This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa
File:                     3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa (raw, json)
Hash identifier:          9nG+If7/vqtEBfhrTRvqAyrxXu6OdomEz+c+DKJjHGU=
Subject key identifier:   50:D7:0C:77:3A:10:B8:D0:A7:40:C3:71:3A:04:56:BE:4F:BB:26:79
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       011A0D052C010BD1ACF2C41565CB5B3A7A1BCEA6
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa
Signing time:             Sat 27 Dec 2025 16:21:47 +0000
ROA not before:           Sat 27 Dec 2025 16:16:47 +0000
ROA not after:            Sat 26 Dec 2026 16:21:47 +0000
asID:                     61675
IP address blocks:        131.108.161.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 29 Dec 2025 21:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1a:0d:05:2c:01:0b:d1:ac:f2:c4:15:65:cb:5b:3a:7a:1b:ce:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Dec 27 16:16:47 2025 GMT
            Not After : Dec 26 16:21:47 2026 GMT
        Subject: CN=50D70C773A10B8D0A740C3713A0456BE4FBB2679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:99:ff:10:5f:94:93:4f:02:c8:e1:84:20:
                    a5:0b:ae:d3:d3:3a:e0:a1:8d:2e:71:89:cf:d3:e0:
                    73:9b:6c:bc:4c:18:ac:e0:94:c1:d1:1e:05:83:7d:
                    34:83:98:b4:38:06:39:c8:4d:5e:3b:7f:d1:70:76:
                    7a:07:51:d8:21:12:9b:c2:76:e2:98:ca:d6:94:89:
                    de:0d:74:80:82:f0:ad:b4:70:b1:04:a7:b8:77:d5:
                    77:a8:7d:dc:54:c9:34:1b:89:7c:2e:20:25:a3:2b:
                    ad:a5:3b:c4:86:67:c9:da:f9:5a:ef:84:e2:9f:b1:
                    2c:18:3a:3c:cc:f6:9c:41:65:af:22:23:ef:a4:15:
                    80:51:ed:e0:15:ab:f8:97:a7:d0:63:73:c1:02:0f:
                    94:cb:0b:b6:31:27:de:2c:4f:66:90:b9:67:b1:20:
                    76:f2:85:66:69:09:8c:02:03:ce:d3:1e:8d:f2:23:
                    8d:7d:d9:d0:e2:bb:f7:22:c6:8c:59:99:0c:18:bd:
                    a5:a4:0b:2f:9b:6a:57:6f:ce:35:b5:ce:f7:a0:d8:
                    40:a1:7b:dc:af:b5:9f:a0:db:43:91:6c:5f:a9:7e:
                    bd:25:1d:07:96:7a:91:3a:2d:53:f2:63:ba:f9:4a:
                    28:8a:5b:51:44:f9:12:82:cf:b9:9a:95:07:fe:0f:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:0C:77:3A:10:B8:D0:A7:40:C3:71:3A:04:56:BE:4F:BB:26:79
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:6b:d6:7d:79:b8:04:99:c4:29:0c:70:79:f5:b3:40:1e:
         1b:75:4a:1f:1f:4e:fd:57:34:71:ff:e0:46:4b:52:20:c1:eb:
         1d:a3:91:bb:79:8f:02:2f:2c:62:7a:54:9a:1e:9b:c8:2e:b5:
         98:f4:84:a6:1b:b1:19:bd:1f:80:90:6a:e8:36:ce:c0:f1:17:
         c7:0c:85:0f:0e:06:ca:7c:8f:54:7a:5d:b2:2a:02:29:5f:fb:
         cc:0d:be:34:d0:c3:7d:1b:d4:76:3c:5a:9a:c8:4e:d0:b2:18:
         0f:2b:9b:56:4e:a1:87:37:70:e0:9d:3a:e2:de:e6:4a:72:93:
         3d:83:36:2b:46:39:a4:d9:d4:7c:c5:b8:9a:e4:1e:fe:c1:32:
         9c:c5:15:24:16:95:18:5e:b8:64:09:25:84:69:16:75:6a:93:
         84:b6:d5:72:2b:b6:68:bb:63:d1:87:51:55:43:07:6d:eb:9c:
         4a:2f:c0:c3:11:7e:45:9c:44:2a:eb:1c:92:a8:c5:f3:ab:37:
         8b:8d:71:48:44:76:4f:58:71:6b:41:5e:c5:14:12:8b:7e:51:
         ec:d7:72:53:c3:3c:36:f6:09:fb:7a:11:b6:7d:e9:a9:7e:4c:
         00:a9:23:97:99:8a:b7:7b:0f:3c:34:27:84:32:93:90:a2:e6:
         48:6c:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----