This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e203238313838.roa
File:                     323830343a393165303a663730303a3a2f34302d3430203d3e203238313838.roa (raw, json)
Hash identifier:          sL8VWHLQ8wPBB+1fIHZGDV4MZ2CIdD336Zk8I06zPV4=
Subject key identifier:   0A:BF:4E:8C:CA:A7:09:96:C3:D1:3B:A7:FF:0C:10:9E:0B:6E:E6:9D
Certificate issuer:       /CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
Certificate serial:       5EF7AB69567F21987D2F99BA6E03DEEA2329C05A
Authority key identifier: E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e203238313838.roa
Signing time:             Sat 29 Nov 2025 12:09:57 +0000
ROA not before:           Sat 29 Nov 2025 12:04:57 +0000
ROA not after:            Sat 28 Nov 2026 12:09:57 +0000
asID:                     28188
IP address blocks:        2804:91e0:f700::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 02 Dec 2025 10:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:ab:69:56:7f:21:98:7d:2f:99:ba:6e:03:de:ea:23:29:c0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
        Validity
            Not Before: Nov 29 12:04:57 2025 GMT
            Not After : Nov 28 12:09:57 2026 GMT
        Subject: CN=0ABF4E8CCAA70996C3D13BA7FF0C109E0B6EE69D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:8e:d8:f6:20:af:a2:40:fb:bc:c9:81:62:
                    1e:ff:9c:97:6f:95:7f:25:9a:5b:f2:09:b5:85:8a:
                    38:b2:6a:dd:2d:9e:b9:1d:89:01:ba:89:12:27:8a:
                    82:95:70:fd:8b:40:90:61:6f:ad:43:0b:74:0f:5b:
                    9a:75:7a:d7:fe:8b:2e:47:40:99:d5:c9:e5:80:94:
                    53:44:1c:e4:23:56:17:69:6c:79:e9:75:40:35:3b:
                    e5:05:4a:cb:22:f0:f6:05:17:a0:a9:9c:84:b1:e5:
                    50:ec:f6:8d:71:7b:7a:e7:95:e0:0a:5c:de:27:d1:
                    5e:47:ab:3f:d0:b3:1f:8d:7f:3f:d3:5b:83:04:a2:
                    70:a6:3f:8f:3c:b1:4c:b3:46:8e:55:c3:88:0b:e2:
                    a2:e4:b9:82:6a:34:cc:b1:91:75:9a:49:1b:3c:a6:
                    97:6a:18:13:da:4b:56:3f:29:1a:8a:93:8d:5a:10:
                    a3:56:76:d1:5d:71:90:42:44:21:14:55:bd:0e:9c:
                    89:b2:96:82:bb:10:63:05:05:25:ec:4e:7d:81:1a:
                    b1:e0:90:f6:a2:45:34:e8:45:e9:56:3e:68:1f:bf:
                    b1:ba:91:98:7d:38:a8:45:0f:0c:22:af:35:c1:2c:
                    c2:a1:da:58:df:42:78:1b:d3:d2:31:c2:dc:09:76:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:4E:8C:CA:A7:09:96:C3:D1:3B:A7:FF:0C:10:9E:0B:6E:E6:9D
            X509v3 Authority Key Identifier:
                keyid:E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:69:06:9f:b0:06:be:be:85:44:76:e3:dd:d2:dd:79:18:4a:
