This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d313238203d3e20323733343336.roa
File:                     323830343a386539383a3a2f33322d313238203d3e20323733343336.roa (raw, json)
Hash identifier:          bC7q4q2pxmR/C77iFsALIciMkNOUW26sAZ9xYjwuWFs=
Subject key identifier:   78:0A:89:B9:F1:9C:09:2A:20:68:D7:7D:92:0C:95:65:7A:66:DB:BB
Certificate issuer:       /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
Certificate serial:       028F042109E6059E291C5474422C97B0EBE6CBD2
Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d313238203d3e20323733343336.roa
Signing time:             Tue 16 Sep 2025 21:00:10 +0000
ROA not before:           Tue 16 Sep 2025 20:55:10 +0000
ROA not after:            Tue 15 Sep 2026 21:00:10 +0000
asID:                     273436
IP address blocks:        2804:8e98::/32 maxlen: 128
Validation:               Failed, certificate revoked on Tue 16 Sep 2025 23:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8f:04:21:09:e6:05:9e:29:1c:54:74:42:2c:97:b0:eb:e6:cb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
        Validity
            Not Before: Sep 16 20:55:10 2025 GMT
            Not After : Sep 15 21:00:10 2026 GMT
        Subject: CN=780A89B9F19C092A2068D77D920C95657A66DBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:85:06:72:e2:6d:1c:a6:59:af:1a:2c:d0:
                    ad:b4:82:04:4d:14:b8:a8:74:80:26:8a:77:8c:0b:
                    bf:3e:64:09:e1:a7:05:98:36:49:2f:fd:3f:79:aa:
                    c5:b4:f5:25:2f:a2:1b:e3:9a:27:b5:8f:28:22:ac:
                    a0:7d:0f:1d:b5:65:d0:e4:52:25:b9:4a:69:bc:a2:
                    f8:6b:3f:d0:8a:8a:a9:8f:83:32:ef:37:b7:48:1f:
                    73:79:fc:c8:f3:f6:e6:ba:52:57:30:1f:27:26:2a:
                    f8:6c:86:5b:f2:a1:a3:1c:42:ea:25:e2:8f:40:82:
                    fa:4e:e6:6d:d1:04:20:d1:81:da:bd:5f:f6:02:05:
                    e4:01:32:f6:83:40:03:4b:8c:18:e3:08:0c:d4:14:
                    ce:b5:07:3c:d5:af:fc:92:d6:26:95:5d:39:f8:f0:
                    03:77:9f:a8:18:ce:cb:43:51:a4:68:e8:69:51:be:
                    68:08:4e:af:e7:cb:f8:98:a3:00:27:a7:31:c9:39:
                    36:0f:f9:00:a9:05:e5:ea:1b:24:67:f8:b1:83:6f:
                    ff:08:3c:1b:23:7d:0d:b4:1e:ab:7c:cf:ad:ed:51:
                    c6:78:d1:5e:63:d8:56:5c:ee:73:b8:7e:a4:38:7b:
                    a2:84:8c:7f:7f:cc:f5:ac:c1:19:c6:4a:a6:c9:51:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0A:89:B9:F1:9C:09:2A:20:68:D7:7D:92:0C:95:65:7A:66:DB:BB
            X509v3 Authority Key Identifier:
                keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/323830343a386539383a3a2f33322d313238203d3e20323733343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:71:d4:81:00:2d:1b:ba:26:8f:0c:9e:30:f4:0e:07:6f:e6:
         21:bd:02:ff:1a:13:cb:5c:ef:e8:19:70:b9:41:be:a1:2f:01:
         d3:94:7c:3f:66:6d:57:07:d8:ca:e9:0d:72:1e:bf:ca:fa:f7:
         f4:c2:2f:f8:07:fa:ba:35:1e:fe:d5:44:a4:e8:66:f2:09:ac:
         13:bd:21:c3:36:bc:8a:fe:53:36:d2:d3:dc:12:6e:cb:37:cd:
         8f:e6:68:23:65:12:b3:d7:d1:3c:21:99:03:6e:f9:cf:0d:59:
         b6:ee:89:4d:cf:fc:79:b7:0f:9d:09:b3:0f:60:b3:af:41:6d:
         6e:1b:44:27:a0:1e:ce:05:84:d3:69:1b:c8:1c:d2:f2:58:b7:
         38:e9:27:8c:4f:f4:73:1c:b5:9f:6d:28:e9:00:d4:ca:cc:eb:
         9c:42:c8:88:e4:d6:a4:c5:b3:1b:74:85:3d:57:a8:25:37:6f:
         c5:d0:89:79:13:fb:f0:e3:88:06:3b:ab:73:11:0e:c1:fb:bf:
         e3:e3:9e:67:d1:fc:2a:2a:62:70:71:cf:c9:11:fa:ff:ed:93:
         41:43:18:f3:a0:9a:ba:d3:47:da:50:d6:34:75:ff:68:28:5e:
         51:d6:ef:15:1e:7b:a9:a1:ef:2b:4a:42:97:e3:b1:cf:a1:8d:
         0d:17:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----