This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          Htzg8pItk0vNuKCkvTh8ujN897pkP3UDXkRnvmtThZU=
Subject key identifier:   F3:BD:49:CE:C0:B2:CC:C8:41:F4:8E:D9:B5:93:0D:B7:DD:D7:47:11
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       2BBE9F35F7763CB704F16829C2D732F421BF65C9
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa
Signing time:             Thu 06 Mar 2025 16:52:49 +0000
ROA not before:           Thu 06 Mar 2025 16:47:49 +0000
ROA not after:            Thu 05 Mar 2026 16:52:49 +0000
asID:                     265041
IP address blocks:        170.150.139.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 04 Nov 2025 16:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:be:9f:35:f7:76:3c:b7:04:f1:68:29:c2:d7:32:f4:21:bf:65:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Mar  6 16:47:49 2025 GMT
            Not After : Mar  5 16:52:49 2026 GMT
        Subject: CN=F3BD49CEC0B2CCC841F48ED9B5930DB7DDD74711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:c9:68:be:63:f4:93:ff:25:2c:21:e7:06:
                    3c:37:b2:4c:87:9f:16:c8:a2:6b:eb:04:7e:f3:6c:
                    15:04:be:e1:52:bd:82:4c:2c:af:a8:b5:af:3d:00:
                    b5:bb:ae:52:18:82:f5:1e:30:4b:68:5d:a7:51:e7:
                    2f:c1:12:dc:1c:39:fd:74:d3:59:b9:17:e6:05:6d:
                    24:92:03:40:16:1b:e8:67:bb:b8:e9:b1:bf:70:6c:
                    c1:3b:b7:61:50:5c:f3:4c:d3:30:1b:97:10:a4:e6:
                    29:f3:c7:55:dc:42:4a:62:15:e1:9e:09:a4:71:c1:
                    0d:8e:31:47:ca:d4:4c:b0:97:cf:76:b7:15:99:54:
                    ab:9c:0c:17:a0:39:5c:c6:e4:cd:53:91:1a:52:a6:
                    9f:93:0c:26:4b:f6:8e:2f:e7:04:82:0a:f6:a2:67:
                    8a:a7:a1:0f:35:c6:57:c5:85:f5:09:c9:61:7a:ef:
                    49:0d:db:05:e1:c5:24:8c:2c:34:59:38:34:8e:02:
                    0a:16:08:59:a2:36:16:c4:4d:41:53:20:ad:56:64:
                    4b:9d:ab:31:82:4f:d3:42:90:65:47:ba:c6:d6:c7:
                    ec:96:e7:3b:78:95:71:82:fe:aa:1a:93:2e:b7:6f:
                    d9:a8:c8:9c:14:15:69:8d:14:55:77:21:84:15:8e:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BD:49:CE:C0:B2:CC:C8:41:F4:8E:D9:B5:93:0D:B7:DD:D7:47:11
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:66:45:2d:a7:e3:56:3e:7f:4b:2a:ca:80:d7:38:a5:08:
         91:d3:ad:b7:54:1a:d7:09:70:1c:b4:3e:96:d7:11:22:50:3e:
         ae:54:f4:67:a5:c6:49:c5:4f:98:3a:40:ef:bb:70:ef:78:8e:
         cb:a6:e9:b9:7c:0a:6b:b7:a7:a8:c7:66:99:f8:6f:da:c1:95:
         6d:89:d9:a6:fd:aa:eb:7a:a7:c3:20:1e:09:f3:b5:65:90:c4:
         06:96:75:51:3a:2f:e7:96:84:0e:56:d9:de:5a:e3:c9:d4:ca:
         3c:53:0c:4c:92:36:c7:bd:1e:93:0d:f7:fb:6b:12:68:9d:1c:
         ab:e2:45:55:12:fd:fc:f5:1f:eb:26:1f:5b:a4:65:6a:36:98:
         af:98:1f:23:ec:81:b0:ce:73:59:99:95:dc:6f:5c:d0:b1:c4:
         22:17:80:32:02:53:93:bd:2f:f9:a5:5c:65:6f:f3:9a:3e:75:
         97:b7:11:88:1f:60:a3:43:2a:47:dd:fc:ce:b1:2e:c3:58:af:
         45:b2:a3:ed:76:24:29:10:1a:5a:59:30:d4:cb:72:09:04:31:
         4e:84:41:c5:73:14:00:94:e7:20:61:89:d4:7e:48:66:6f:d2:
         d5:ca:2d:91:1c:57:8d:e1:fa:22:26:9f:e8:11:69:d7:b8:47:
         c5:40:b5:13
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUK76fNfd2PLcE8Wgpwtcy9CG/ZckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdCQzNCREJDMjg3NzFFMjNCNkEzQUY4RkJEMzY2NEFD
NEMwRUNCRjAeFw0yNTAzMDYxNjQ3NDlaFw0yNjAzMDUxNjUyNDlaMDMxMTAvBgNV
BAMTKEYzQkQ0OUNFQzBCMkNDQzg0MUY0OEVEOUI1OTMwREI3RERENzQ3MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XclovmP0k/8lLCHnBjw3skyH
nxbIomvrBH7zbBUEvuFSvYJMLK+ota89ALW7rlIYgvUeMEtoXadR5y/BEtwcOf10
01m5F+YFbSSSA0AWG+hnu7jpsb9wbME7t2FQXPNM0zAblxCk5inzx1XcQkpiFeGe
CaRxwQ2OMUfK1Eywl892txWZVKucDBegOVzG5M1TkRpSpp+TDCZL9o4v5wSCCvai
Z4qnoQ81xlfFhfUJyWF670kN2wXhxSSMLDRZODSOAgoWCFmiNhbETUFTIK1WZEud
qzGCT9NCkGVHusbWx+yW5zt4lXGC/qoaky63b9moyJwUFWmNFFV3IYQVjit9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU871JzsCyzMhB9I7ZtZMNt93XRxEwHwYDVR0j
BBgwFoAUp7w728KHceI7ajr4+9NmSsTA7L8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMS9BN0JDM0JEQkMyODc3MUUyM0I2QTNBRjhGQkQzNjY0QUM0QzBFQ0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QkMzQkRCQzI4NzcxRTIz
QjZBM0FGOEZCRDM2NjRBQzRDMEVDQkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzEv
MzEzNzMwMmUzMTM1MzAyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKqWizANBgkqhkiG9w0BAQsFAAOCAQEAKdNm
RS2n41Y+f0sqyoDXOKUIkdOtt1Qa1wlwHLQ+ltcRIlA+rlT0Z6XGScVPmDpA77tw
73iOy6bpuXwKa7enqMdmmfhv2sGVbYnZpv2q63qnwyAeCfO1ZZDEBpZ1UTov55aE
DlbZ3lrjydTKPFMMTJI2x70ekw33+2sSaJ0cq+JFVRL9/PUf6yYfW6RlajaYr5gf
I+yBsM5zWZmV3G9c0LHEIheAMgJTk70v+aVcZW/zmj51l7cRiB9go0MqR938zrEu
w1ivRbKj7XYkKRAaWlkw1MtyCQQxToRBxXMUAJTnIGGJ1H5IZm/S1cotkRxXjeH6
Iiaf6BFp17hHxUC1Ew==
-----END CERTIFICATE-----