This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa
File:                     3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa (raw, json)
Hash identifier:          bZbSk/q6ilZTMzAH4CliEnxKfpwG3XdylKZA11gTuow=
Subject key identifier:   63:DF:75:C1:51:94:C6:D6:14:F4:5C:B3:A9:67:6A:BF:1F:34:73:59
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       510D6FC8E93CD833D2CAEC4A12AF91777ED056FD
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa
Signing time:             Sat 27 Dec 2025 16:21:47 +0000
ROA not before:           Sat 27 Dec 2025 16:16:47 +0000
ROA not after:            Sat 26 Dec 2026 16:21:47 +0000
asID:                     61675
IP address blocks:        131.108.160.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Mon 29 Dec 2025 21:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0d:6f:c8:e9:3c:d8:33:d2:ca:ec:4a:12:af:91:77:7e:d0:56:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Dec 27 16:16:47 2025 GMT
            Not After : Dec 26 16:21:47 2026 GMT
        Subject: CN=63DF75C15194C6D614F45CB3A9676ABF1F347359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:6f:27:af:f9:80:05:c8:f9:84:3b:42:6d:
                    26:f0:61:73:0a:eb:4e:2f:c1:d5:ac:ae:ff:77:59:
                    b0:10:d4:fc:c1:65:c2:9a:17:ac:98:10:36:7a:c1:
                    0e:2f:e2:cf:83:fd:39:74:c3:dd:6d:5c:8e:a5:18:
                    67:3d:9f:03:b9:c7:fe:a1:58:12:44:cd:d9:d1:60:
                    1c:61:ec:95:7d:97:66:80:19:52:47:85:1c:f7:33:
                    87:2b:e2:4d:7d:0f:74:a3:09:ab:d7:23:6a:82:6c:
                    49:ff:1e:87:3b:0f:fe:65:e4:11:e8:c2:d1:83:a4:
                    69:13:49:6f:e0:a7:0d:ef:d4:26:68:2b:46:66:8f:
                    5c:02:df:e7:5f:3b:b6:81:e8:a4:2a:9d:e0:89:c0:
                    97:c9:46:13:d5:4b:a3:ee:1f:2f:7f:fe:64:de:02:
                    12:50:31:35:ce:26:b6:26:22:23:62:e4:bd:7c:1e:
                    96:15:6c:52:7f:46:30:04:19:7e:45:54:7d:46:6a:
                    3a:83:d9:a0:8d:84:44:5e:de:fd:2e:bf:41:31:3c:
                    32:f7:5b:89:6d:3f:40:43:0c:6d:0c:dd:20:29:dc:
                    65:d7:5d:31:92:1f:f1:c0:f9:b5:98:43:9e:b0:d0:
                    88:c3:57:93:c0:81:f2:d3:7d:2a:79:d0:8a:37:ce:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:75:C1:51:94:C6:D6:14:F4:5C:B3:A9:67:6A:BF:1F:34:73:59
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:c8:b4:dc:39:1a:03:a4:28:94:c5:af:48:65:67:8c:c4:
         b4:b3:1e:ab:9d:a6:57:76:d2:30:5a:56:21:2d:f2:1c:7d:e1:
         45:a4:f6:2d:2a:a7:aa:05:13:d6:fe:3f:2c:1c:43:ed:0f:aa:
         75:97:4c:8c:dc:75:a3:11:18:74:17:44:23:e5:ce:c5:be:16:
         6f:e0:20:a2:3e:18:06:99:5e:6d:f2:84:bf:ad:51:a8:71:95:
         c4:b3:7f:a1:96:cb:08:4a:7b:bd:34:b6:cd:14:ce:81:6d:40:
         77:49:c1:87:d8:bb:ea:3d:11:0d:36:06:9b:05:3f:f1:09:45:
         94:7c:08:62:09:08:a7:62:4f:26:a2:f4:c1:03:0a:b2:1d:08:
         cf:ec:4b:74:fb:b1:bb:04:f7:36:db:05:69:b4:05:11:f3:e1:
         f5:33:5a:02:34:a8:b8:32:37:49:c2:02:0e:77:74:4a:d4:e6:
         d0:ae:e8:62:41:a8:93:17:a9:9b:2e:28:20:67:e4:29:0c:18:
         d4:ad:7b:88:61:0f:be:f8:a1:f6:a7:fc:16:2b:38:f3:f1:9b:
         ca:1f:33:d2:aa:7a:d3:39:ee:df:83:1d:5a:e9:8e:49:f6:4a:
         f1:02:97:13:b8:0e:92:14:bf:43:cb:14:ba:f6:d7:4b:f8:e4:
         62:38:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----