This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/3133382e302e3137362e302f32322d3234203d3e20323731353634.roa
File:                     3133382e302e3137362e302f32322d3234203d3e20323731353634.roa (raw, json)
Hash identifier:          UtC1Oh+x2RWn2qILJCYh54NwsgCMCOUT5rXOQ7Fru6E=
Subject key identifier:   DA:9D:4B:ED:80:78:0A:4B:9E:01:F6:89:91:FB:57:83:3D:C6:59:2D
Certificate issuer:       /CN=352697188E21CDA56966652063EA79DB7E2D6512
Certificate serial:       25CBE1B89765153B3E0A5CA8B64F62162C77F960
Authority key identifier: 35:26:97:18:8E:21:CD:A5:69:66:65:20:63:EA:79:DB:7E:2D:65:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/3133382e302e3137362e302f32322d3234203d3e20323731353634.roa
Signing time:             Wed 05 Mar 2025 22:38:13 +0000
ROA not before:           Wed 05 Mar 2025 22:33:13 +0000
ROA not after:            Wed 04 Mar 2026 22:38:13 +0000
asID:                     271564
IP address blocks:        138.0.176.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 11:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cb:e1:b8:97:65:15:3b:3e:0a:5c:a8:b6:4f:62:16:2c:77:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352697188E21CDA56966652063EA79DB7E2D6512
        Validity
            Not Before: Mar  5 22:33:13 2025 GMT
            Not After : Mar  4 22:38:13 2026 GMT
        Subject: CN=DA9D4BED80780A4B9E01F68991FB57833DC6592D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:b1:f7:b2:c7:d9:a3:e1:4f:34:6d:26:ca:
                    23:c6:15:03:0a:d4:24:40:55:19:e2:bd:4d:b7:e9:
                    9c:34:bb:13:9c:51:c5:ea:a7:c1:d4:18:d1:95:f1:
                    f4:e9:4e:d5:0b:52:c9:ff:7f:6e:19:b3:d7:7a:08:
                    4d:9e:36:a8:41:b6:6b:fe:39:dd:db:8d:4f:52:f4:
                    85:93:66:89:1a:27:4c:d4:46:d0:1c:08:f6:0e:d4:
                    d0:6a:4b:28:aa:66:47:bb:b5:88:80:2a:2a:96:10:
                    6f:22:6b:f5:db:fe:fd:21:f1:0f:52:96:b9:32:5a:
                    54:2c:bb:e2:b7:f5:77:ce:3c:cf:d4:a7:3d:01:e0:
                    a9:9f:34:ed:a3:db:ca:b7:76:06:28:a1:17:6d:87:
                    b0:4c:d5:e1:c2:fb:6b:1d:97:eb:c6:9e:23:1e:b4:
                    88:ef:6b:d4:e9:65:87:2b:ae:eb:2b:5a:80:c6:4d:
                    bb:c9:b4:33:f2:df:96:68:bd:54:05:e7:12:06:3c:
                    09:b0:5f:82:16:44:95:fb:27:61:4c:32:bc:fb:27:
                    57:5f:6a:5f:c4:ff:09:9d:d7:b3:79:21:e5:c6:75:
                    bd:81:63:9c:d4:8c:67:67:95:74:f3:0f:c2:56:6f:
                    fd:f9:0d:08:b2:2a:f8:29:b1:63:f2:a8:cb:89:77:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9D:4B:ED:80:78:0A:4B:9E:01:F6:89:91:FB:57:83:3D:C6:59:2D
            X509v3 Authority Key Identifier:
                keyid:35:26:97:18:8E:21:CD:A5:69:66:65:20:63:EA:79:DB:7E:2D:65:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/352697188E21CDA56966652063EA79DB7E2D6512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/3133382e302e3137362e302f32322d3234203d3e20323731353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:f6:b7:73:fb:3e:d1:d0:43:3d:6b:40:20:d5:1d:ad:15:b9:
         c4:07:cd:78:de:c5:a0:15:4a:73:a2:96:5f:cc:22:62:9f:c6:
         a5:69:e7:f4:1f:1f:cc:85:41:a6:34:c7:69:36:e4:88:c8:d3:
         09:09:1a:f4:a0:fd:ef:3b:22:e0:19:33:2d:a1:b5:0d:05:ef:
         eb:00:0a:97:67:cd:84:40:9e:60:4b:55:b5:8c:51:db:f0:91:
         79:a6:7c:f9:a9:a6:f0:25:81:b9:cc:5d:9a:a7:33:b7:dc:96:
         1c:b0:62:b1:9b:79:ad:db:83:2c:8e:18:d1:36:99:d1:46:d3:
         dd:18:7f:9e:e4:db:2e:66:4d:1e:e3:4c:0d:f4:92:e2:ee:da:
         0f:b2:e6:47:70:74:22:8b:b5:a5:38:35:5d:a5:46:01:92:2a:
         06:d9:ae:42:33:c6:c9:e4:5b:f3:48:0c:7e:39:5c:20:cf:85:
         9d:0d:50:1f:be:d3:cf:ab:10:42:2f:4d:14:43:cb:1e:6a:0f:
         1e:5e:d2:2a:d8:d5:d0:95:c5:48:6c:ff:15:87:5f:78:e0:63:
         96:10:d1:ca:89:c8:02:f5:79:33:6d:b4:c6:7f:60:30:29:01:
         a0:f1:9d:b5:38:fd:ec:f4:91:01:c8:a6:50:e2:37:e2:aa:4f:
         74:93:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----