This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa
File:                     3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa (raw, json)
Hash identifier:          9SsdRo7F/WQKm+zUuXydKWyuBOs8eQuYsJD3wiY7ifQ=
Subject key identifier:   0E:8E:08:DC:1C:AC:40:11:31:1C:B5:96:36:6B:AE:70:51:BC:5F:5D
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       1E1D35A55DEE31C7B6FF244845520B9608839AA2
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa
Signing time:             Wed 07 May 2025 19:31:17 +0000
ROA not before:           Wed 07 May 2025 19:26:17 +0000
ROA not after:            Wed 06 May 2026 19:31:17 +0000
asID:                     263495
IP address blocks:        191.243.48.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Thu 23 Oct 2025 12:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1d:35:a5:5d:ee:31:c7:b6:ff:24:48:45:52:0b:96:08:83:9a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: May  7 19:26:17 2025 GMT
            Not After : May  6 19:31:17 2026 GMT
        Subject: CN=0E8E08DC1CAC4011311CB596366BAE7051BC5F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:da:d6:5a:08:aa:50:33:ad:69:68:21:7a:
                    37:c1:3d:75:6f:3f:1a:e4:da:c6:e1:84:64:56:f4:
                    21:d6:43:99:11:a8:18:e9:95:7b:f5:fb:eb:cb:d5:
                    ce:45:3d:d7:be:26:92:c3:7f:47:07:90:85:98:0b:
                    cc:33:11:36:f3:76:cd:50:6f:ab:88:af:f3:a7:95:
                    cc:2a:1c:fd:5e:ec:3a:06:e6:9c:49:1f:70:54:0b:
                    ce:0c:7b:ec:47:42:75:73:49:96:52:19:d7:6c:66:
                    08:28:b9:00:30:2b:95:7d:d2:f8:74:2f:9b:b1:cd:
                    3f:1f:bd:43:10:6c:f5:7e:d2:ab:04:a1:93:6c:36:
                    4d:e4:84:e3:e6:d4:b8:74:ca:55:8c:c0:c2:d4:af:
                    9c:dc:db:16:19:7f:54:a5:b0:46:e5:b4:65:1b:7b:
                    24:6c:bb:e9:17:74:ea:a0:62:26:c2:68:21:05:d5:
                    c1:42:1d:d2:2c:30:71:06:4f:89:2f:65:be:78:59:
                    0f:ce:91:7f:96:25:40:c9:1b:53:b0:13:cb:3a:31:
                    fd:19:24:72:a8:43:26:39:ee:f5:b0:70:e3:62:be:
                    2c:14:12:ac:c6:3a:68:60:29:40:b6:9b:4a:c0:ff:
                    26:88:12:29:21:f9:63:f6:ab:70:f6:c5:de:f7:ad:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8E:08:DC:1C:AC:40:11:31:1C:B5:96:36:6B:AE:70:51:BC:5F:5D
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:fe:48:1e:4b:3d:72:92:73:87:2c:b1:df:e2:dc:56:ef:cb:
         42:9d:f4:ca:ca:4d:69:3c:32:27:3e:b8:82:77:81:8f:a8:1f:
         75:35:a9:27:6f:4e:09:04:f9:91:3a:38:f2:be:1c:4a:c3:e8:
         49:dd:08:a6:aa:37:73:ee:67:17:42:18:ee:c5:6d:6a:52:54:
         36:2b:a1:15:fc:d9:cd:8f:f9:08:9b:4a:25:cf:bc:60:9b:cd:
         5e:80:44:5f:24:83:d8:5f:32:57:df:5f:44:d8:e1:ee:1f:86:
         d0:46:94:63:3d:8f:fa:6b:0c:36:a3:66:43:aa:c6:61:ba:62:
         08:31:44:b5:5f:65:cd:83:a3:c0:6d:12:b4:ba:11:d8:e0:28:
         70:65:4e:80:0b:70:4a:94:d2:be:e2:86:6a:0b:5e:c3:f0:ad:
         63:00:fa:40:19:ee:bc:1a:61:f5:ea:ff:ec:83:df:99:9a:f3:
         9b:00:75:3c:20:40:30:92:db:92:b9:30:cc:f7:c0:5f:ab:38:
         db:76:87:e7:e3:32:c9:f8:15:35:2e:1c:a5:e0:4c:aa:a3:34:
         f5:77:b6:63:63:33:c5:53:34:b2:58:4b:3e:e4:9e:52:9d:9f:
         8e:ef:c9:7d:ea:44:d3:06:b4:1f:bd:0a:a1:bd:96:fe:ae:a2:
         a4:1d:7c:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHh01pV3uMce2/yRIRVILlgiDmqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2
NEE2M0RENzAeFw0yNTA1MDcxOTI2MTdaFw0yNjA1MDYxOTMxMTdaMDMxMTAvBgNV
BAMTKDBFOEUwOERDMUNBQzQwMTEzMTFDQjU5NjM2NkJBRTcwNTFCQzVGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1trWWgiqUDOtaWghejfBPXVv
Pxrk2sbhhGRW9CHWQ5kRqBjplXv1++vL1c5FPde+JpLDf0cHkIWYC8wzETbzds1Q
b6uIr/OnlcwqHP1e7DoG5pxJH3BUC84Me+xHQnVzSZZSGddsZggouQAwK5V90vh0
L5uxzT8fvUMQbPV+0qsEoZNsNk3khOPm1Lh0ylWMwMLUr5zc2xYZf1SlsEbltGUb
eyRsu+kXdOqgYibCaCEF1cFCHdIsMHEGT4kvZb54WQ/OkX+WJUDJG1OwE8s6Mf0Z
JHKoQyY57vWwcONiviwUEqzGOmhgKUC2m0rA/yaIEikh+WP2q3D2xd73rSZVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDo4I3BysQBExHLWWNmuucFG8X10wHwYDVR0j
BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp
U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux
ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1aXlCWFdwUFVISnp6UFoxQkViU2s2WUMydXRITkFpUzVyRW9VbW9maVNZLzAv
MzEzOTMxMmUzMjM0MzMyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK/8zAwDQYJKoZIhvcNAQELBQADggEBACX+SB5L
PXKSc4cssd/i3Fbvy0Kd9MrKTWk8Mic+uIJ3gY+oH3U1qSdvTgkE+ZE6OPK+HErD
6EndCKaqN3PuZxdCGO7FbWpSVDYroRX82c2P+QibSiXPvGCbzV6ARF8kg9hfMlff
X0TY4e4fhtBGlGM9j/prDDajZkOqxmG6YggxRLVfZc2Do8BtErS6EdjgKHBlToAL
cEqU0r7ihmoLXsPwrWMA+kAZ7rwaYfXq/+yD35ma85sAdTwgQDCS25K5MMz3wF+r
ONt2h+fjMsn4FTUuHKXgTKqjNPV3tmNjM8VTNLJYSz7knlKdn47vyX3qRNMGtB+9
CqG9lv6uoqQdfBs=
-----END CERTIFICATE-----