This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          8HFNj0UvH/mT6+am50eZsPlT2RkGuhVCAxpux8S88Tk=
Subject key identifier:   69:7F:5A:F8:3D:95:E5:C0:C1:20:54:B1:EB:FB:41:5C:90:0E:26:CD
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       0CD69F77F0DDD675409EA88C16BE2C520CFD5F86
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa
Signing time:             Mon 10 Nov 2025 19:11:11 +0000
ROA not before:           Mon 10 Nov 2025 19:06:11 +0000
ROA not after:            Mon 09 Nov 2026 19:11:11 +0000
asID:                     271484
IP address blocks:        181.233.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d6:9f:77:f0:dd:d6:75:40:9e:a8:8c:16:be:2c:52:0c:fd:5f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Nov 10 19:06:11 2025 GMT
            Not After : Nov  9 19:11:11 2026 GMT
        Subject: CN=697F5AF83D95E5C0C12054B1EBFB415C900E26CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bd:2d:b4:79:80:44:72:9d:2a:25:0c:9e:ae:
                    10:08:bf:b5:27:ea:61:44:0b:ce:59:76:a5:4f:a6:
                    57:48:f7:76:aa:e1:e1:0f:88:ed:d9:64:b9:85:0b:
                    fa:41:2d:f7:fd:dd:12:e4:d2:fb:4d:33:e9:e7:1a:
                    a8:60:fa:fa:12:cc:72:41:76:15:db:4a:99:5a:6a:
                    9b:12:a1:97:51:46:75:b2:45:45:9b:6d:39:aa:e0:
                    9c:b6:60:ca:f4:0d:6c:d9:83:fd:01:b1:5d:32:dd:
                    33:95:24:9f:33:ce:7a:20:33:93:6a:1e:04:29:81:
                    f4:f5:b6:66:e1:42:16:48:0f:0d:74:e3:45:2b:65:
                    b4:88:dd:85:6e:c1:49:25:59:f8:ac:3b:80:55:91:
                    a5:0a:e4:7e:53:2f:4e:ee:ff:68:0f:23:11:8d:6d:
                    2d:9e:2b:b3:0a:ae:d3:a5:15:6a:76:23:f4:78:f4:
                    dd:b0:95:4d:15:c8:02:43:2d:d4:59:23:3f:4c:c1:
                    42:cc:11:23:f1:24:a9:07:49:07:3e:56:8b:f5:d0:
                    27:d4:8b:dc:e3:a9:d9:56:8b:69:a5:a2:33:f1:6b:
                    41:2d:5e:bf:08:ce:2b:01:c3:db:d7:8d:b2:05:81:
                    df:01:2c:de:04:66:eb:a3:fd:1e:0c:ed:6a:df:ee:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:5A:F8:3D:95:E5:C0:C1:20:54:B1:EB:FB:41:5C:90:0E:26:CD
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:bf:91:90:ce:bd:7c:47:f5:c0:b9:3e:18:04:3c:3b:5e:
         a8:f2:f5:15:08:4c:f8:be:88:65:6b:9e:82:ba:ea:1a:af:13:
         a7:a5:a1:ab:fe:02:11:b0:3a:0b:e4:b3:6b:a3:b3:7c:be:4c:
         49:e8:57:39:87:b2:8f:55:8c:18:f0:03:da:72:b3:a7:bf:aa:
         17:13:b8:5b:ab:8b:7e:9b:eb:a7:66:0d:21:19:69:87:d7:e4:
         a1:f7:72:36:cf:61:0e:76:d4:ac:1a:51:2d:9b:c8:a6:41:5d:
         47:1b:70:51:c5:55:bc:7d:9d:32:75:5e:af:fa:39:50:c2:46:
         2e:6a:bc:46:cf:a0:7d:b6:97:56:54:80:47:a3:df:42:0e:38:
         a7:65:8f:df:ee:83:2f:0a:49:07:6f:ab:3e:22:ab:f7:e6:54:
         a3:f4:1c:b1:89:68:3d:6b:1e:c6:c0:67:d1:e9:5d:e3:ac:d7:
         a4:cb:d5:39:86:a1:65:15:18:a8:aa:30:dc:24:a8:74:2c:2c:
         15:ab:40:bd:e6:56:fc:cf:50:ef:2f:81:84:6f:58:08:4a:6b:
         c0:0f:11:31:38:2e:b7:29:0b:a5:b2:9f:6f:77:77:c9:65:22:
         4d:c7:94:64:6c:a0:43:fd:a0:b3:48:19:52:7e:b7:76:17:81:
         14:44:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:53 2025 by rpki-client