43:16:d9:9f:dc:c4:8b:aa:ba:8a:5c:4d:39:
                    ec:a1:9b:17:2d:93:2b:53:47:54:91:e5:e8:32:e6:
                    3a:ea:80:40:73:8e:a9:a9:d2:8d:78:e5:da:1e:f1:
                    7b:57:63:20:b5:00:a1:fc:60:c1:8b:7b:87:94:a7:
                    e3:1f:dd:6f:e6:cb:c7:5d:cb:2d:96:78:4a:d9:7b:
                    27:8e:d1:2f:37:a1:12:57:cd:cc:eb:ab:6d:d3:7b:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:63:F7:CD:3F:EB:2D:F7:C4:9B:32:B7:40:D1:A5:8B:AF:39:ED:14
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:c7:a0:ec:88:a9:5f:6b:f9:58:88:83:1a:40:4f:53:92:93:
         72:21:26:ee:39:f9:47:82:ec:e2:31:40:61:e0:dd:17:27:fa:
         53:07:63:1c:02:17:e9:8b:16:77:10:eb:78:b4:3a:45:63:45:
         49:b7:bf:ee:27:96:3b:45:ee:29:38:8b:9c:40:99:a9:ab:d0:
         79:23:86:dc:4a:67:5d:b8:b9:b5:8a:e4:ac:42:19:e7:47:5d:
         d1:27:e5:8b:6f:d5:52:90:ed:47:2e:f4:61:04:63:b0:74:48:
         40:1d:67:26:64:30:ba:ab:a9:f2:86:94:fb:e7:4d:a7:4f:67:
         90:4d:2b:09:90:45:df:a5:44:97:36:42:1a:a6:51:e2:2b:d4:
         18:08:61:fc:09:8d:1e:99:43:a5:5b:fc:c9:60:bf:19:b1:9d:
         96:b9:cc:df:23:1c:64:b8:25:16:b3:23:c8:58:29:10:b3:cb:
         cf:33:3d:21:f8:29:37:45:71:c4:e9:31:a9:ac:2c:2f:da:72:
         ce:38:69:eb:5f:bb:f1:2d:f8:bc:c7:d8:66:1b:f6:ba:80:33:
         fb:86:25:65:50:81:70:50:2d:94:b5:a6:52:21:a4:4a:ee:d6:
         7e:51:43:74:6b:95:8c:b0:be:d0:de:5a:af:d2:30:7a:f7:86:
         47:79:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----