This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323633343832.roa
File:                     3138392e38342e34342e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          9DUeWnQRu8cqgvvbhSvo7DwMbOLuyeQjgv00VJvTBvk=
Subject key identifier:   E8:48:48:94:B8:21:27:E6:F5:87:53:90:50:AC:51:F5:16:78:D0:C3
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       4471191D8235F02CF00B53C41043EF4ABE74A2AA
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:31 +0000
ROA not before:           Mon 31 Mar 2025 17:08:31 +0000
ROA not after:            Mon 30 Mar 2026 17:13:31 +0000
asID:                     263482
IP address blocks:        189.84.44.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 11 Jul 2025 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:71:19:1d:82:35:f0:2c:f0:0b:53:c4:10:43:ef:4a:be:74:a2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:31 2025 GMT
            Not After : Mar 30 17:13:31 2026 GMT
        Subject: CN=E8484894B82127E6F587539050AC51F51678D0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:4d:d3:9b:77:b3:94:d0:a2:4a:5f:f2:dc:
                    0f:25:d2:b2:29:21:49:39:41:7e:98:4f:b3:65:08:
                    78:87:90:34:eb:54:52:24:c0:61:6c:26:b7:27:3a:
                    93:60:2a:48:43:92:9b:4c:5b:61:6c:b4:1f:6a:6e:
                    13:ea:b1:c2:95:15:93:ca:61:c8:f2:be:c1:bb:6f:
                    7d:22:a8:01:c9:d9:1d:61:a0:92:96:e7:c9:1f:99:
                    aa:1b:92:97:88:a5:92:2c:d4:d2:e3:09:aa:ce:06:
                    98:82:cc:35:05:15:ff:c2:a0:ae:51:82:a0:b3:5a:
                    bc:0f:10:3b:78:e0:71:55:5e:7e:ad:4b:f7:4b:2b:
                    7e:be:df:5a:26:eb:4d:b8:aa:8f:ca:07:f2:71:6b:
                    50:31:e7:eb:80:99:22:e9:f7:1b:bf:97:7e:f4:f3:
                    69:de:68:b3:25:68:3f:c0:2d:da:6e:6d:eb:81:9f:
                    4f:41:54:79:c6:be:26:00:fe:01:11:0a:ff:5f:d7:
                    6d:77:ec:bf:23:e1:79:93:bb:76:ee:85:96:0f:a2:
                    68:ae:06:30:be:f4:66:c7:dc:27:79:88:77:92:69:
                    45:bb:32:3f:d9:b9:e9:13:34:4a:ec:f4:8e:32:73:
                    1b:cf:f0:1e:90:4f:2d:a0:2d:09:06:b3:b7:60:9b:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:48:48:94:B8:21:27:E6:F5:87:53:90:50:AC:51:F5:16:78:D0:C3
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:b5:19:b7:32:dd:cc:7d:0c:e2:e5:4a:d2:0c:7a:49:33:
         32:59:25:c1:18:fe:60:54:58:4b:0a:5b:21:9d:10:78:73:92:
         27:b9:f4:31:ed:68:7a:d9:a7:77:6c:3c:42:53:18:a7:5a:c0:
         b0:78:50:eb:c7:4d:8c:f7:d5:56:30:fb:18:fb:be:0a:d3:6f:
         41:ce:d0:48:23:10:28:bb:1b:13:16:b7:1e:95:f5:71:88:44:
         4e:a9:0a:e7:24:00:f6:dc:14:8a:7d:61:56:92:d7:e9:bf:b7:
         05:59:d2:53:e5:24:e7:05:90:99:39:93:96:22:ce:cd:b7:6c:
         5d:95:79:55:40:ca:f3:cd:06:6c:39:3c:ab:83:b1:86:a2:87:
         6f:33:5c:56:91:2e:b6:6a:d5:00:bc:b9:80:28:2b:f0:90:20:
         87:10:9f:89:46:68:af:36:b2:ea:37:3f:32:0e:e8:62:23:34:
         b9:77:94:af:84:4a:2c:72:e3:18:ae:fc:c8:68:57:b9:b9:c0:
         ea:51:f3:32:80:f0:6f:f4:24:63:c3:be:e4:5b:c9:09:22:51:
         bc:12:fe:4c:93:71:a0:fe:54:8e:23:f3:77:b8:d1:9b:0e:46:
         00:86:ee:4d:18:68:f5:64:ff:38:9b:07:63:c3:e8:4f:05:c8:
         e0:b8:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----