This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (raw, json)
Hash identifier:          UDc2a11lMXoutrxkVXHv9/P2ZCVJhAIP/APUwqyFI+Y=
Subject key identifier:   32:8A:47:78:46:85:87:41:C6:E4:FC:4D:62:7C:9F:4B:C1:59:7B:14
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       47B56B98B25B2ADD3916DB413BA9C7E4E74E842A
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
Signing time:             Sat 22 Nov 2025 13:18:00 +0000
ROA not before:           Sat 22 Nov 2025 13:13:00 +0000
ROA not after:            Sat 21 Nov 2026 13:18:00 +0000
asID:                     271680
IP address blocks:        187.111.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 21:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b5:6b:98:b2:5b:2a:dd:39:16:db:41:3b:a9:c7:e4:e7:4e:84:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Nov 22 13:13:00 2025 GMT
            Not After : Nov 21 13:18:00 2026 GMT
        Subject: CN=328A477846858741C6E4FC4D627C9F4BC1597B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:cd:7a:f2:c9:42:0f:c1:98:ef:3e:5b:4e:
                    b1:ab:d2:3b:8f:39:a1:70:dc:e3:42:3a:b0:9a:e9:
                    4d:7a:74:a6:5b:2c:c8:f5:b0:ae:08:d4:fc:9c:71:
                    da:c4:a9:f2:27:18:38:7a:5a:18:ba:a5:59:60:17:
                    2d:b8:41:e6:44:d4:ef:bf:bc:82:17:e5:19:52:38:
                    5c:6c:ea:05:69:78:3b:35:99:cd:9d:a7:3e:20:d7:
                    27:14:c8:50:c0:10:d8:92:28:be:7f:86:0f:c7:09:
                    71:1f:83:86:27:35:ef:e1:97:61:1c:9c:03:95:f5:
                    50:9f:65:b4:ea:57:5e:f3:60:a6:80:b0:fc:fe:f5:
                    0c:bd:12:66:1e:b4:06:2a:09:d6:0c:9d:84:95:6c:
                    8b:25:3f:ee:0c:25:4f:2b:61:d0:d4:70:50:4a:a5:
                    a5:7d:aa:9c:32:0c:bb:1a:b7:92:3d:ee:14:0c:6a:
                    b6:0f:40:3d:86:ec:de:29:33:23:8a:3a:89:ff:32:
                    e4:cf:1f:0b:38:5a:e1:00:54:ea:2b:31:5b:3e:d8:
                    e3:cd:7b:50:66:45:cf:42:ee:22:91:88:2e:8f:84:
                    bd:31:55:b2:76:6f:fd:59:95:d5:10:9b:d3:bb:49:
                    b5:10:37:5e:7d:8f:17:a0:09:b9:27:00:82:c5:a3:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8A:47:78:46:85:87:41:C6:E4:FC:4D:62:7C:9F:4B:C1:59:7B:14
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:07:7b:36:98:eb:7b:c0:d8:c9:8e:4d:d8:ee:74:6c:e8:
         1a:48:dd:ef:a4:04:ef:bc:ef:df:20:8e:ef:0c:d3:f3:fb:97:
         33:24:71:10:71:77:6e:53:cc:f9:42:8d:0e:57:40:0c:a6:c0:
         27:88:35:5d:51:af:25:d3:e3:c2:ce:8f:cb:57:d8:e8:a5:0c:
         32:22:f1:60:c5:d4:60:ce:b6:4a:8a:a8:39:7c:13:9e:0d:3b:
         48:76:31:43:fe:4b:e3:a7:ef:e7:4d:a1:02:d2:23:d0:f8:08:
         58:1d:67:9b:a5:66:a2:0e:d1:d7:01:2d:2f:10:11:ea:1c:aa:
         db:a4:1f:f0:a0:c6:8a:7f:f2:a1:a3:4b:63:c8:c7:2b:f8:0b:
         dd:3b:8a:e6:44:3c:de:56:41:a7:77:91:ac:4c:ff:2c:90:2b:
         06:4f:32:fc:51:be:83:bb:17:ef:56:3d:09:6a:70:e3:d1:00:
         ad:c8:dd:fc:b2:d3:68:cb:77:8f:2d:4b:e7:fb:0f:a1:14:10:
         42:42:24:9b:75:12:8d:54:f5:03:0f:13:59:6b:41:d1:7a:f1:
         03:01:6e:23:7a:47:1b:99:38:d1:9b:da:d9:1a:54:c7:7a:8f:
         95:bd:72:73:9c:f1:62:fe:34:96:44:7f:81:86:86:07:df:bb:
         3a:ec:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:55:10 2025 by rpki-client