This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135302e302f32342d3234203d3e203631353837.roa
File:                     3137392e34382e3135302e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          992GKYkWsnPZqoUTW88xGT+AKw2FamMXNjKZtxrtUA8=
Subject key identifier:   0B:76:E6:C9:CC:F5:5C:A5:32:11:CA:BD:78:BF:65:E0:82:67:99:89
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       5469A7A019D12E26E32E401EA75C24BD57B19646
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135302e302f32342d3234203d3e203631353837.roa
Signing time:             Tue 02 Dec 2025 19:03:42 +0000
ROA not before:           Tue 02 Dec 2025 18:58:42 +0000
ROA not after:            Tue 01 Dec 2026 19:03:42 +0000
asID:                     61587
IP address blocks:        179.48.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:69:a7:a0:19:d1:2e:26:e3:2e:40:1e:a7:5c:24:bd:57:b1:96:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec  2 18:58:42 2025 GMT
            Not After : Dec  1 19:03:42 2026 GMT
        Subject: CN=0B76E6C9CCF55CA53211CABD78BF65E082679989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:55:97:f4:0f:b0:8a:9f:8f:fd:d4:3d:74:
                    d6:ac:9c:af:6d:42:bc:29:d1:4d:cd:44:c2:6b:46:
                    9a:75:0a:aa:6a:4c:0c:0d:8d:b5:97:45:e7:2b:16:
                    bb:8f:27:22:70:33:40:ee:01:1d:31:a6:2b:da:c3:
                    c3:c6:05:0e:1a:76:87:b1:13:3e:f2:3c:4a:22:db:
                    10:ae:a2:6f:fd:b5:32:01:ac:cf:ac:eb:ec:54:d9:
                    3b:56:82:da:0a:eb:ab:2a:1a:0a:ba:bf:9b:9e:26:
                    d6:5c:9a:f4:1b:b6:fb:d0:3f:5f:44:8c:cb:79:59:
                    8b:91:70:9a:5b:3c:63:43:02:84:e4:30:74:20:1d:
                    6e:19:00:65:e5:c8:38:01:15:9c:60:f0:04:0c:3f:
                    08:db:16:4c:77:72:8c:65:57:e2:c4:c1:aa:be:50:
                    ca:b1:8b:bd:1f:3e:df:fb:77:56:05:8d:90:8f:a6:
                    85:e1:75:1a:ba:e6:8d:4f:1f:9c:57:52:7e:a4:d8:
                    cf:9d:5e:63:18:56:72:cd:f2:ce:21:6e:aa:c3:b7:
                    30:1f:cf:32:14:b1:3b:76:5e:42:4a:13:79:56:b8:
                    c5:ed:86:c3:b7:ae:1e:2c:e2:e0:ff:55:99:80:3e:
                    e2:27:47:69:14:6f:c9:d7:1c:c0:68:cb:21:3b:d8:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:76:E6:C9:CC:F5:5C:A5:32:11:CA:BD:78:BF:65:E0:82:67:99:89
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135302e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:3d:80:07:45:87:14:28:46:60:04:88:e0:4b:47:72:45:cd:
         d6:f0:c2:f1:fc:fb:68:cd:2e:76:97:78:98:8a:5f:21:9f:3a:
         66:18:e2:a5:bc:5e:21:3c:81:cc:d4:a2:23:95:10:2c:55:7f:
         49:d8:85:fe:0b:c3:8f:92:fa:ca:c9:94:fb:01:b1:3c:de:86:
         ea:c0:ef:04:f7:78:1f:3a:24:61:21:bc:d4:e2:cf:52:d2:54:
         c1:8f:76:16:5e:c8:c0:74:b3:2f:5a:5a:7d:5c:50:b2:c2:26:
         bd:73:13:80:2d:46:ef:2f:40:32:fe:66:36:10:00:a4:8d:80:
         2e:55:a4:59:9a:bd:4b:39:08:0f:cb:08:ec:79:56:31:ea:da:
         43:89:b7:99:8e:17:7c:fe:95:b6:be:35:ab:d6:fa:00:83:30:
         7e:77:bf:6f:af:f4:6a:74:4b:50:5a:fc:38:9b:d0:12:d2:e2:
         9a:36:02:a1:28:cd:20:6b:93:d7:00:35:a8:2d:a7:b1:e5:50:
         61:30:b5:f5:41:fa:49:50:4b:64:ed:0a:b5:1d:88:a5:34:e8:
         97:89:58:b0:bd:2d:22:c9:a9:c5:27:f7:8a:28:61:e6:c4:95:
         12:a1:e2:38:40:33:4b:d3:fa:94:11:3c:33:09:29:71:ca:51:
         92:e5:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:18 2025 by rpki-client