This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa
File:                     3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa (raw, json)
Hash identifier:          dDDu9PAAqE5c5XTmnRH6/jxVTUSXtw0d8lxg0+aJL1k=
Subject key identifier:   2B:46:BB:C9:66:2B:08:A5:4C:60:41:A7:8F:1F:60:5F:C0:C6:25:54
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       3E5B26133A67358781E8D2D99FDBBDD67792BF39
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa
Signing time:             Wed 27 Aug 2025 14:37:15 +0000
ROA not before:           Wed 27 Aug 2025 14:32:15 +0000
ROA not after:            Wed 26 Aug 2026 14:37:15 +0000
asID:                     263400
IP address blocks:        177.222.232.0/21 maxlen: 24
Validation:               Failed, certificate revoked on Mon 08 Sep 2025 14:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5b:26:13:3a:67:35:87:81:e8:d2:d9:9f:db:bd:d6:77:92:bf:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Aug 27 14:32:15 2025 GMT
            Not After : Aug 26 14:37:15 2026 GMT
        Subject: CN=2B46BBC9662B08A54C6041A78F1F605FC0C62554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:98:65:ed:c1:a4:1f:e4:20:e2:5e:48:0b:
                    de:2d:75:f2:a5:da:2f:26:28:37:6c:26:b0:f9:74:
                    e1:a4:59:bf:96:85:29:c2:9f:9b:9b:c0:da:9c:76:
                    aa:f2:ab:0d:2e:6c:eb:c7:64:29:f6:bc:0d:f5:74:
                    5c:3f:6f:a6:b8:13:6c:54:e5:bb:61:6a:de:c1:a7:
                    e3:3d:5b:96:d9:70:66:1c:de:90:7c:14:93:1e:47:
                    74:e3:49:a5:7e:88:9b:d4:0f:0c:80:ba:87:fb:20:
                    b3:73:a3:17:8c:2b:fc:25:02:ca:4c:aa:87:4d:dd:
                    50:43:70:e9:bb:b1:3b:d4:84:1c:5b:5c:05:1a:43:
                    9a:a1:0e:1f:7b:e7:8f:77:7b:61:6c:7c:0b:62:4a:
                    b9:18:8e:47:61:4f:81:be:8f:01:7a:24:19:4a:28:
                    45:6a:5e:2a:11:74:1b:03:9f:0e:8a:b2:ea:96:dd:
                    c3:7a:b6:60:1f:c9:c9:d4:1c:93:7b:da:60:d8:ed:
                    7e:1e:40:c4:bd:af:bf:3c:99:98:3d:90:d6:8f:8b:
                    84:37:a8:22:b8:df:fa:44:13:2e:c6:5b:57:1c:05:
                    42:a0:d2:fb:12:28:15:f9:06:dd:61:b3:23:d4:90:
                    6a:a5:d3:b7:76:49:a7:f5:ac:78:25:2b:25:8c:e8:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:46:BB:C9:66:2B:08:A5:4C:60:41:A7:8F:1F:60:5F:C0:C6:25:54
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:66:49:ad:05:f7:f9:0d:8f:8d:53:06:5a:cc:0f:2a:17:
         89:3b:cf:10:38:d9:af:e7:fd:c2:83:f0:bd:31:ac:a0:c6:f5:
         33:73:e3:17:60:3a:8e:a2:60:c4:4a:22:aa:91:3a:a2:62:2f:
         a9:17:70:02:88:ff:76:d3:20:f2:c6:dd:96:81:bb:43:a1:0a:
         e5:00:c5:9f:01:07:00:76:fc:bd:5c:a6:1c:1a:6d:07:78:5c:
         38:a8:83:0b:b5:bd:8b:8c:5e:68:c5:1b:11:02:46:10:b3:42:
         6b:78:fe:63:f1:b8:c5:46:52:2e:59:ed:43:70:c5:51:9d:9e:
         33:ed:79:52:2b:fc:b3:ad:42:60:4b:95:fe:20:ac:95:cf:5d:
         1b:3e:dc:90:61:90:99:01:48:5f:34:55:48:00:12:af:77:ff:
         d1:36:84:41:97:ee:6d:c0:e2:de:61:e4:8f:34:37:6a:22:82:
         10:35:55:46:b2:d8:a4:0a:79:12:58:92:e8:17:f1:ee:f8:59:
         e1:1e:29:a9:cf:1c:d2:14:2b:8e:f5:8c:fc:1c:b2:63:83:cf:
         64:71:e0:d0:46:4c:b4:b3:9d:ad:2b:9c:aa:86:47:77:3b:b8:
         d1:45:0c:84:68:ce:2f:c7:0c:0d:a8:0a:d0:3f:2f:a9:74:69:
         da:97:1e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----