This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa (raw, json)
Hash identifier:          AzTUula94ZnV44NuCjFMZ+SyDV4re9vCJuvwvmOZRMM=
Subject key identifier:   49:B4:F1:8C:57:DC:8E:29:B3:9D:21:26:9F:20:C0:39:BD:FD:9F:5E
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       664A60718ECD4347C1B68AF2B2F7CEA7B671C9D7
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa
Signing time:             Tue 02 Sep 2025 14:06:02 +0000
ROA not before:           Tue 02 Sep 2025 14:01:02 +0000
ROA not after:            Tue 01 Sep 2026 14:06:02 +0000
asID:                     265175
IP address blocks:        167.249.208.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 01 Sep 2026 14:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:60:71:8e:cd:43:47:c1:b6:8a:f2:b2:f7:ce:a7:b6:71:c9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  2 14:01:02 2025 GMT
            Not After : Sep  1 14:06:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1f:cc:3e:05:c8:b9:65:75:af:69:e7:dc:46:
                    a7:41:1f:5e:69:9f:c5:df:62:7e:5b:d5:4f:14:e5:
                    24:e8:93:81:d3:75:4d:7e:38:61:c3:a5:1f:15:84:
                    98:15:df:2c:8f:8b:b8:7b:6e:03:51:ad:51:b1:41:
                    2d:60:9f:66:93:f8:79:60:89:15:3d:73:4e:9e:27:
                    bb:d5:73:41:9a:69:d6:f7:e6:4b:10:3d:5a:68:70:
                    2e:7e:71:e1:cf:0f:a5:fb:05:8f:e0:75:55:98:11:
                    1f:6e:0f:c9:d2:7d:2f:db:da:03:47:cc:74:99:2f:
                    2d:5a:28:ce:82:a0:22:b0:ad:21:36:32:5d:27:f4:
                    77:3d:6f:6a:3e:f4:7b:15:0d:e1:46:50:37:ac:e5:
                    0f:39:13:8c:63:46:8e:5e:13:bd:42:ea:b7:3e:4c:
                    33:dd:44:28:0a:a3:5a:14:b8:56:c8:c3:9f:4f:3e:
                    41:68:a2:d6:3f:e9:16:92:cb:51:13:fc:7d:b0:ac:
                    c1:33:b5:5b:3c:57:b1:f9:0d:30:ab:8e:31:cd:04:
                    31:7f:81:7a:20:45:13:da:06:aa:dc:3c:02:b9:c1:
                    b5:b9:3d:b1:3e:42:8a:67:7c:56:53:8e:d3:b3:d0:
                    34:db:06:7a:52:92:95:54:26:bc:4b:2e:f6:2b:9d:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:F1:8C:57:DC:8E:29:B3:9D:21:26:9F:20:C0:39:BD:FD:9F:5E
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3232203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:c6:85:5b:94:71:96:95:bf:e7:37:87:c3:cf:a7:13:12:c5:
         d8:8a:5b:d4:62:c2:75:37:b3:32:8f:08:1a:9b:66:be:57:43:
         3a:d1:da:c0:e1:a5:3d:3c:d1:34:60:08:82:71:f3:9d:1f:b9:
         00:f6:fc:87:cc:f9:1b:89:91:48:d2:e7:c4:f7:9d:00:85:ab:
         56:41:88:d2:22:d2:16:22:70:97:b8:77:ae:f1:82:ff:c5:97:
         fa:8e:d2:f6:bd:f8:13:39:a7:b4:b6:09:3b:d0:88:d7:fd:08:
         36:c6:49:c7:8e:fd:42:76:a3:7d:29:55:09:db:f6:d4:88:f5:
         df:89:e4:07:a7:b9:64:5d:a0:65:ed:c5:d0:3e:78:8c:28:fa:
         fc:c1:9b:83:2b:23:95:94:66:02:57:83:6d:23:41:d0:a6:70:
         40:a6:4b:6a:d7:9a:d2:70:96:a9:b8:15:99:69:8a:20:d9:55:
         e6:ad:8d:7c:b1:6a:07:96:e1:3e:15:60:81:ef:0a:02:48:54:
         5d:2a:78:b3:33:55:16:ba:89:e1:8c:b1:c4:34:76:bc:d2:72:
         d6:7c:fd:77:ba:5d:91:7c:4b:f5:6f:73:36:3d:3a:52:92:a7:
         7e:d9:38:bc:74:b4:b0:ed:eb:22:65:3b:b3:58:21:a6:b6:60:
         b1:92:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----