         4f:9d:09:d6:25:96:e7:b4:71:ef:e9:22:96:c6:d2:85:e6:26:
         61:9b:5a:75:a0:ad:aa:24:ea:77:ce:2d:53:3a:74:f1:78:51:
         dd:83:62:0a:39:c4:0a:49:72:dc:36:17:36:84:17:6a:0a:69:
         77:40:05:a6:c2:a4:be:2a:46:1a:b8:43:0f:80:d1:bc:33:95:
         72:fe:eb:0c:65:59:ec:b7:63:93:f1:5a:e9:7c:ca:4e:fb:4e:
         f5:63:a8:46:72:46:1a:2b:f1:aa:a1:f6:a0:fd:a4:ef:0e:16:
         64:f8:09:dc:55:80:da:e3:ca:07:2c:7d:e3:71:52:86:14:f4:
         e7:8a:67:f2:98:11:b2:ad:6b:b7:64:fd:9b:86:2f:13:50:da:
         5a:ca:06:2a:63:17:68:69:0d:ed:21:c5:1d:fe:a3:45:0a:49:
         4e:31:9a:5b:40:71:ad:c9:5e:9a:ff:78:63:d2:a1:73:66:5c:
         f7:b0:14:d7:58:bf:5b:e3:d7:e8:6a:b4:2c:33:0f:4a:07:d2:
         b2:d6:3a:f1:52:99:4c:bc:a3:b4:d9:98:d7:8d:a5:de:2a:7a:
         21:70:51:43:2c:db:9f:b4:ae:7f:a4:79:fe:2d:b7:ef:2e:cf:
         ba:df:b0:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXveraVZ/IZh9L5m6bgPe6iMpwFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1QzQ2QjA3QkRGRDNCRTU2MjAxMjFGRjNDRjgwQjc0
NjI1MUMwNDAeFw0yNTExMjkxMjA0NTdaFw0yNjExMjgxMjA5NTdaMDMxMTAvBgNV
BAMTKDBBQkY0RThDQ0FBNzA5OTZDM0QxM0JBN0ZGMEMxMDlFMEI2RUU2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkno7Y9iCvokD7vMmBYh7/nJdv
lX8lmlvyCbWFijiyat0tnrkdiQG6iRInioKVcP2LQJBhb61DC3QPW5p1etf+iy5H
QJnVyeWAlFNEHOQjVhdpbHnpdUA1O+UFSssi8PYFF6CpnISx5VDs9o1xe3rnleAK
XN4n0V5Hqz/Qsx+Nfz/TW4MEonCmP488sUyzRo5Vw4gL4qLkuYJqNMyxkXWaSRs8
ppdqGBPaS1Y/KRqKk41aEKNWdtFdcZBCRCEUVb0OnImyloK7EGMFBSXsTn2BGrHg
kPaiRTToRelWPmgfv7G6kZh9OKhFDwwirzXBLMKh2ljfQngb09IxwtwJdo7hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCr9OjMqnCZbD0Tun/wwQngtu5p0wHwYDVR0j
BBgwFoAU41xGsHvf075WIBIf88+At0YlHAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhpWGc5bWNmMnpCZ0hRdGpyaUViTGVld2FpdUhoMlV3NjVyNFNkVXBh
QjcvMC9FMzVDNDZCMDdCREZEM0JFNTYyMDEyMUZGM0NGODBCNzQ2MjUxQzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUM0NkIwN0JERkQzQkU1
NjIwMTIxRkYzQ0Y4MEI3NDYyNTFDMDQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4aVhnOW1jZjJ6QmdIUXRqcmlFYkxlZXdhaXVIaDJVdzY1cjRTZFVwYUI3LzAv
MzIzODMwMzQzYTM5MzE2NTMwM2E2NjM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzgzMTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBJHg9zANBgkqhkiG9w0BAQsFAAOC
AQEAAmkGn7AGvr6FRHbj3dLdeRhKT50J1iWW57Rx7+kilsbSheYmYZtadaCtqiTq
d84tUzp08XhR3YNiCjnECkly3DYXNoQXagppd0AFpsKkvipGGrhDD4DRvDOVcv7r
DGVZ7Ldjk/Fa6XzKTvtO9WOoRnJGGivxqqH2oP2k7w4WZPgJ3FWA2uPKByx943FS
hhT054pn8pgRsq1rt2T9m4YvE1DaWsoGKmMXaGkN7SHFHf6jRQpJTjGaW0Bxrcle
mv94Y9Khc2Zc97AU11i/W+PX6Gq0LDMPSgfSstY68VKZTLyjtNmY142l3ip6IXBR
Qyzbn7Suf6R5/i237y7Put+w5A==
-----END CERTIFICATE-----