This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa
File:                     3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa (raw, json)
Hash identifier:          vDszvlV0VgGXYhMutJoh4PfxU/qM9hiAcHbYANjf2CQ=
Subject key identifier:   37:73:95:64:57:A6:5D:03:C4:EF:3B:88:9F:4B:E6:66:74:70:F7:B7
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       3C751651CDE23CA3D50E9C8F8E12308A1F8FDB1F
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa
Signing time:             Mon 21 Apr 2025 12:53:33 +0000
ROA not before:           Mon 21 Apr 2025 12:48:33 +0000
ROA not after:            Mon 20 Apr 2026 12:53:33 +0000
asID:                     265078
IP address blocks:        170.233.112.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 21 Apr 2025 13:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:75:16:51:cd:e2:3c:a3:d5:0e:9c:8f:8e:12:30:8a:1f:8f:db:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Apr 21 12:48:33 2025 GMT
            Not After : Apr 20 12:53:33 2026 GMT
        Subject: CN=3773956457A65D03C4EF3B889F4BE6667470F7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cb:1b:ac:d8:f5:2d:01:04:87:5c:7f:9a:3b:
                    62:40:b7:73:90:cf:85:0c:5f:b2:ad:21:61:24:96:
                    93:a0:c3:12:48:d2:5e:c7:f2:5f:1e:44:50:57:49:
                    c8:ad:df:3b:56:f7:23:bd:56:fd:49:82:10:32:3f:
                    95:96:45:f1:f6:f5:ba:44:0e:5f:cb:55:b7:db:a8:
                    c6:06:f7:05:ff:78:9f:5a:60:3f:8a:25:06:ac:33:
                    14:1c:a9:5c:3f:3f:82:02:eb:bc:fc:6a:8f:51:ef:
                    b3:a6:c8:6a:c2:4d:e4:14:23:b3:df:24:1e:bb:1c:
                    10:55:90:4f:69:4d:30:5f:be:57:b6:06:5c:04:75:
                    04:e3:b3:c1:15:e1:9c:26:3d:e0:d6:64:8e:24:f1:
                    f6:c8:90:ca:e4:60:32:c0:36:56:30:fc:c7:87:db:
                    64:93:64:5a:76:85:7b:1f:a4:f8:5c:3e:54:33:ba:
                    7c:df:d3:fe:16:10:f0:6d:ad:5e:47:9a:78:7d:89:
                    15:7f:36:64:79:2d:3c:24:90:47:05:98:88:53:7b:
                    9f:b8:f5:94:90:c6:2b:63:c4:b2:d6:3b:ae:3a:cf:
                    c1:2b:ed:c6:9c:09:43:6a:86:5b:99:48:63:81:47:
                    84:7c:c1:0e:ef:60:19:4f:d2:8d:3a:94:99:3b:22:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:73:95:64:57:A6:5D:03:C4:EF:3B:88:9F:4B:E6:66:74:70:F7:B7
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32332d3233203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:23:3f:0d:9d:ac:1c:23:f4:f9:17:44:ba:9a:a3:38:cb:8d:
         98:85:2c:4b:aa:33:e3:cb:95:93:09:49:9a:52:de:ce:62:0c:
         fa:01:a9:b9:39:93:18:04:e3:79:31:0a:28:ab:49:97:17:cb:
         c7:30:46:49:8b:a1:aa:ee:55:5b:44:21:e5:c3:44:d4:81:20:
         95:6c:09:9b:56:c5:d6:d3:64:b5:46:f1:b7:9f:63:46:61:fe:
         f3:24:25:77:d3:31:7c:a0:d3:f2:9d:07:23:2c:7c:e2:79:b3:
         fa:af:3d:f9:d7:59:bf:93:fb:94:d1:55:0b:34:dd:56:87:68:
         35:a3:b5:f5:a6:2a:ec:2a:2c:73:6c:4f:94:c2:ae:eb:00:17:
         f1:7e:55:8d:76:16:19:5a:68:9f:ac:5c:92:6c:7b:f3:50:1c:
         e4:db:ef:ae:0b:d8:6a:07:20:d1:0d:b0:0f:3b:d7:92:f8:0b:
         6f:8b:35:a7:65:a3:04:9e:d1:65:2c:41:e7:3b:69:0a:21:0a:
         81:8f:1b:da:52:22:db:36:74:a7:b7:d1:f0:ae:44:ff:c2:05:
         e2:e2:5e:7b:8f:d1:43:66:76:b7:40:a2:11:3d:70:23:ee:e5:
         a4:b3:9b:a7:6e:49:f9:e7:6e:ac:17:34:ff:f0:c8:19:4b:a2:
         90:70:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----