This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (raw, json)
Hash identifier:          sZ7mauTccR6Vr33eBysyROpFZqy4NIdemkOk7+qk1mc=
Subject key identifier:   13:9E:2E:C1:7F:46:74:BA:6F:20:24:FA:5D:FD:3C:7A:E5:DA:34:41
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       1DC00CC5D84B38042139DB90524A903C3B70EF08
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
Signing time:             Mon 10 Nov 2025 19:11:00 +0000
ROA not before:           Mon 10 Nov 2025 19:06:00 +0000
ROA not after:            Mon 09 Nov 2026 19:11:00 +0000
asID:                     271484
IP address blocks:        181.233.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c0:0c:c5:d8:4b:38:04:21:39:db:90:52:4a:90:3c:3b:70:ef:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Nov 10 19:06:00 2025 GMT
            Not After : Nov  9 19:11:00 2026 GMT
        Subject: CN=139E2EC17F4674BA6F2024FA5DFD3C7AE5DA3441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:ab:15:bd:c0:82:05:43:52:c0:a6:1d:ad:
                    4f:81:cc:92:83:bc:e8:ef:53:59:5d:fd:fa:62:a0:
                    f5:3e:0d:6b:4d:11:db:ee:d2:0e:b3:a0:77:61:c5:
                    52:01:f7:5d:06:b4:7d:58:f9:ef:ea:dc:6e:53:2e:
                    6d:cf:27:5a:ae:40:d1:38:3e:60:09:3b:8d:e2:9c:
                    be:91:bd:c6:49:c3:9b:c5:88:13:57:99:c9:29:66:
                    3c:5c:9c:16:5d:17:3a:8e:ec:28:52:97:f7:1f:4e:
                    f0:37:ca:ea:f6:38:56:ec:68:42:81:5a:a4:f7:7b:
                    43:3b:6d:19:e3:f5:d9:05:c2:ea:9a:58:a5:45:a4:
                    bc:6f:1f:f1:f8:6e:d1:0b:71:78:1f:c2:59:9d:5a:
                    e0:18:5d:be:3d:97:df:b6:36:f4:12:00:3f:a6:c0:
                    bc:7f:85:33:f2:ba:25:ff:24:96:e0:e0:c7:90:00:
                    91:80:8e:a2:7b:60:c5:21:2f:63:e9:d1:52:db:45:
                    59:f8:a3:3e:77:be:a0:ae:76:d4:8d:ef:7d:65:9b:
                    71:b4:26:27:14:d2:92:42:eb:de:fe:c4:e6:d9:b7:
                    f5:3d:6d:a0:6d:8b:57:64:c9:02:65:38:56:02:8b:
                    99:f5:07:4b:6d:b4:a5:91:b5:53:34:b7:2f:fa:54:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9E:2E:C1:7F:46:74:BA:6F:20:24:FA:5D:FD:3C:7A:E5:DA:34:41
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:83:94:82:7c:fd:cf:6d:a4:79:81:a4:2e:ee:17:45:76:67:
         56:a5:b4:cc:30:82:a2:08:85:3b:6d:88:f8:f4:b3:4e:cd:7e:
         08:3b:ac:1b:ac:46:16:ee:90:6f:27:07:68:eb:f1:f9:ae:25:
         45:8f:f6:1c:1b:63:59:ee:2c:a1:2a:00:3c:54:1f:40:35:cc:
         d3:22:47:c5:ba:cf:e5:fc:59:ad:ae:4e:b9:28:59:b4:64:20:
         a6:08:e7:a7:00:99:04:58:c0:10:26:18:79:d6:5e:b5:39:d2:
         68:4a:8d:06:17:19:b2:80:fb:c6:a5:e2:24:3b:d3:53:87:8c:
         3c:18:93:be:ab:eb:41:2b:05:85:2e:12:bb:07:51:a5:bb:a9:
         cb:49:e2:49:06:53:f7:54:7d:20:a0:27:29:86:cc:ad:9e:43:
         c6:7e:f6:31:8c:0e:ec:b9:22:f4:52:8c:2c:85:35:0d:41:b7:
         9a:1c:a0:1b:1f:4a:c7:9e:b9:dd:06:cc:84:13:20:95:ab:44:
         10:1e:bf:a7:50:46:77:be:26:e5:a2:ff:a7:38:96:37:da:e6:
         a0:e4:03:89:52:97:6c:17:fd:ad:02:3b:d9:12:1d:7e:9a:31:
         fa:0c:6f:14:ea:30:5a:9e:6d:ac:bb:53:41:14:3e:cd:6a:40:
         dd:72:86:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHcAMxdhLOAQhOduQUkqQPDtw7wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRDE3MUY1MEU1M0U2NDg3RkU5QUM2MTI5OTdGNjE2
RTExMUY1OTAeFw0yNTExMTAxOTA2MDBaFw0yNjExMDkxOTExMDBaMDMxMTAvBgNV
BAMTKDEzOUUyRUMxN0Y0Njc0QkE2RjIwMjRGQTVERkQzQzdBRTVEQTM0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjKsVvcCCBUNSwKYdrU+BzJKD
vOjvU1ld/fpioPU+DWtNEdvu0g6zoHdhxVIB910GtH1Y+e/q3G5TLm3PJ1quQNE4
PmAJO43inL6RvcZJw5vFiBNXmckpZjxcnBZdFzqO7ChSl/cfTvA3yur2OFbsaEKB
WqT3e0M7bRnj9dkFwuqaWKVFpLxvH/H4btELcXgfwlmdWuAYXb49l9+2NvQSAD+m
wLx/hTPyuiX/JJbg4MeQAJGAjqJ7YMUhL2Pp0VLbRVn4oz53vqCudtSN731lm3G0
JicU0pJC697+xObZt/U9baBti1dkyQJlOFYCi5n1B0tttKWRtVM0ty/6VJNDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUE54uwX9GdLpvICT6Xf08euXaNEEwHwYDVR0j
BBgwFoAUKi0XH1DlPmSH/prGEpl/YW4RH1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC8yQTJEMTcxRjUwRTUzRTY0ODdGRTlBQzYxMjk5N0Y2MTZFMTExRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMkQxNzFGNTBFNTNFNjQ4
N0ZFOUFDNjEyOTk3RjYxNkUxMTFGNTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK16RAwDQYJKoZIhvcNAQELBQADggEBAGaDlIJ8
/c9tpHmBpC7uF0V2Z1altMwwgqIIhTttiPj0s07Nfgg7rBusRhbukG8nB2jr8fmu
JUWP9hwbY1nuLKEqADxUH0A1zNMiR8W6z+X8Wa2uTrkoWbRkIKYI56cAmQRYwBAm
GHnWXrU50mhKjQYXGbKA+8al4iQ701OHjDwYk76r60ErBYUuErsHUaW7qctJ4kkG
U/dUfSCgJymGzK2eQ8Z+9jGMDuy5IvRSjCyFNQ1Bt5ocoBsfSseeud0GzIQTIJWr
RBAev6dQRne+JuWi/6c4ljfa5qDkA4lSl2wX/a0CO9kSHX6aMfoMbxTqMFqebay7
U0EUPs1qQN1yhgA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:41 2025 by rpki-client