This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/3133312e3130302e31322e302f32322d3332203d3e203631373532.roa
File:                     3133312e3130302e31322e302f32322d3332203d3e203631373532.roa (raw, json)
Hash identifier:          g4SKh96YBTD3cd+aAqcDGyumjytFA66UGGEE88eIu0I=
Subject key identifier:   F2:2B:ED:C6:38:A4:0C:E9:5E:C3:91:7D:AD:33:D8:6D:76:AC:FB:B7
Certificate issuer:       /CN=89EE77ABB23DCB5286D0583CA0650F9A630F7D2E
Certificate serial:       22EF4EAD93BAB1B8CBE7E5B5D90DCB02B46CB359
Authority key identifier: 89:EE:77:AB:B2:3D:CB:52:86:D0:58:3C:A0:65:0F:9A:63:0F:7D:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/3133312e3130302e31322e302f32322d3332203d3e203631373532.roa
Signing time:             Wed 12 Nov 2025 22:14:40 +0000
ROA not before:           Wed 12 Nov 2025 22:09:40 +0000
ROA not after:            Wed 11 Nov 2026 22:14:40 +0000
asID:                     61752
IP address blocks:        131.100.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.crl
                          rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ef:4e:ad:93:ba:b1:b8:cb:e7:e5:b5:d9:0d:cb:02:b4:6c:b3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EE77ABB23DCB5286D0583CA0650F9A630F7D2E
        Validity
            Not Before: Nov 12 22:09:40 2025 GMT
            Not After : Nov 11 22:14:40 2026 GMT
        Subject: CN=F22BEDC638A40CE95EC3917DAD33D86D76ACFBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:de:e4:39:b5:5c:2a:54:46:2e:7a:3b:35:
                    b5:ad:aa:9f:b7:c1:16:1b:95:eb:00:44:e0:cc:1c:
                    37:8d:44:26:0b:9a:4d:53:10:a4:53:fe:ff:b5:cc:
                    b2:d9:44:f1:ed:01:58:af:f4:ba:c2:9d:58:c0:2b:
                    55:dc:c2:6e:f5:a2:62:e6:00:0e:a9:37:e6:9f:fd:
                    c6:d3:3d:4a:40:fb:3b:37:8a:82:a7:31:84:e9:30:
                    fd:4b:dd:f2:66:62:9e:eb:2d:67:67:76:fc:99:ea:
                    65:b1:4f:f5:bc:0a:5c:84:f7:29:4a:37:d6:c4:19:
                    08:76:a0:08:91:fb:ed:17:cc:f1:df:93:4b:4a:26:
                    55:fc:4d:51:1c:01:54:23:b0:c5:27:85:87:5a:b9:
                    6f:74:0f:91:a1:3c:d0:90:69:5d:13:56:4a:f3:c4:
                    c7:88:74:56:6d:0a:0e:bb:60:94:48:f0:de:c1:ae:
                    46:1d:be:45:88:b9:f2:1c:06:de:e6:38:cb:e5:2f:
                    33:68:89:f1:05:19:a9:e9:dd:13:66:00:14:e9:4a:
                    56:86:af:2c:dc:66:73:d3:44:79:ed:00:47:cd:e4:
                    8d:be:92:1c:ac:fd:9e:ca:2f:04:77:c5:44:f9:89:
                    6f:4d:f8:d1:8d:4a:af:7f:7f:ba:bb:4d:28:19:6c:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2B:ED:C6:38:A4:0C:E9:5E:C3:91:7D:AD:33:D8:6D:76:AC:FB:B7
            X509v3 Authority Key Identifier:
                keyid:89:EE:77:AB:B2:3D:CB:52:86:D0:58:3C:A0:65:0F:9A:63:0F:7D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/3133312e3130302e31322e302f32322d3332203d3e203631373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:94:b0:2f:bd:34:cb:d1:bf:6e:cd:e3:e9:30:f4:76:c7:e9:
         40:0a:d1:39:bd:67:9e:61:93:8e:04:fe:b6:ea:d0:da:e1:dc:
         12:ba:a7:70:ee:54:4c:76:9b:69:bf:0b:54:82:6d:dc:53:3e:
         27:16:bd:b7:52:2a:af:b4:d8:e6:4d:ce:6f:15:91:0b:08:12:
         e8:07:90:28:d0:e0:bb:87:bb:5f:cc:51:74:65:14:a6:c9:58:
         6f:95:61:58:fd:64:68:ce:a1:5e:7b:91:8f:ed:70:51:25:cc:
         dd:b3:0d:c6:0e:a2:3d:16:1d:9f:2b:4d:67:29:b1:80:51:62:
         f4:c6:f1:dc:3e:4f:d7:2c:2c:4f:a3:5c:fc:d2:3b:d4:cd:63:
         4f:c1:e2:ce:f2:26:bd:59:5b:e2:69:d1:e1:dc:cc:6a:fb:5c:
         08:9c:8b:79:6c:74:11:ee:4e:f1:9a:d4:f6:f3:5a:ae:51:6d:
         e0:d2:14:2b:92:52:f5:62:e0:ae:15:9b:c4:88:ed:7f:07:9f:
         69:c1:4b:5e:a9:1f:c4:40:30:6b:94:27:c7:4b:8a:1c:14:e6:
         89:6b:d3:dd:b7:d7:c5:42:4d:0f:31:35:5e:be:09:f2:cb:93:
         d1:76:9b:8d:a0:3b:d6:af:ad:94:97:b6:f8:f0:05:e0:6a:4e:
         32:d2:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:17:43 2025 by rpki-client