This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/3138372e34392e3234302e302f32312d3234203d3e203533323134.roa
File:                     3138372e34392e3234302e302f32312d3234203d3e203533323134.roa (raw, json)
Hash identifier:          Rcxwf78xdkMUd+GwCI3PGhsKJ2EGDmMyalA7TbfcFBk=
Subject key identifier:   E1:DC:14:A4:33:5A:FB:16:53:10:4B:83:B0:F0:F2:91:A3:F1:00:60
Certificate issuer:       /CN=B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D
Certificate serial:       3A3DA7686718073F92802F9528EBEC37CEE7D110
Authority key identifier: B7:BB:7B:E8:E4:4F:9F:85:3E:4E:F9:EF:A8:0E:68:0D:7C:BE:EF:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/3138372e34392e3234302e302f32312d3234203d3e203533323134.roa
Signing time:             Wed 26 Nov 2025 18:52:27 +0000
ROA not before:           Wed 26 Nov 2025 18:47:27 +0000
ROA not after:            Wed 25 Nov 2026 18:52:27 +0000
asID:                     53214
IP address blocks:        187.49.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.crl
                          rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3d:a7:68:67:18:07:3f:92:80:2f:95:28:eb:ec:37:ce:e7:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D
        Validity
            Not Before: Nov 26 18:47:27 2025 GMT
            Not After : Nov 25 18:52:27 2026 GMT
        Subject: CN=E1DC14A4335AFB1653104B83B0F0F291A3F10060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:fd:cb:77:bc:14:37:b6:d2:3d:eb:f7:a1:
                    2f:53:af:e2:97:7f:35:28:49:d7:0b:fa:5f:72:68:
                    81:35:c0:c8:64:01:0c:ec:66:00:11:33:50:d9:ef:
                    df:21:f7:fa:c7:92:70:e6:ab:ab:ba:a2:b9:ba:b8:
                    3f:bb:bb:95:9d:7b:ea:9a:b4:48:57:ee:08:cb:2a:
                    88:c0:34:e7:1d:23:45:e0:61:25:2d:5f:78:f3:57:
                    df:9f:19:30:fe:07:fe:a1:81:72:30:34:19:91:e0:
                    f6:27:c6:c7:54:de:12:e8:21:9a:cf:91:7a:e7:32:
                    d3:ea:67:3b:58:4d:0f:e6:b3:0e:5e:68:33:dd:2b:
                    0d:7d:72:fa:ca:9c:25:9f:4b:91:67:fb:d9:98:96:
                    e4:e7:dd:bb:9e:f9:1a:96:17:07:24:3d:ad:77:34:
                    eb:ab:ea:dc:3a:d6:64:8c:66:5d:48:14:06:5a:ec:
                    d7:16:96:a5:ce:69:dc:c0:bb:dc:10:68:15:59:ea:
                    8a:58:36:ab:1f:2e:4a:99:18:1f:9d:2e:56:dd:37:
                    4a:87:a7:f0:a6:af:43:7a:e8:0e:bf:8c:d2:b6:5a:
                    61:c5:c7:1b:87:a5:27:2d:97:3c:93:15:cc:99:17:
                    68:c9:72:be:f3:2b:8f:1e:90:70:18:4c:2a:92:4f:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DC:14:A4:33:5A:FB:16:53:10:4B:83:B0:F0:F2:91:A3:F1:00:60
            X509v3 Authority Key Identifier:
                keyid:B7:BB:7B:E8:E4:4F:9F:85:3E:4E:F9:EF:A8:0E:68:0D:7C:BE:EF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/3138372e34392e3234302e302f32312d3234203d3e203533323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:4e:2b:13:74:09:07:f2:f4:ae:9b:9a:93:6c:89:35:65:94:
         cd:71:6d:09:ba:4f:09:65:27:fc:d9:9d:66:c9:2e:fe:1d:ad:
         ef:3e:45:5f:d6:1c:9b:e8:fd:a0:13:c9:99:2a:fd:e0:bf:8f:
         80:fe:01:43:10:8f:b7:db:f6:93:61:06:83:f9:49:0a:cf:91:
         7c:f6:3f:99:43:e3:1c:0c:43:0d:34:a9:16:35:1d:bd:7f:c9:
         3f:f5:ed:13:dd:b0:68:79:c3:3a:02:95:73:4e:67:5b:4a:df:
         d9:b5:0e:d4:02:c9:98:4b:e0:f3:6f:25:c0:fd:c7:88:d7:e1:
         e5:c8:dc:f2:06:c5:0d:8d:1d:05:34:0c:00:a6:a4:dd:fd:ac:
         22:6a:23:84:34:44:f2:3c:88:63:eb:1d:e0:95:0a:8f:2f:76:
         b0:b0:57:13:19:2d:4c:27:22:5d:97:64:f7:25:a9:72:bc:05:
         75:64:76:50:0b:57:2f:ee:18:fa:8e:13:ea:77:c6:e9:e6:a9:
         5f:57:cb:00:05:c0:82:62:8d:b5:43:70:26:b1:36:e7:53:53:
         a6:e1:ba:4c:54:01:44:b3:24:7d:04:e6:07:bd:74:24:40:65:
         00:1f:68:6d:e5:68:46:2f:cf:b9:85:ab:04:00:59:ea:b1:25:
         35:5f:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:50:24 2025 by rpki-client