This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3232203d3e20323638383431.roa
File:                     34352e3137342e302e302f32322d3232203d3e20323638383431.roa (raw, json)
Hash identifier:          EM15J2kb44hC6hH7gwmxUX76NWeituhxujFHy5EAGJI=
Subject key identifier:   66:B8:13:C4:10:F7:6A:A1:DD:B5:B7:07:11:30:3F:A2:45:D1:8B:F3
Certificate issuer:       /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial:       04952D2C9AF9FD48ACCC3357F469C6065B9C404E
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3232203d3e20323638383431.roa
Signing time:             Fri 24 Oct 2025 00:31:04 +0000
ROA not before:           Fri 24 Oct 2025 00:26:04 +0000
ROA not after:            Fri 23 Oct 2026 00:31:04 +0000
asID:                     268841
IP address blocks:        45.174.0.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 24 Oct 2025 02:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:95:2d:2c:9a:f9:fd:48:ac:cc:33:57:f4:69:c6:06:5b:9c:40:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
        Validity
            Not Before: Oct 24 00:26:04 2025 GMT
            Not After : Oct 23 00:31:04 2026 GMT
        Subject: CN=66B813C410F76AA1DDB5B70711303FA245D18BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:8e:fd:13:8c:f1:66:69:9f:df:f4:8d:00:
                    90:8e:e7:2b:b6:58:d7:ff:ab:37:e2:26:1f:72:7e:
                    af:0e:c9:e6:07:d6:42:fb:1e:e3:a5:33:1b:f8:3f:
                    fb:82:4c:70:d8:be:95:6e:bf:04:58:62:93:29:c8:
                    4c:a0:98:ab:fc:75:84:7e:07:c7:b5:fa:b7:3c:e3:
                    bd:f6:1a:4d:ff:be:9f:18:87:65:cf:6b:06:47:c1:
                    16:35:8a:14:7d:ad:87:c1:14:40:9a:49:9f:fb:52:
                    dc:95:a7:57:9b:29:e2:bc:a1:4a:0a:44:31:df:c6:
                    3a:3f:74:1c:5a:d0:0d:12:a7:9f:c4:0f:70:94:8b:
                    7a:85:23:35:dc:18:32:2e:31:9d:c3:5d:33:95:51:
                    e1:e5:24:69:a2:3d:af:46:64:bb:53:e3:ce:99:76:
                    95:e9:12:56:ee:e6:81:37:c3:b8:73:1d:34:08:50:
                    6e:c4:98:e8:36:34:cf:d2:b1:a3:54:05:14:68:46:
                    02:a9:89:49:b7:5b:6f:02:10:55:3d:84:8b:af:36:
                    02:2e:cf:7d:a3:fa:bc:eb:70:b4:7f:ea:d9:3c:a1:
                    10:53:5f:87:c7:ca:44:08:a5:50:27:46:1f:b5:f7:
                    d8:62:6d:43:87:f7:c2:4b:80:75:eb:1d:0d:ec:08:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:13:C4:10:F7:6A:A1:DD:B5:B7:07:11:30:3F:A2:45:D1:8B:F3
            X509v3 Authority Key Identifier:
                keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3232203d3e20323638383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:6c:73:f1:d0:5f:ef:c8:73:fd:55:d3:46:60:58:f9:6f:
         5e:f9:b1:e9:f6:b5:c8:90:d1:67:69:ce:65:ee:7b:9f:f7:52:
         e6:61:64:47:db:49:f6:a9:67:4c:2a:69:39:f6:68:85:63:c9:
         49:1b:4c:8b:50:ac:a3:ae:52:d1:90:18:03:a5:2f:4d:bf:da:
         b2:51:12:56:f2:12:47:95:3c:fd:57:ca:9e:4c:20:38:4e:7e:
         e0:dd:fe:6a:40:ae:2c:31:0c:1c:90:e8:87:94:d0:46:5b:c0:
         e5:4f:72:7e:48:69:6f:81:1e:1b:0a:f0:4c:c0:b8:50:20:55:
         89:b3:6e:40:37:79:ba:45:85:9e:29:4d:49:4d:d5:ca:77:07:
         1c:3e:d2:92:a5:1d:7b:74:a4:d7:71:13:b7:15:a5:88:8a:1b:
         18:1b:10:df:7f:6e:78:74:52:b4:a0:94:35:b2:29:b0:56:15:
         c8:c9:82:31:f2:06:ea:4c:35:af:e9:5e:08:a9:38:4d:41:01:
         d3:16:37:1f:bd:ec:61:c5:9e:2f:1b:61:dc:60:b2:fa:e6:07:
         e6:03:9d:13:1a:8b:9e:c4:e8:43:9f:45:8b:ea:ff:10:04:e3:
         42:f8:a6:3f:ae:b0:57:d2:3e:56:19:32:be:32:5a:75:a9:45:
         97:43:07:e0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUBJUtLJr5/UiszDNX9GnGBlucQE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3
NEQ1QTdGQzAeFw0yNTEwMjQwMDI2MDRaFw0yNjEwMjMwMDMxMDRaMDMxMTAvBgNV
BAMTKDY2QjgxM0M0MTBGNzZBQTFEREI1QjcwNzExMzAzRkEyNDVEMThCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFI79E4zxZmmf3/SNAJCO5yu2
WNf/qzfiJh9yfq8OyeYH1kL7HuOlMxv4P/uCTHDYvpVuvwRYYpMpyEygmKv8dYR+
B8e1+rc84732Gk3/vp8Yh2XPawZHwRY1ihR9rYfBFECaSZ/7UtyVp1ebKeK8oUoK
RDHfxjo/dBxa0A0Sp5/ED3CUi3qFIzXcGDIuMZ3DXTOVUeHlJGmiPa9GZLtT486Z
dpXpElbu5oE3w7hzHTQIUG7EmOg2NM/SsaNUBRRoRgKpiUm3W28CEFU9hIuvNgIu
z32j+rzrcLR/6tk8oRBTX4fHykQIpVAnRh+199hibUOH98JLgHXrHQ3sCFChAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUZrgTxBD3aqHdtbcHETA/okXRi/MwHwYDVR0j
BBgwFoAUX1JjbySuaAo/aW7W/c+zBXTVp/wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NUTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdG
LzAvNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3NEQ1QTdGQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RjUyNjM2RjI0QUU2ODBBM0Y2
OTZFRDZGRENGQjMwNTc0RDVBN0ZDLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
UTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdGLzAvMzQz
NTJlMzEzNzM0MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzODM4MzQz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2uADANBgkqhkiG9w0BAQsFAAOCAQEAfuhsc/HQX+/Ic/1V
00ZgWPlvXvmx6fa1yJDRZ2nOZe57n/dS5mFkR9tJ9qlnTCppOfZohWPJSRtMi1Cs
o65S0ZAYA6UvTb/aslESVvISR5U8/VfKnkwgOE5+4N3+akCuLDEMHJDoh5TQRlvA
5U9yfkhpb4EeGwrwTMC4UCBVibNuQDd5ukWFnilNSU3VyncHHD7SkqUde3Sk13ET
txWliIobGBsQ339ueHRStKCUNbIpsFYVyMmCMfIG6kw1r+leCKk4TUEB0xY3H73s
YcWeLxth3GCy+uYH5gOdExqLnsToQ59Fi+r/EATjQvimP66wV9I+VhkyvjJadalF
l0MH4A==
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:46:17 2026 by rpki-client