This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32342d3234203d3e20323633303537.roa
File:                     3137302e3234342e3233362e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          kxYWcS6pNrZzPMkBB5yCwIvXYGwfx+1OSYrKEt6j554=
Subject key identifier:   BA:5D:A4:13:A0:04:31:4D:1C:1D:FD:40:A7:A9:4A:15:06:68:D4:89
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       66C1DB125485567844C80797C899DFE1F5A26782
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:24:21 +0000
ROA not before:           Fri 05 Sep 2025 12:19:21 +0000
ROA not after:            Fri 04 Sep 2026 12:24:21 +0000
asID:                     263057
IP address blocks:        170.244.236.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 20 Dec 2025 09:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c1:db:12:54:85:56:78:44:c8:07:97:c8:99:df:e1:f5:a2:67:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:19:21 2025 GMT
            Not After : Sep  4 12:24:21 2026 GMT
        Subject: CN=BA5DA413A004314D1C1DFD40A7A94A150668D489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:a5:86:36:5b:d9:2d:6e:7e:87:a2:b0:20:
                    d4:38:21:68:53:f5:0b:72:a6:f4:3b:7b:41:40:a9:
                    40:10:59:e2:94:cf:29:05:87:44:11:d2:9b:4e:b0:
                    7b:bb:2b:c4:0f:c6:2f:1d:c2:05:10:11:49:b3:5d:
                    2a:81:16:54:9e:63:28:a0:ea:bf:38:33:0d:c0:40:
                    ec:52:ce:7d:42:38:a1:10:aa:2b:2b:07:1e:c7:3c:
                    40:4f:87:13:c0:68:aa:eb:dd:0e:e8:af:e0:97:27:
                    55:2e:2f:c5:89:07:62:e4:a1:5b:65:fc:f6:a0:c2:
                    f9:ba:f3:76:b2:4f:ea:1b:b7:6a:a0:45:b6:fc:bf:
                    51:50:42:21:a2:4f:7c:30:b7:bf:3a:8f:aa:f6:e5:
                    18:7b:06:0c:a2:3e:02:0d:a9:a8:b2:45:a2:60:a8:
                    be:f4:a0:6a:ad:a6:af:46:e3:ed:57:ee:e0:d0:8a:
                    7f:f7:cf:48:ee:d4:19:16:09:34:72:14:a7:8c:98:
                    d6:bf:71:8e:79:3b:3b:37:44:2f:22:ee:d1:bf:48:
                    f8:b4:61:7b:30:09:ef:92:57:3e:ad:e6:d5:e4:6b:
                    f2:d2:86:04:52:45:1e:96:2b:2c:09:07:64:90:75:
                    ad:3a:80:6e:fd:6f:a8:82:c5:5d:4d:a5:c4:23:95:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:A4:13:A0:04:31:4D:1C:1D:FD:40:A7:A9:4A:15:06:68:D4:89
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:2c:aa:32:88:c1:ca:6e:99:94:24:b6:30:a6:bc:b2:57:
         f3:71:b7:d8:1f:f5:d0:b7:23:3d:1e:29:66:0a:db:18:92:5d:
         aa:5a:f2:af:6a:20:18:42:24:9d:52:7e:23:48:ab:49:ec:d0:
         02:02:8f:f1:09:c9:ca:1a:07:f0:fb:63:84:fc:e8:ad:4a:99:
         c5:0e:73:c0:29:e0:3c:18:3d:5e:2d:e1:b8:a0:39:18:22:e9:
         2d:2f:f2:93:a8:fe:81:f5:5e:95:ce:c9:30:98:4c:e0:0b:55:
         08:4f:10:14:23:60:9f:86:b3:2e:05:9a:23:74:72:36:20:a7:
         df:82:17:73:73:c6:2c:3b:03:66:a6:99:07:ee:8b:73:0f:1d:
         1c:13:71:87:8b:03:ab:44:df:5c:24:9a:da:52:f7:b5:43:87:
         7e:fb:c8:50:e7:b8:7d:49:f4:de:93:05:7a:7f:c5:99:98:8c:
         23:1c:df:f1:72:18:5b:48:c5:cf:ed:6d:85:9c:67:b3:d2:2c:
         02:8e:74:61:d5:56:bd:9c:b6:2b:52:47:e6:f0:c2:3c:8b:c7:
         ea:5f:96:a2:b5:79:78:63:27:1f:95:41:e4:d1:cf:5f:2a:9c:
         89:3d:97:a3:e9:0d:bf:ae:07:1e:5b:a2:51:c4:dd:29:d2:07:
         6a:ca:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----