This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa
File:                     3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          kcyZ7qIJ55WSSd0KaCdxyA9cjQ0//5Us55FaQnRP2J4=
Subject key identifier:   B0:D8:87:6E:95:8F:24:50:82:27:80:D2:EB:4C:2B:BC:61:71:EE:15
Certificate issuer:       /CN=645369D6E2E42074ECE0733455C39887AD27A324
Certificate serial:       3B629D872EFA9058096D4F186C99FEC4CFF0CE35
Authority key identifier: 64:53:69:D6:E2:E4:20:74:EC:E0:73:34:55:C3:98:87:AD:27:A3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa
Signing time:             Fri 26 Dec 2025 12:35:04 +0000
ROA not before:           Fri 26 Dec 2025 12:30:04 +0000
ROA not after:            Fri 25 Dec 2026 12:35:04 +0000
asID:                     262675
IP address blocks:        131.255.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.crl
                          rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 23:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:62:9d:87:2e:fa:90:58:09:6d:4f:18:6c:99:fe:c4:cf:f0:ce:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=645369D6E2E42074ECE0733455C39887AD27A324
        Validity
            Not Before: Dec 26 12:30:04 2025 GMT
            Not After : Dec 25 12:35:04 2026 GMT
        Subject: CN=B0D8876E958F2450822780D2EB4C2BBC6171EE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:f4:dc:2e:97:7a:71:5a:14:19:81:ba:ce:
                    2b:91:57:89:6b:45:db:be:38:d9:96:d2:0f:8d:48:
                    ad:74:cf:38:02:a3:b0:91:f6:25:d9:41:7c:3e:55:
                    2f:70:2c:6f:57:b8:f3:39:0e:b3:48:bb:db:9a:a1:
                    a0:cd:70:0d:3e:ab:41:58:e0:32:90:ad:38:36:78:
                    8a:19:2b:d7:1c:e1:bc:5e:a6:3f:e4:9b:3d:e7:d2:
                    57:7d:bf:48:aa:d2:54:3a:83:4b:5e:64:2c:9f:ab:
                    e2:98:76:50:4a:f7:15:9c:8c:b8:1b:7e:a4:b2:d5:
                    81:35:ab:fd:ed:7d:ba:42:5f:e3:26:34:0b:5e:1b:
                    d0:8a:1e:48:c8:b8:db:4b:ba:6d:cc:a3:8e:0d:34:
                    45:a2:a2:b6:36:93:70:88:4b:70:fb:8b:07:8b:1d:
                    6d:46:c9:27:68:07:65:17:72:75:38:c4:4b:aa:86:
                    0a:31:7d:f6:66:bb:1e:5e:c2:d5:83:3b:62:35:b1:
                    10:d5:08:07:a0:3b:64:a5:d1:1e:83:a0:61:b6:92:
                    f7:61:d2:6d:a6:56:b4:62:c0:47:8e:06:31:c7:4b:
                    68:49:24:ef:c7:eb:bc:c9:12:f0:87:90:c7:86:66:
                    d3:a5:a9:98:01:0e:fa:fc:d7:da:3d:43:80:55:82:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D8:87:6E:95:8F:24:50:82:27:80:D2:EB:4C:2B:BC:61:71:EE:15
            X509v3 Authority Key Identifier:
                keyid:64:53:69:D6:E2:E4:20:74:EC:E0:73:34:55:C3:98:87:AD:27:A3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:19:59:ac:63:d2:44:1d:23:44:17:86:80:3b:23:9f:2a:
         0c:0b:35:a6:4f:fa:92:1c:31:37:82:7b:ed:32:a6:09:92:a6:
         d3:23:a7:f4:8b:30:a7:8f:b8:f4:2a:d0:fa:9f:bb:56:1a:e8:
         18:7d:64:89:46:bf:8c:a6:1f:f5:80:9d:93:bc:e9:5c:28:eb:
         7c:e7:4b:df:42:5f:c4:2f:b5:61:30:fd:7b:d7:4a:77:35:7a:
         46:a3:de:14:29:e7:08:fa:c9:ec:bc:d5:93:87:2a:92:08:7a:
         7d:82:66:c7:7c:b3:e4:bf:04:9c:0c:74:c0:bd:39:29:16:aa:
         b0:4e:20:58:7b:fc:d9:c0:c1:4e:51:e6:33:21:21:f2:d5:16:
         2f:35:2a:36:15:b7:88:f0:43:60:72:6c:c8:23:df:d1:72:ae:
         b8:75:42:a4:6e:ff:21:a5:ee:29:36:41:6b:31:49:1a:1e:a2:
         d7:28:5d:68:b4:32:64:bb:50:eb:69:00:eb:5b:7c:fd:06:ea:
         45:01:7c:0b:d8:99:b3:73:43:4d:8a:f4:f5:9c:4c:75:11:82:
         37:79:a6:60:27:5b:bf:c5:d1:1a:cf:2b:ed:8a:34:a2:0a:9e:
         6d:c2:fe:9f:1a:e6:8c:c3:4b:5b:2c:49:ba:d5:21:91:6f:4c:
         e1:51:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:01 2026 by rpki-client