This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa
File:                     3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa (raw, json)
Hash identifier:          Ifs2o+6ETGZl2NyziHF5wHLZUWc/T4jhhkIruUjgqFE=
Subject key identifier:   34:F3:E7:A2:F4:C6:01:6D:2F:69:1C:FB:2E:27:A1:23:5C:63:2E:94
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       7BE25F7A0FE49F2A244F2EDDB0BB876B7A103E06
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa
Signing time:             Sat 27 Dec 2025 16:21:49 +0000
ROA not before:           Sat 27 Dec 2025 16:16:49 +0000
ROA not after:            Sat 26 Dec 2026 16:21:49 +0000
asID:                     61675
IP address blocks:        131.108.163.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 29 Dec 2025 21:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e2:5f:7a:0f:e4:9f:2a:24:4f:2e:dd:b0:bb:87:6b:7a:10:3e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Dec 27 16:16:49 2025 GMT
            Not After : Dec 26 16:21:49 2026 GMT
        Subject: CN=34F3E7A2F4C6016D2F691CFB2E27A1235C632E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ec:35:96:7e:36:a5:7b:48:9d:bb:af:b1:85:
                    b3:47:d4:9b:f9:6c:ab:70:48:0f:91:50:b4:48:b5:
                    55:d2:f7:3f:67:ac:b1:04:fe:73:3f:0c:da:13:96:
                    67:96:08:60:0f:c4:00:08:1e:9b:2e:62:52:c3:cd:
                    bd:2e:b3:c2:1e:16:5d:92:e2:02:90:80:39:41:b3:
                    b6:36:74:13:90:01:e7:ff:9b:9c:0c:58:0d:3e:ab:
                    69:58:1d:30:21:ac:33:85:97:56:d0:f7:32:0f:0c:
                    86:60:e5:0b:52:f9:fc:8c:a1:32:63:89:32:eb:f8:
                    99:6c:35:ed:0d:4b:19:11:bc:d8:e4:ba:42:e3:29:
                    29:47:00:b6:1d:82:94:80:0a:c5:5b:01:e8:03:c9:
                    23:c6:be:b8:0f:6f:a5:fa:5f:7c:95:a1:b2:5c:92:
                    5b:a1:b5:2e:02:70:37:ef:ca:17:54:9a:77:0f:ab:
                    2a:2f:09:43:f2:e0:3e:07:b0:46:62:8e:a8:bb:91:
                    1b:fd:1c:a4:e1:72:ab:c9:df:64:6b:f1:8b:a5:c6:
                    da:d8:62:c8:db:21:96:3d:1a:98:8c:62:11:09:a2:
                    fa:ef:7f:3e:b4:a9:ad:4e:1f:5f:6a:07:e4:a3:91:
                    1b:44:e7:31:7d:a3:41:05:2e:82:bd:61:2d:28:2c:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:E7:A2:F4:C6:01:6D:2F:69:1C:FB:2E:27:A1:23:5C:63:2E:94
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:91:d7:9a:72:97:71:24:21:66:ad:51:2f:f8:d7:f0:6b:d9:
         08:50:a7:0f:38:93:23:81:72:01:b5:3b:76:e4:84:29:a4:bd:
         59:7f:8c:b1:be:06:6b:ee:43:7e:18:18:46:0c:25:72:5c:6c:
         e6:13:53:cd:5b:f1:50:75:ce:17:2f:9c:f6:25:fc:1e:65:6d:
         61:a6:cb:7c:f6:c1:85:97:9d:b1:8d:c4:3a:7b:bc:12:5d:56:
         02:99:63:e4:99:d9:7d:0a:bc:0a:71:68:bd:23:fe:b0:a9:fb:
         90:ab:ca:1d:21:e3:5d:16:46:aa:04:d0:6f:f7:77:b6:cf:4e:
         a1:51:31:b7:b6:35:cc:3d:09:80:44:9f:e5:53:60:c3:e3:52:
         13:c1:e2:95:41:84:7b:af:22:7f:ff:e5:23:35:08:97:b2:61:
         33:3e:6f:9e:eb:48:42:3b:72:22:9c:17:0f:5a:9b:bd:d6:31:
         85:b8:aa:bb:ac:8c:2d:8e:46:ba:2d:58:9a:10:08:c2:13:78:
         71:ac:9e:ef:31:5a:c5:3f:0f:e0:f1:e8:2f:69:b4:7d:94:74:
         2e:0f:5c:ea:3f:15:fd:04:74:5f:8b:d4:3f:13:ed:cc:0c:5a:
         95:bd:1f:33:42:6f:b5:58:16:bd:03:d0:60:ac:3d:bd:ef:56:
         ec:e2:30:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe+Jfeg/knyokTy7dsLuHa3oQPgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE3NTYwQTI3RjQyODg1QzUyRTY2MTQ4MDA3QzI5ODlC
MDMzOURBRDAeFw0yNTEyMjcxNjE2NDlaFw0yNjEyMjYxNjIxNDlaMDMxMTAvBgNV
BAMTKDM0RjNFN0EyRjRDNjAxNkQyRjY5MUNGQjJFMjdBMTIzNUM2MzJFOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI7DWWfjale0idu6+xhbNH1Jv5
bKtwSA+RULRItVXS9z9nrLEE/nM/DNoTlmeWCGAPxAAIHpsuYlLDzb0us8IeFl2S
4gKQgDlBs7Y2dBOQAef/m5wMWA0+q2lYHTAhrDOFl1bQ9zIPDIZg5QtS+fyMoTJj
iTLr+JlsNe0NSxkRvNjkukLjKSlHALYdgpSACsVbAegDySPGvrgPb6X6X3yVobJc
kluhtS4CcDfvyhdUmncPqyovCUPy4D4HsEZijqi7kRv9HKThcqvJ32Rr8YulxtrY
YsjbIZY9GpiMYhEJovrvfz60qa1OH19qB+SjkRtE5zF9o0EFLoK9YS0oLF6bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNPPnovTGAW0vaRz7LiehI1xjLpQwHwYDVR0j
BBgwFoAUEXVgon9CiFxS5mFIAHwpibAzna0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFhUUmhjTEdqbmNXOUp0NThucXRrcFpjZm92b2R1VWFXYmFaR056R0JU
NVcvMC8xMTc1NjBBMjdGNDI4ODVDNTJFNjYxNDgwMDdDMjk4OUIwMzM5REFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExNzU2MEEyN0Y0Mjg4NUM1
MkU2NjE0ODAwN0MyOTg5QjAzMzlEQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhYVFJoY0xHam5jVzlKdDU4bnF0a3BaY2Zvdm9kdVVhV2JhWkdOekdCVDVXLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDbKMwDQYJKoZIhvcNAQELBQADggEBABGR15py
l3EkIWatUS/41/Br2QhQpw84kyOBcgG1O3bkhCmkvVl/jLG+BmvuQ34YGEYMJXJc
bOYTU81b8VB1zhcvnPYl/B5lbWGmy3z2wYWXnbGNxDp7vBJdVgKZY+SZ2X0KvApx
aL0j/rCp+5Cryh0h410WRqoE0G/3d7bPTqFRMbe2Ncw9CYBEn+VTYMPjUhPB4pVB
hHuvIn//5SM1CJeyYTM+b57rSEI7ciKcFw9am73WMYW4qrusjC2ORrotWJoQCMIT
eHGsnu8xWsU/D+Dx6C9ptH2UdC4PXOo/Ff0EdF+L1D8T7cwMWpW9HzNCb7VYFr0D
0GCsPb3vVuziMMs=
-----END CERTIFICATE-----