This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          +lsjrk2UIScYi8SDIHluwvVTWNsZRS6AIaGL7QvTJZc=
Subject key identifier:   CD:AA:5D:0B:A7:C3:E0:F5:63:AD:4D:A0:F2:A9:D4:45:56:21:F2:F7
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       3B94C5E4400B95CB5B7F5ECA80C3DC7B8CE6EB6F
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
Signing time:             Mon 10 Nov 2025 19:11:07 +0000
ROA not before:           Mon 10 Nov 2025 19:06:07 +0000
ROA not after:            Mon 09 Nov 2026 19:11:07 +0000
asID:                     271484
IP address blocks:        181.233.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:c5:e4:40:0b:95:cb:5b:7f:5e:ca:80:c3:dc:7b:8c:e6:eb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Nov 10 19:06:07 2025 GMT
            Not After : Nov  9 19:11:07 2026 GMT
        Subject: CN=CDAA5D0BA7C3E0F563AD4DA0F2A9D4455621F2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:2f:d0:c9:a1:31:b1:16:78:45:e6:f0:42:
                    8e:71:25:d3:6a:dd:fb:ba:99:f9:a6:67:86:e6:65:
                    3d:21:95:b3:91:71:bc:eb:f9:5c:e7:55:5c:5f:6c:
                    c1:78:ce:5b:d0:f7:7f:7b:fd:83:cf:47:83:a2:57:
                    31:c6:5a:30:f0:da:b0:aa:c8:3e:03:44:84:1e:3c:
                    0f:68:18:9a:02:1b:b2:21:e2:e2:26:bf:57:2d:b9:
                    20:1d:3b:b7:be:b1:cc:45:6b:b9:c3:14:76:89:cd:
                    ad:13:7e:32:3e:23:8f:80:37:bf:90:5c:39:53:5f:
                    3a:c8:95:47:58:32:eb:1b:3d:c0:44:43:a7:c7:5b:
                    f4:f2:18:44:b4:e6:ec:f2:75:b7:5c:88:fb:6d:3f:
                    e8:78:30:3f:bb:18:99:2f:3d:c6:d6:54:a3:09:1e:
                    e4:d8:c6:b7:2c:de:0d:77:e2:e1:1c:0e:ca:0e:dd:
                    e1:cb:84:5b:76:70:70:7b:ca:0a:7f:8d:52:7c:d8:
                    2e:28:f7:29:8d:b2:b5:c9:1b:19:a3:d5:c9:15:8b:
                    64:8a:3a:bd:e5:ce:84:15:18:42:63:64:c0:a3:a2:
                    be:d6:9d:32:04:a4:14:67:f3:1e:86:58:c5:08:cc:
                    bf:0b:02:c4:0e:b9:99:9c:a6:cb:c1:95:c1:c4:3a:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AA:5D:0B:A7:C3:E0:F5:63:AD:4D:A0:F2:A9:D4:45:56:21:F2:F7
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:6f:e5:12:ee:41:59:7c:96:36:2a:48:c8:b0:61:52:98:
         38:1d:65:06:aa:75:35:38:fe:10:db:b6:9d:25:8b:f0:c5:d3:
         41:32:97:5c:eb:4c:5c:f8:a3:18:b1:7e:80:0e:e5:f1:e5:60:
         a9:cc:cc:d9:cd:f5:6f:94:90:cd:9f:c6:e2:ef:0b:0c:f2:82:
         0f:60:78:0f:d0:79:59:ce:71:73:f8:8e:86:d7:c4:90:84:b4:
         c2:14:26:c5:84:35:df:33:33:e3:ea:ef:0b:f8:18:5c:03:7f:
         70:6e:a8:07:50:70:fc:47:a8:90:8c:9b:00:67:a9:8a:bb:da:
         cb:a9:f5:c3:12:3e:da:89:5b:af:c0:62:d7:b8:bd:91:25:30:
         ae:f7:3e:37:e1:e7:22:2b:27:bf:47:ca:71:e2:a8:b6:79:9f:
         55:c4:95:8e:71:d0:64:cd:4d:74:38:4b:fd:0b:2a:7b:bc:a3:
         57:b9:3a:64:4d:6c:4a:1f:9e:31:90:28:a2:b2:e2:14:78:b4:
         b7:55:ea:29:d1:05:ee:94:e4:be:12:00:0f:82:a7:ec:f6:22:
         d7:81:14:81:82:9b:df:bc:e6:b1:22:38:2e:8b:65:d4:78:cf:
         c5:a6:c8:84:88:7f:97:a4:da:2c:d3:f4:5e:ca:1f:37:8a:d1:
         fc:dc:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:05 2025 by rpki-client