This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a343230313a3a2f34382d3438203d3e20323633343435.roa
File:                     323830343a313165303a343230313a3a2f34382d3438203d3e20323633343435.roa (raw, json)
Hash identifier:          T+zhAAYd5vuAwlu8lxtEbL3qZyJYr9GqRyZTr/PPqRg=
Subject key identifier:   2C:1B:EF:87:9F:BC:4C:15:EB:17:C0:F0:C5:5B:54:AE:CE:B7:1D:CA
Certificate issuer:       /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial:       62755213B980E466652820D2BA871BA77C14C7FA
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a343230313a3a2f34382d3438203d3e20323633343435.roa
Signing time:             Sat 03 May 2025 19:36:05 +0000
ROA not before:           Sat 03 May 2025 19:31:05 +0000
ROA not after:            Sat 02 May 2026 19:36:05 +0000
asID:                     263445
IP address blocks:        2804:11e0:4201::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 01 Oct 2025 13:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:75:52:13:b9:80:e4:66:65:28:20:d2:ba:87:1b:a7:7c:14:c7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
        Validity
            Not Before: May  3 19:31:05 2025 GMT
            Not After : May  2 19:36:05 2026 GMT
        Subject: CN=2C1BEF879FBC4C15EB17C0F0C55B54AECEB71DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:d5:db:49:67:29:94:ac:28:b9:c1:28:a8:
                    74:4f:01:47:4c:7b:49:2c:dc:60:af:5b:8c:ac:99:
                    c5:e4:cf:fb:6b:54:6e:fc:7b:b6:be:59:c7:46:ef:
                    39:ab:4c:9b:89:03:8e:78:77:b0:8b:90:2d:b6:f1:
                    e7:b1:77:01:3f:b7:ce:76:53:a4:01:ab:1a:10:35:
                    30:e5:03:38:6e:9b:b1:18:c9:be:00:15:5b:cc:55:
                    c5:82:65:4f:fb:ef:3b:2b:c6:e0:e6:bc:68:17:e0:
                    26:44:33:39:9c:3f:39:b0:1e:c2:b7:fb:49:06:d3:
                    e0:b8:fa:82:68:df:e0:3e:aa:f3:4a:34:1e:1f:49:
                    1f:84:64:fc:e0:83:92:32:2c:67:e7:62:18:76:1d:
                    5d:43:3f:19:33:55:d2:be:ce:b6:b3:bf:9a:fc:ea:
                    a2:0f:cd:54:30:fc:5d:ce:40:11:e7:e5:c2:46:d2:
                    c0:df:2f:88:44:ee:35:e6:84:67:15:fc:3c:da:31:
                    e3:64:3e:63:78:1b:1a:00:58:86:28:ca:7e:7a:96:
                    2f:d6:70:4f:e0:2e:85:25:4e:3f:16:16:dc:37:e6:
                    e0:6d:46:91:6b:42:ec:4e:05:f5:10:16:cb:17:7a:
                    20:39:cf:dd:a5:22:7e:5b:f4:e2:1d:a7:86:b3:d6:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:EF:87:9F:BC:4C:15:EB:17:C0:F0:C5:5B:54:AE:CE:B7:1D:CA
            X509v3 Authority Key Identifier:
                keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a343230313a3a2f34382d3438203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11e0:4201::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:aa:54:dc:ba:3f:76:0c:44:7f:52:7d:32:8f:0e:c4:b8:bc:
         4e:79:ae:54:bc:7c:f4:2e:d4:02:71:de:23:1c:3f:ca:9d:6a:
         bb:85:55:96:eb:9f:ba:cc:68:9f:15:52:dd:71:73:5e:0c:9a:
         91:ca:ff:f9:98:eb:51:20:10:64:a3:c9:82:8f:7e:98:c5:b7:
         57:93:e0:97:ea:47:3e:42:6a:05:09:4e:1e:3f:93:36:fc:40:
         66:b2:7a:62:57:3c:2b:f6:2a:76:52:a6:e9:75:99:e6:81:8a:
         19:40:d8:6d:c5:4d:b8:81:6d:8b:13:5a:12:4c:74:32:18:a4:
         6b:03:c2:20:63:5b:42:93:64:66:5e:5f:9f:b0:4d:58:7d:9a:
         13:a9:d1:48:a5:02:a9:d4:c5:99:00:81:19:4f:6a:13:85:ae:
         cd:50:aa:9c:1f:cf:64:98:4d:2d:60:af:12:2d:9a:43:f4:30:
         4d:f2:d0:cf:0e:2a:6d:4b:67:1a:ac:d7:dd:ce:2a:28:92:9a:
         89:fe:e5:65:16:0d:f7:02:fe:95:aa:94:5c:ed:71:a6:43:0d:
         2e:bf:cd:73:dd:63:3e:c7:90:85:32:da:14:82:fd:70:a6:dc:
         6f:9b:cd:cb:64:f3:0e:ef:54:1a:7b:b6:04:c4:2b:7d:c3:44:
         06:89:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----