This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier:          j6SbIxVSu1bsT170jIGIovQddlhPv/2q+jfCF1LtDeI=
Subject key identifier:   E5:47:0B:EC:A2:1E:15:86:36:89:CF:2B:28:AC:3D:5C:E8:E6:82:8B
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       39A10B1115A9DDD7B2B5FEB87160BC883F7A152D
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
Signing time:             Mon 10 Nov 2025 19:11:09 +0000
ROA not before:           Mon 10 Nov 2025 19:06:09 +0000
ROA not after:            Mon 09 Nov 2026 19:11:09 +0000
asID:                     271484
IP address blocks:        181.233.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a1:0b:11:15:a9:dd:d7:b2:b5:fe:b8:71:60:bc:88:3f:7a:15:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Nov 10 19:06:09 2025 GMT
            Not After : Nov  9 19:11:09 2026 GMT
        Subject: CN=E5470BECA21E15863689CF2B28AC3D5CE8E6828B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:e7:22:7f:8d:a1:55:32:cb:ab:40:f5:8f:
                    a8:ff:b7:89:75:3a:00:d8:02:21:fa:18:28:d1:ea:
                    05:00:0f:5b:15:56:9c:1f:87:62:00:77:f8:d1:b6:
                    5c:c1:77:b6:e3:38:bd:9e:fe:2b:a0:02:87:b6:d7:
                    36:e6:68:34:8e:ba:fc:af:48:2f:fb:39:c9:20:dc:
                    05:e2:39:71:db:39:5e:a5:0d:51:0b:f4:7d:6b:22:
                    5d:f9:4d:d3:2e:9e:eb:ad:aa:56:1d:54:ae:99:f3:
                    3e:ee:e5:60:45:e3:9b:0d:36:ee:1c:18:f8:7c:db:
                    1a:4b:3b:ac:8e:f4:9e:c8:9f:77:52:6e:38:6f:61:
                    c3:86:f2:ae:67:6b:44:8d:ec:e0:ff:da:0b:c1:9f:
                    dc:d5:f9:4f:60:cb:67:15:41:df:8a:ab:4f:13:fe:
                    90:1f:f1:61:c8:f1:b7:9a:3a:e9:e1:09:05:8e:bc:
                    aa:ad:05:d0:0c:31:72:72:0b:ec:bc:15:cb:e1:5b:
                    b6:87:6d:7a:a0:ba:97:a4:db:d9:60:fd:a8:ee:93:
                    50:c5:dd:83:53:a9:f1:83:6c:b4:80:ea:18:1a:0e:
                    a5:29:8c:c2:6c:9d:9d:b7:b0:63:0c:ba:df:13:22:
                    ac:14:35:3e:24:57:70:5f:6f:cd:96:4f:2d:61:db:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:47:0B:EC:A2:1E:15:86:36:89:CF:2B:28:AC:3D:5C:E8:E6:82:8B
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:99:85:9e:5b:a0:32:65:6b:34:dd:75:89:26:81:4a:8b:e3:
         8d:ab:99:c5:c4:bf:e6:53:5a:28:84:db:77:ac:52:68:41:a8:
         87:93:ac:8a:62:31:99:a7:c9:4a:22:fa:72:0a:8e:c3:61:3d:
         1d:fb:d9:57:af:4d:22:50:90:1d:59:f7:ee:a0:60:c8:71:ae:
         ed:b7:e6:be:37:bd:c2:81:f9:f6:b6:b3:3a:62:3b:9a:15:58:
         18:dd:ba:68:4f:3b:3e:a0:31:cb:a9:e4:8e:a8:0b:29:0f:70:
         04:32:a6:ea:1a:89:c2:e4:97:61:cc:15:9a:9d:5d:74:d3:59:
         a7:ab:43:98:37:11:0b:5e:89:3e:f3:8f:11:11:e1:6e:e0:fd:
         8d:32:ca:b1:29:e8:ff:eb:78:cb:dc:e5:50:cf:78:ca:35:64:
         3f:de:dc:a0:4f:8b:2e:69:74:c6:5d:f5:c6:5c:1b:81:14:ae:
         72:bf:dd:b5:96:15:a6:dc:89:bb:d8:6f:d9:31:55:c8:1c:7c:
         03:55:72:8b:82:d4:c3:9a:f2:76:d4:8d:0f:98:39:26:02:96:
         07:8e:9c:78:d0:d3:18:55:5d:c4:79:d4:3d:f4:da:a9:ec:c5:
         d5:b6:72:53:87:c1:99:e1:a5:1c:e6:b1:91:d1:37:09:e4:ab:
         14:04:1e:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOaELERWp3deytf64cWC8iD96FS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRDE3MUY1MEU1M0U2NDg3RkU5QUM2MTI5OTdGNjE2
RTExMUY1OTAeFw0yNTExMTAxOTA2MDlaFw0yNjExMDkxOTExMDlaMDMxMTAvBgNV
BAMTKEU1NDcwQkVDQTIxRTE1ODYzNjg5Q0YyQjI4QUMzRDVDRThFNjgyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8g+cif42hVTLLq0D1j6j/t4l1
OgDYAiH6GCjR6gUAD1sVVpwfh2IAd/jRtlzBd7bjOL2e/iugAoe21zbmaDSOuvyv
SC/7Ockg3AXiOXHbOV6lDVEL9H1rIl35TdMunuutqlYdVK6Z8z7u5WBF45sNNu4c
GPh82xpLO6yO9J7In3dSbjhvYcOG8q5na0SN7OD/2gvBn9zV+U9gy2cVQd+Kq08T
/pAf8WHI8beaOunhCQWOvKqtBdAMMXJyC+y8FcvhW7aHbXqgupek29lg/ajuk1DF
3YNTqfGDbLSA6hgaDqUpjMJsnZ23sGMMut8TIqwUNT4kV3Bfb82WTy1h25fjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5UcL7KIeFYY2ic8rKKw9XOjmgoswHwYDVR0j
BBgwFoAUKi0XH1DlPmSH/prGEpl/YW4RH1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC8yQTJEMTcxRjUwRTUzRTY0ODdGRTlBQzYxMjk5N0Y2MTZFMTExRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMkQxNzFGNTBFNTNFNjQ4
N0ZFOUFDNjEyOTk3RjYxNkUxMTFGNTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG16RIwDQYJKoZIhvcNAQELBQADggEBAASZhZ5b
oDJlazTddYkmgUqL442rmcXEv+ZTWiiE23esUmhBqIeTrIpiMZmnyUoi+nIKjsNh
PR372VevTSJQkB1Z9+6gYMhxru235r43vcKB+fa2szpiO5oVWBjdumhPOz6gMcup
5I6oCykPcAQypuoaicLkl2HMFZqdXXTTWaerQ5g3EQteiT7zjxER4W7g/Y0yyrEp
6P/reMvc5VDPeMo1ZD/e3KBPiy5pdMZd9cZcG4EUrnK/3bWWFabcibvYb9kxVcgc
fANVcouC1MOa8nbUjQ+YOSYClgeOnHjQ0xhVXcR51D302qnsxdW2clOHwZnhpRzm
sZHRNwnkqxQEHuk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:23 2025 by rpki-client