This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa
File:                     3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa (raw, json)
Hash identifier:          MUTrxgE0EWjn+ZU4HQFP5l3+z0ypbSA42nnK6IKKde0=
Subject key identifier:   84:5C:37:11:17:BC:35:20:78:02:D0:16:A9:5D:FF:A0:82:2F:6A:C2
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       2B15D19D0F4704944AF82FA4887A5ED51C0DFE6B
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa
Signing time:             Sat 27 Dec 2025 16:21:48 +0000
ROA not before:           Sat 27 Dec 2025 16:16:48 +0000
ROA not after:            Sat 26 Dec 2026 16:21:48 +0000
asID:                     61675
IP address blocks:        131.108.162.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 29 Dec 2025 21:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:d1:9d:0f:47:04:94:4a:f8:2f:a4:88:7a:5e:d5:1c:0d:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Dec 27 16:16:48 2025 GMT
            Not After : Dec 26 16:21:48 2026 GMT
        Subject: CN=845C371117BC35207802D016A95DFFA0822F6AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:11:29:8f:35:55:f4:c3:50:03:de:d2:1f:
                    87:3c:59:d4:f4:6c:91:e6:a8:b5:00:a7:df:25:ad:
                    8c:69:07:a6:d6:93:ec:d9:d9:c0:11:61:c8:d5:c8:
                    04:ab:c6:af:52:f1:bf:d2:87:ce:83:05:90:4b:ed:
                    c6:2b:b9:d2:03:41:82:2b:f4:a8:03:17:ec:03:2a:
                    99:a6:ac:c2:0b:98:45:27:c5:c0:c1:7e:42:56:51:
                    61:e3:dc:ff:93:60:19:7e:83:ea:88:3e:74:64:2a:
                    c8:b6:3e:a4:27:6d:27:b5:10:95:43:24:cf:8b:2b:
                    bd:f8:66:09:1a:26:e1:e7:32:78:ef:b4:9f:c8:cd:
                    24:ff:4a:1f:88:69:1c:dc:72:a4:13:08:3f:83:a4:
                    39:af:dc:be:3f:6c:1a:8d:4f:25:75:9b:81:20:3f:
                    0a:8e:06:02:fb:5c:76:09:64:21:8b:3d:67:83:2a:
                    fe:86:2f:f1:f7:ac:b5:77:25:a4:9a:b9:a5:11:30:
                    ef:4b:73:d3:27:8b:bb:36:51:71:d0:34:bd:ea:8e:
                    ea:69:21:53:1f:02:1c:8c:2a:30:8f:2c:81:9b:84:
                    8a:ce:40:8a:60:b7:3b:0e:b2:d3:33:ad:66:10:f9:
                    ed:6a:7f:1f:ed:d7:14:ee:ab:3c:41:a5:8d:19:b3:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:37:11:17:BC:35:20:78:02:D0:16:A9:5D:FF:A0:82:2F:6A:C2
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:03:be:81:a2:ee:e6:f8:16:83:1d:5e:bd:61:0b:69:4c:cf:
         13:8b:09:97:6b:55:ab:7b:7e:51:4b:b6:8a:0a:09:f0:c1:b6:
         83:15:a1:ca:a6:21:ba:cd:55:e4:dc:e0:de:da:59:34:b5:37:
         0a:36:3e:fd:9b:c6:5a:5e:65:84:3e:62:93:e0:80:d1:2a:89:
         c5:72:0a:bb:34:a1:6c:9c:c7:bb:81:9a:30:4b:d7:76:d6:84:
         6f:ff:33:e9:1c:44:f2:d7:48:2c:21:8f:01:c2:bf:43:b0:b6:
         e1:82:8e:4b:fa:d5:48:fc:a1:9f:ef:99:8e:1d:bb:3a:a9:da:
         2d:2a:fb:89:c6:74:ad:4a:b0:13:20:8f:63:cc:aa:76:af:88:
         a3:f2:8a:01:8b:51:e1:65:1a:05:e6:60:13:b2:88:50:50:17:
         65:39:8f:fc:62:bd:77:a8:3d:46:88:11:81:a5:1c:5d:b9:cf:
         e1:c3:24:68:20:9c:81:93:8a:92:ab:ea:45:c7:16:69:05:72:
         f2:a4:dc:22:77:90:19:7a:98:0d:8d:ba:14:c6:bd:da:5a:05:
         0d:43:a5:56:4c:b6:7a:42:c6:19:40:a6:84:d2:38:03:10:ed:
         be:e9:d1:d8:04:dc:00:ff:c7:5e:95:37:bd:0e:c6:95:d1:49:
         79:cf:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----