This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/323830343a336436343a3a2f34382d3438203d3e20323636353238.roa
File:                     323830343a336436343a3a2f34382d3438203d3e20323636353238.roa (raw, json)
Hash identifier:          IGDvzu7QMwJ8m2x4mP8PjJJlq6Ebqs/QSUenFEWQuH8=
Subject key identifier:   5A:9F:74:7B:CE:F7:B6:19:51:DC:4B:CC:B5:C0:F8:7E:F9:98:4C:AB
Certificate issuer:       /CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Certificate serial:       1A5C9F08FCA78D0FD689E8037D02034AB5F45DC1
Authority key identifier: 26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/323830343a336436343a3a2f34382d3438203d3e20323636353238.roa
Signing time:             Thu 17 Apr 2025 13:21:56 +0000
ROA not before:           Thu 17 Apr 2025 13:16:56 +0000
ROA not after:            Thu 16 Apr 2026 13:21:56 +0000
asID:                     266528
IP address blocks:        2804:3d64::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 11 Jul 2025 11:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5c:9f:08:fc:a7:8d:0f:d6:89:e8:03:7d:02:03:4a:b5:f4:5d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
        Validity
            Not Before: Apr 17 13:16:56 2025 GMT
            Not After : Apr 16 13:21:56 2026 GMT
        Subject: CN=5A9F747BCEF7B61951DC4BCCB5C0F87EF9984CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:a6:59:2a:28:2b:18:c9:3e:06:d7:c5:16:
                    3a:60:a9:dc:e0:be:ca:c5:72:78:31:cc:3b:99:55:
                    6c:85:51:5c:20:d0:4b:ed:2a:f6:35:bb:45:b5:00:
                    81:79:b4:48:b8:97:3b:79:26:51:90:b6:b0:77:73:
                    81:4e:a7:61:5b:a5:1a:99:1f:dc:27:8f:e4:7d:d3:
                    39:43:65:3f:25:e7:09:d8:22:2f:3d:45:ab:72:75:
                    62:e7:89:84:f6:bb:27:70:2c:e7:20:bb:a8:0c:40:
                    e8:a7:f1:94:12:fc:cb:9a:fa:21:ac:b8:99:94:9a:
                    cc:84:a4:57:1f:48:f5:ca:00:a1:7d:83:6c:fc:1d:
                    c3:5c:66:5b:25:4e:e4:62:b9:32:91:cb:e2:18:7f:
                    db:34:17:60:e1:75:23:3d:fc:4d:a4:b6:fc:4c:3a:
                    82:19:7e:64:96:cc:a3:69:f7:37:33:d3:e3:04:79:
                    da:e0:f3:9b:6b:1e:e1:e8:cf:c5:7b:98:09:07:94:
                    a9:c6:09:43:cf:e6:da:7c:84:08:5f:f1:ab:87:eb:
                    1c:f9:33:c3:db:89:8f:8b:ac:b9:af:f4:a8:d5:99:
                    d4:db:e4:13:b7:7a:85:bc:4a:f0:d8:c7:47:e3:4c:
                    b2:90:82:09:78:26:64:d5:36:a7:d7:7e:4e:9a:25:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9F:74:7B:CE:F7:B6:19:51:DC:4B:CC:B5:C0:F8:7E:F9:98:4C:AB
            X509v3 Authority Key Identifier:
                keyid:26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/323830343a336436343a3a2f34382d3438203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d64::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:7e:53:59:a5:c5:58:a5:51:5b:83:c4:53:dc:d5:53:80:a4:
         95:0e:e4:09:72:8d:49:5a:b3:e2:ff:6b:cc:a3:74:da:ac:95:
         a7:ab:93:ad:69:de:7a:32:cc:e8:e1:85:2c:fb:4e:f6:14:95:
         ef:49:07:89:93:48:e1:9a:31:a6:b1:eb:25:94:27:25:7e:fe:
         87:52:ee:8b:63:d4:d9:76:a7:af:a2:36:03:7a:1d:c2:2c:0e:
         14:65:32:85:46:cf:45:ef:ce:8a:20:a6:04:e5:82:28:46:56:
         80:c0:d3:f0:28:c5:8b:84:43:40:c4:c0:3a:8a:42:26:a3:53:
         2b:91:a0:32:6f:b8:85:1c:09:03:fc:03:90:99:ab:5a:a7:37:
         54:8d:3e:49:89:4b:76:dc:df:72:b8:f9:7c:a8:5f:8e:dd:6f:
         34:02:9c:cc:61:4f:1b:de:49:c4:b4:a9:d7:47:cc:2a:de:be:
         f5:29:9b:db:ed:19:64:28:5e:bc:4a:f4:3b:c5:24:b3:95:3b:
         ce:04:2b:d0:e3:3b:7d:91:a1:31:1d:99:6e:18:3d:3c:96:a3:
         9e:32:5a:e9:a5:4b:96:96:6c:3f:cf:cb:21:20:93:6d:80:80:
         40:93:11:0d:35:c7:f0:ce:8d:4b:b6:04:73:a5:45:d4:30:69:
         2a:f7:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----