This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e35302e302f32342d3234203d3e20323733363531.roa
File:                     34352e3138362e35302e302f32342d3234203d3e20323733363531.roa (raw, json)
Hash identifier:          Kou2XzVtoXdN7hTXPEZe09y/YDEDOP3zeb5VrQ8GlUc=
Subject key identifier:   8B:89:E2:CD:33:A3:C7:67:10:13:E3:9F:94:28:36:40:63:87:0E:81
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       6943606A50318250626749ACC476D6EA80C7B5CC
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e35302e302f32342d3234203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 13:15:40 +0000
ROA not before:           Tue 01 Apr 2025 13:10:40 +0000
ROA not after:            Tue 31 Mar 2026 13:15:40 +0000
asID:                     273651
IP address blocks:        45.186.50.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 07 Oct 2025 18:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:43:60:6a:50:31:82:50:62:67:49:ac:c4:76:d6:ea:80:c7:b5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 13:10:40 2025 GMT
            Not After : Mar 31 13:15:40 2026 GMT
        Subject: CN=8B89E2CD33A3C7671013E39F9428364063870E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:88:67:ef:f0:19:e9:8e:8d:94:68:5e:40:
                    9d:25:00:81:e9:29:6f:dd:68:e7:ec:1c:fc:06:53:
                    08:fd:62:ba:ad:60:3f:39:21:ee:9f:b0:b8:d4:b6:
                    a7:fd:c6:1a:f2:cf:4c:c0:dc:78:5b:f4:55:67:b8:
                    d4:85:fc:86:64:18:e7:06:f1:c5:63:27:1b:a0:b2:
                    0e:55:55:05:2d:8c:5d:e8:64:e8:d5:d3:c5:e5:20:
                    b1:b7:8b:c4:f1:dd:6b:8a:b6:b2:f2:2c:13:32:3d:
                    21:e3:e5:37:61:c0:36:61:b5:6d:98:24:c5:8a:9e:
                    3e:3a:a3:93:05:a4:82:ef:d9:d8:b8:2f:11:76:12:
                    20:d1:a7:36:fd:26:80:27:90:e0:2d:74:8f:bd:63:
                    4f:c0:cb:0f:0f:0f:5e:63:4e:51:62:70:7c:5d:32:
                    2f:e9:2d:ca:60:a4:02:9e:0f:2a:64:fc:33:27:96:
                    40:2c:91:82:1d:a8:91:ee:75:b1:5c:eb:37:b0:22:
                    ca:c9:7d:a6:41:88:96:17:9f:40:4f:28:23:81:5a:
                    eb:c9:65:76:b0:6a:de:b9:c5:d6:70:41:4f:82:72:
                    ea:b7:de:13:ff:d1:1b:87:ee:db:d8:ac:f4:11:41:
                    b0:e3:10:60:08:dc:a3:bf:c2:02:72:e8:05:7d:b0:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:E2:CD:33:A3:C7:67:10:13:E3:9F:94:28:36:40:63:87:0E:81
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e35302e302f32342d3234203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:12:7d:0b:30:4d:1e:75:5f:00:1e:1a:87:79:98:7e:ea:
         b2:3c:7b:f1:98:76:84:10:27:45:c0:b0:48:50:47:a4:c1:14:
         a6:93:09:33:f2:cd:31:52:7e:76:87:d4:ae:8f:c1:a8:89:44:
         b2:36:74:f4:5d:33:cd:11:8a:73:71:ec:33:0b:77:92:5f:04:
         33:db:4b:da:72:95:fd:5f:21:8c:df:4d:35:31:ce:d4:3f:be:
         67:f8:4e:ec:f3:b7:5c:58:93:0e:94:f3:39:ff:8b:90:f2:d2:
         b7:20:62:89:62:5b:1b:6e:a0:30:6b:c0:b1:92:ee:96:9e:e1:
         1d:7c:f6:16:3d:dc:63:57:94:36:bf:c2:34:56:11:1a:98:5e:
         32:75:96:ff:c7:2e:b2:ba:2e:17:53:8f:41:ee:3c:de:dd:02:
         0d:52:d5:e4:7c:8e:f6:10:ad:bc:52:f5:b5:7a:28:d1:3c:10:
         96:86:6a:19:86:b9:73:13:ad:f4:9f:b8:b4:c4:72:01:6a:4a:
         05:8f:8e:fb:9b:37:d4:78:e9:8e:8c:3b:ba:fa:83:d3:e8:ae:
         29:d3:c5:55:28:1e:3e:9a:5f:d7:87:80:62:4c:be:0c:f7:9e:
         6a:1b:d6:9b:0e:5b:08:df:74:78:cb:11:c3:97:ae:31:08:b8:
         e6:b6:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----