This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34312e302f32342d3234203d3e20323633303537.roa
File:                     3138362e3233322e34312e302f32342d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          drK5aFKeha7KdpLdiY1CjEBaRqowrWB6g55gbPJCS0c=
Subject key identifier:   DF:4F:5B:FF:35:CF:33:DE:9B:DA:14:EF:C2:6C:7D:71:7A:36:B5:36
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       49DB3B72BD0C7928DA367D3B04762B397AC47CAD
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34312e302f32342d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:25:03 +0000
ROA not before:           Fri 05 Sep 2025 12:20:03 +0000
ROA not after:            Fri 04 Sep 2026 12:25:03 +0000
asID:                     263057
IP address blocks:        186.232.41.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 20 Dec 2025 09:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:db:3b:72:bd:0c:79:28:da:36:7d:3b:04:76:2b:39:7a:c4:7c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:20:03 2025 GMT
            Not After : Sep  4 12:25:03 2026 GMT
        Subject: CN=DF4F5BFF35CF33DE9BDA14EFC26C7D717A36B536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:7c:ae:36:f4:ca:f9:a7:5c:c3:a4:29:cb:
                    c6:04:67:59:6b:6b:31:f6:f6:37:92:d9:31:33:ab:
                    54:6e:d1:f4:fe:f3:33:f4:cc:6c:e9:bb:01:da:bd:
                    23:1a:11:c3:66:d7:d6:cc:f6:53:33:1c:91:70:b6:
                    ed:d7:92:a4:4c:a6:dd:6f:a6:3b:8c:63:a5:da:12:
                    4b:c7:57:ff:46:06:f1:b5:4e:0f:b2:f8:76:9e:6c:
                    80:ba:3d:db:b6:5a:33:98:f2:83:0d:b8:93:6c:47:
                    ec:88:c2:ee:86:57:56:59:09:0a:60:53:20:7a:8a:
                    75:a2:a8:f3:95:30:35:34:18:76:de:a8:4c:fa:4b:
                    f7:ee:93:e8:f3:15:50:60:87:eb:1e:e2:58:8a:43:
                    ae:eb:8d:16:b3:30:a2:c1:62:7c:e3:ff:37:6e:21:
                    f2:ae:01:75:a9:8a:52:9c:06:eb:e8:d5:41:a2:20:
                    6c:8d:2b:48:46:3e:86:48:38:6d:58:56:55:d5:05:
                    84:ff:09:98:6d:f5:7e:cd:ab:2a:58:f2:f8:9a:db:
                    fc:1f:8a:6a:74:68:36:93:2f:60:46:85:40:a7:be:
                    44:ab:54:8d:d2:86:83:a3:ff:18:c2:35:8a:78:c7:
                    d3:ba:64:61:b9:e8:89:d2:c4:b8:a6:e4:c4:27:b3:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4F:5B:FF:35:CF:33:DE:9B:DA:14:EF:C2:6C:7D:71:7A:36:B5:36
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3138362e3233322e34312e302f32342d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:54:59:ac:41:cc:e4:a7:82:f7:a0:3b:4b:d2:1b:1e:86:ef:
         00:44:d6:c8:a6:15:9f:2b:89:ab:e9:bf:0f:21:6f:af:06:54:
         d2:45:62:e6:b5:f8:9c:20:c3:c2:64:80:49:88:c2:6e:2e:80:
         b8:55:21:74:5f:05:e7:db:cc:4c:fd:f5:f4:fb:c4:4c:0a:56:
         8b:5c:1f:dc:8d:09:70:a5:10:bb:99:48:4c:36:ea:76:38:9a:
         8b:35:e8:3b:2c:c9:13:c6:65:21:5c:c0:b4:71:6d:19:57:b1:
         2c:5b:94:4d:54:80:49:22:f7:98:0e:f9:27:3c:99:4b:e3:9e:
         66:46:2d:46:e7:f5:a2:97:1a:a7:0a:99:d1:fb:17:a6:14:99:
         07:18:53:7b:91:1d:7e:73:de:6c:27:bb:66:da:62:43:73:e2:
         e0:61:dc:8d:ce:12:ae:33:c0:0c:9c:f9:b6:c9:67:fe:f5:11:
         da:3d:1e:a7:bb:fb:2c:23:a0:c2:5a:1d:1c:34:1c:e3:9c:c6:
         55:43:9b:08:24:e6:d4:3b:1c:8a:a0:6b:db:0d:f5:81:8e:e5:
         d8:bc:38:e3:e1:99:d3:bc:b7:2d:ed:a7:4c:05:f5:3f:d0:17:
         24:53:37:1a:46:31:17:4b:96:df:17:57:76:32:dc:68:a4:df:
         3b:ee:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----