This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          CzwrhABCxu3m8a1iT2MNS4Qjclhftv2ueGylV4xMBD4=
Subject key identifier:   2F:B9:34:4D:79:24:89:E6:2A:BA:8E:7D:C0:CA:17:FE:0F:46:BA:A6
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       22EFF209E2EC9BE42E68080E38B16689546FA74E
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 02 Sep 2025 14:06:03 +0000
ROA not before:           Tue 02 Sep 2025 14:01:03 +0000
ROA not after:            Tue 01 Sep 2026 14:06:03 +0000
asID:                     265175
IP address blocks:        2804:2bc8:e000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Tue 01 Sep 2026 14:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ef:f2:09:e2:ec:9b:e4:2e:68:08:0e:38:b1:66:89:54:6f:a7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  2 14:01:03 2025 GMT
            Not After : Sep  1 14:06:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:87:8a:b2:bd:f3:ae:ad:9a:b9:4f:14:e8:
                    dd:38:fb:e0:58:9d:11:60:c5:f1:90:d4:72:76:d3:
                    50:86:ad:61:2a:4b:58:a4:27:73:a1:ce:90:1b:25:
                    c9:92:92:38:c4:49:e6:f1:8b:09:36:51:0c:ef:72:
                    ce:a5:6c:72:4b:1f:7a:22:00:5c:43:f0:bb:8c:b7:
                    71:6e:f7:a4:52:a2:eb:73:bd:d2:49:79:89:eb:fd:
                    c7:92:ca:20:f6:14:8f:18:f1:80:21:ae:28:b6:d3:
                    46:96:be:91:a0:eb:52:3d:c3:2e:66:71:e3:d2:e3:
                    db:3e:40:91:87:4b:a2:96:3d:30:e5:89:ad:48:4f:
                    f7:05:7c:af:38:03:bc:dc:7b:4b:df:c7:20:1c:e2:
                    fd:05:c8:db:60:e1:d1:25:3d:3b:86:7c:1c:8f:ab:
                    7d:26:22:d3:d0:ca:7f:2e:99:fa:08:f4:98:44:fa:
                    07:35:3c:31:1b:e4:ce:7a:23:89:6c:67:18:47:11:
                    8b:9b:db:5d:98:9b:c7:0d:b5:95:1c:2f:76:0d:3a:
                    c8:86:dc:d9:58:f1:06:7f:0a:5d:61:c0:a4:43:32:
                    06:e9:a2:29:99:60:15:97:d1:4b:bb:99:7a:2c:fd:
                    23:0f:88:88:0e:fd:6c:2d:94:9b:7c:31:14:2f:b4:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B9:34:4D:79:24:89:E6:2A:BA:8E:7D:C0:CA:17:FE:0F:46:BA:A6
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:65:d2:1f:38:26:32:cb:1d:80:e9:e5:72:f8:76:5e:a5:e8:
         2f:f9:4e:a3:d4:db:37:1e:5f:b6:51:d0:53:10:37:2e:ab:e9:
         46:9f:f3:a9:b3:f8:30:da:74:f3:c3:6f:ab:b0:e6:a0:80:d6:
         42:3b:a8:47:f4:00:26:44:50:c8:66:e2:28:b2:c0:35:da:47:
         80:47:32:17:59:bf:34:22:80:5c:68:cd:06:f5:51:b3:a0:aa:
         ef:7b:79:b0:c5:ee:cf:35:d1:d3:c8:6e:34:a1:37:d5:76:47:
         c1:da:e5:08:97:4f:f0:4f:5a:5c:a6:f8:31:c5:20:cd:30:4a:
         83:17:aa:20:ab:61:16:fa:5a:55:32:b5:14:c7:47:57:ab:f2:
         8f:23:6f:5c:51:17:a1:f4:6b:43:af:23:87:5f:d7:df:b6:b2:
         fa:0c:51:a8:95:d5:f9:e1:41:bc:6a:c9:b9:16:60:5f:02:1d:
         15:34:b7:8e:86:2b:37:ee:74:2e:96:06:ca:0b:50:e7:4a:84:
         02:e1:b0:57:0e:50:3d:19:24:23:b8:62:c8:9a:ed:c9:76:f1:
         2d:3c:c8:7f:05:48:47:4d:d9:cc:13:52:d0:62:f5:eb:70:30:
         db:b7:f1:37:a8:91:7e:e7:5f:57:60:4f:bb:b5:b3:31:f4:b1:
         06:ec:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 03:07:41 2026 by rpki-client