This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa
File:                     3137392e34382e3134382e302f32322d3232203d3e203631353837.roa (raw, json)
Hash identifier:          +2UgsftIihl8m9NAjXPPDomssjW5GdVliDYCZJGlkpI=
Subject key identifier:   B7:3B:E3:1F:3F:C4:9A:CC:AE:C0:41:5C:EC:65:69:0D:B2:9D:22:7A
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       08C669BED00D982A3EB3AD09CAB2CF952B7282CC
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa
Signing time:             Tue 02 Dec 2025 19:03:45 +0000
ROA not before:           Tue 02 Dec 2025 18:58:45 +0000
ROA not after:            Tue 01 Dec 2026 19:03:45 +0000
asID:                     61587
IP address blocks:        179.48.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c6:69:be:d0:0d:98:2a:3e:b3:ad:09:ca:b2:cf:95:2b:72:82:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec  2 18:58:45 2025 GMT
            Not After : Dec  1 19:03:45 2026 GMT
        Subject: CN=B73BE31F3FC49ACCAEC0415CEC65690DB29D227A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:73:7b:3f:8e:62:d8:6e:02:24:ac:fc:79:
                    61:b3:d7:16:f3:8a:08:f2:7d:d6:7e:09:b9:5e:52:
                    c9:2a:f6:65:38:75:da:9f:be:12:89:93:a0:68:b8:
                    64:f5:3c:39:ea:5c:7e:a0:3a:09:70:71:1e:c6:f1:
                    01:08:41:8d:10:89:d0:34:2f:1e:22:8d:aa:10:23:
                    b5:52:87:79:51:30:59:e7:a6:dd:f5:ef:6c:99:65:
                    39:50:aa:a7:a1:6c:be:30:d9:82:15:d3:d5:17:0e:
                    b8:bd:e9:05:14:21:7e:d0:60:78:4c:8e:24:fd:08:
                    24:5f:28:ee:4f:cc:2e:0c:e8:0d:fd:10:37:c3:71:
                    b0:8c:8b:00:75:8b:83:65:2a:2c:df:3b:c7:73:8e:
                    a8:92:c9:81:c7:65:c5:84:bb:4a:b3:82:80:a1:e9:
                    d7:98:b1:03:c7:bd:7a:b6:0c:cf:e7:5c:28:d9:10:
                    94:ab:ba:9e:23:7e:3a:1c:eb:62:6b:52:5d:86:29:
                    0a:e1:05:6f:4c:0d:28:39:90:5e:7f:ea:74:a6:a4:
                    02:e1:db:db:7a:3a:aa:d1:6e:e3:f9:90:71:67:2e:
                    f9:14:66:2a:51:7f:29:65:e7:79:af:d4:05:0a:4a:
                    8d:b9:2c:45:8b:3b:c8:d0:23:78:04:f0:f9:26:d2:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3B:E3:1F:3F:C4:9A:CC:AE:C0:41:5C:EC:65:69:0D:B2:9D:22:7A
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:1e:c7:27:c6:08:93:59:c1:2c:e6:5e:03:14:26:be:a4:be:
         25:68:3f:3c:ed:db:74:a3:8e:fc:af:04:ff:84:60:04:48:b5:
         3e:a4:c0:b9:2a:a1:42:d2:15:95:13:10:d6:3a:91:1d:5d:d4:
         67:c9:2a:4c:fa:e8:f8:fc:a5:3e:a0:6b:b7:47:d4:c1:91:62:
         97:a4:b5:e7:df:e3:83:30:66:82:2f:c6:78:14:92:9b:e9:80:
         70:c3:27:af:f0:6c:01:3b:68:a2:93:20:da:9e:1b:69:74:97:
         be:89:48:86:f8:ec:b9:8a:1a:ce:d4:e6:ed:c5:47:1d:8b:b0:
         d2:9f:fe:5a:54:13:fa:8d:ed:a9:cd:6d:e7:83:e4:6b:97:0b:
         1e:c1:d7:16:8b:da:a2:f6:29:ab:13:de:87:d1:4e:7d:ec:61:
         5e:d6:20:b8:cf:c1:a2:72:af:a3:03:22:7b:78:f0:ec:03:78:
         75:66:7b:93:ea:3b:82:c4:b4:00:a0:2f:b9:61:9f:54:33:75:
         e0:08:32:05:82:af:04:24:95:e1:06:d8:1d:4f:64:8f:b6:72:
         a1:ce:a7:6d:c3:2e:ce:76:ab:5d:60:0f:71:60:40:72:cc:60:
         12:39:41:74:f5:9f:ac:0d:b1:17:92:62:11:d1:d4:1b:a0:fa:
         97:1e:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:46:48 2025 by rpki-client