This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32332d3233203d3e203631353837.roa
File:                     3137392e34382e3134382e302f32332d3233203d3e203631353837.roa (raw, json)
Hash identifier:          ysE6rGynwp2ERz5ht+/J6CMSKRdK5NBK8uGixiTDPsM=
Subject key identifier:   9A:4A:99:70:21:12:BC:1A:5A:2B:7A:F2:CF:FC:88:11:F9:FC:F7:DF
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       1FAED0D599500424CF9CCA5AF9FA66AAC254D926
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32332d3233203d3e203631353837.roa
Signing time:             Tue 02 Dec 2025 19:03:44 +0000
ROA not before:           Tue 02 Dec 2025 18:58:44 +0000
ROA not after:            Tue 01 Dec 2026 19:03:44 +0000
asID:                     61587
IP address blocks:        179.48.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ae:d0:d5:99:50:04:24:cf:9c:ca:5a:f9:fa:66:aa:c2:54:d9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec  2 18:58:44 2025 GMT
            Not After : Dec  1 19:03:44 2026 GMT
        Subject: CN=9A4A99702112BC1A5A2B7AF2CFFC8811F9FCF7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:3a:dd:f3:ba:0a:50:33:58:04:d7:fa:69:
                    12:15:97:9e:c4:19:f0:35:27:fe:be:98:98:c7:d8:
                    6b:53:4f:04:af:42:ff:53:47:3c:25:8d:f5:27:7a:
                    28:e2:4e:b1:70:0d:9c:44:06:da:53:47:ea:f6:a4:
                    ae:ef:0c:2e:b2:d2:71:57:cf:c0:29:5d:9d:55:3c:
                    17:87:dc:2d:a3:24:f1:36:77:fa:03:a3:3e:0c:4e:
                    4b:08:d6:56:4c:90:7c:e7:83:0f:7c:12:28:85:86:
                    97:46:7d:f7:1b:12:10:e7:50:e0:40:a5:5e:b8:15:
                    a1:0e:55:89:93:67:84:10:80:5b:62:46:68:2c:1a:
                    87:e3:73:36:12:f2:30:8d:45:f0:55:68:c1:6e:70:
                    2c:38:81:98:f5:cf:93:f2:00:c1:00:4b:99:98:40:
                    24:fc:87:62:f6:91:b8:a5:1a:d7:42:47:2a:ff:56:
                    08:99:8c:2c:65:bf:55:c6:76:6a:78:49:51:f6:18:
                    ee:ef:ff:68:f2:44:3a:19:8b:50:50:42:70:ae:1b:
                    1e:3c:8e:cd:0f:95:a0:75:a6:3d:88:fa:93:5e:c2:
                    43:ed:36:19:c1:34:bb:74:a6:64:79:d2:eb:18:4e:
                    0b:a3:e2:38:8a:e5:12:fd:96:47:71:4e:5b:ea:cd:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:99:70:21:12:BC:1A:5A:2B:7A:F2:CF:FC:88:11:F9:FC:F7:DF
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32332d3233203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:03:cc:b6:e1:f4:e2:24:a9:1b:c1:8b:cb:9b:14:9d:5d:
         e3:c5:5b:7a:a4:01:d9:85:e6:f0:0b:78:f8:99:72:93:13:2a:
         e4:d5:0a:f3:6f:fe:96:52:4b:f9:2c:48:4e:d3:70:4e:c4:44:
         d3:f0:59:b3:30:0b:fe:c4:bf:da:65:1b:96:b7:4a:c9:c8:5c:
         6d:3a:8d:94:76:b8:00:bd:5c:b9:3a:28:63:2c:90:1d:04:9a:
         68:40:d5:b4:67:e4:5c:33:b6:2f:21:5e:4b:b5:b2:da:29:72:
         24:48:12:d5:45:d4:7e:bb:4f:c0:95:96:73:2c:f2:1c:8c:a0:
         27:d3:6f:17:d7:a5:5e:22:de:0a:dc:8e:49:67:6a:c1:54:d5:
         50:a2:ba:0e:54:43:85:7c:82:14:97:3e:23:24:bd:1c:86:b7:
         da:34:1c:e6:a4:a4:fe:6b:3d:d0:f7:e1:59:86:34:d2:8c:20:
         b9:7b:56:ec:df:a2:2b:df:90:29:98:b1:e2:1f:d9:a3:51:87:
         94:a1:76:78:0b:16:9c:ab:37:b0:6f:a3:63:c4:f0:b3:5f:06:
         77:17:6d:1d:68:6d:ae:22:e7:8d:98:dd:a0:33:c5:f8:b9:48:
         e3:e1:41:b6:24:9e:38:99:7f:85:95:cb:18:40:22:f8:8b:60:
         06:1f:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:47 2025 by rpki-client