This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234392e302f32342d3234203d3e20323638323937.roa
File:                     34352e3233372e3234392e302f32342d3234203d3e20323638323937.roa (raw, json)
Hash identifier:          fGwEnTmgzYbmz+/wASiV74quMqXffLuqs6g3rqtk08A=
Subject key identifier:   A6:6E:DE:96:77:85:C0:E2:87:74:B9:D5:A5:D5:E3:39:7B:B0:77:9A
Certificate issuer:       /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial:       0D374D1BE60F2771959F457E2CDB0881287ECC0A
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234392e302f32342d3234203d3e20323638323937.roa
Signing time:             Sun 09 Feb 2025 13:11:10 +0000
ROA not before:           Sun 09 Feb 2025 13:06:10 +0000
ROA not after:            Sun 08 Feb 2026 13:11:10 +0000
asID:                     268297
IP address blocks:        45.237.249.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 11:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:37:4d:1b:e6:0f:27:71:95:9f:45:7e:2c:db:08:81:28:7e:cc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
        Validity
            Not Before: Feb  9 13:06:10 2025 GMT
            Not After : Feb  8 13:11:10 2026 GMT
        Subject: CN=A66EDE967785C0E28774B9D5A5D5E3397BB0779A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:8e:70:5b:25:7c:25:05:16:36:42:16:50:
                    13:a1:74:6f:b2:ab:9c:5f:c5:0f:e1:c4:30:5e:f7:
                    cf:48:9c:be:26:32:09:57:b3:15:05:09:01:cd:19:
                    5e:2d:56:84:17:b4:51:fb:12:23:83:66:72:eb:0c:
                    54:ea:a4:1b:a6:b3:89:85:f5:9a:bd:e4:47:04:5a:
                    fc:26:c0:e8:6e:0e:67:bf:23:88:aa:e1:58:c2:dd:
                    63:59:be:ca:bf:c5:9b:9f:ee:17:e8:3e:16:5c:ec:
                    2a:39:bb:50:33:1b:0a:74:4e:a0:75:5f:f4:9b:1c:
                    ac:a7:cf:ce:07:b8:a5:29:b2:7d:b2:2e:64:de:52:
                    9f:aa:37:b2:07:2d:9d:f1:c7:0d:99:00:77:24:ff:
                    0a:ea:72:49:94:83:3f:ca:f8:53:e6:f5:9a:ce:4e:
                    83:e9:26:35:98:f9:03:03:f5:9c:c6:45:2d:0f:b2:
                    52:54:23:4c:21:55:62:62:37:4b:3c:56:94:a4:0a:
                    48:db:2c:6c:f3:8f:13:9a:1c:2f:49:df:71:45:c7:
                    99:61:20:04:61:43:62:e4:b3:61:e4:9b:78:56:bc:
                    fc:b5:ec:2d:2d:78:2f:e2:ba:87:67:a4:c0:aa:51:
                    74:73:6f:70:1e:67:a0:67:df:51:77:df:d9:9e:1b:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:DE:96:77:85:C0:E2:87:74:B9:D5:A5:D5:E3:39:7B:B0:77:9A
            X509v3 Authority Key Identifier:
                keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234392e302f32342d3234203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:c1:59:9f:f1:63:e6:a0:96:18:03:1e:f6:4a:f2:67:a0:d8:
         74:1f:d1:59:38:28:f1:f3:cf:4e:69:90:68:cc:e3:5b:74:ee:
         8b:c3:91:f3:bb:92:a9:50:0b:dd:d6:39:32:ca:00:32:6d:5b:
         aa:0e:cc:dd:1f:05:9f:41:c4:b1:20:7e:2e:fb:83:0a:c6:a9:
         bb:60:35:04:44:ef:85:4b:45:61:ff:b1:99:40:03:26:c1:96:
         e7:95:1d:85:01:d7:5a:ec:b8:f0:cb:d1:0e:02:91:35:1d:d3:
         3c:ce:ff:4a:7e:d8:a9:63:db:b5:7c:a9:67:f8:00:8c:b9:40:
         4c:c4:9c:01:72:01:17:b2:e2:10:ac:25:80:15:de:6a:a7:c1:
         94:7b:7f:7b:16:1d:83:d5:92:02:31:9d:1e:f2:1d:13:cb:e2:
         3a:bf:ba:be:05:b4:1a:64:95:75:13:f3:98:d7:e4:ca:ab:09:
         cf:4a:57:5a:1a:62:ec:60:f8:89:cc:bd:b0:63:f6:c8:10:48:
         c7:d8:e5:00:41:08:96:fc:2e:78:2b:00:c3:c6:52:8c:bd:f4:
         d9:1d:d5:7a:c9:83:9a:43:b6:c5:ad:11:2b:98:8a:43:83:b1:
         47:04:92:44:9e:a2:58:2f:af:39:9b:0b:fa:84:12:72:87:ab:
         19:08:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----