This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          rfuOi95nQx4MtMO9tjUGqSZ/3TsvDGgZk+ZmNoXGy5A=
Subject key identifier:   55:31:9B:EB:22:86:CF:70:8D:94:73:56:5A:24:64:BF:2E:04:B7:BA
Certificate issuer:       /CN=2A2D171F50E53E6487FE9AC612997F616E111F59
Certificate serial:       702447777E0FF41D3CFFC240ABC14815B57D6AFF
Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa
Signing time:             Mon 10 Nov 2025 19:11:13 +0000
ROA not before:           Mon 10 Nov 2025 19:06:13 +0000
ROA not after:            Mon 09 Nov 2026 19:11:13 +0000
asID:                     271484
IP address blocks:        181.233.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:24:47:77:7e:0f:f4:1d:3c:ff:c2:40:ab:c1:48:15:b5:7d:6a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59
        Validity
            Not Before: Nov 10 19:06:13 2025 GMT
            Not After : Nov  9 19:11:13 2026 GMT
        Subject: CN=55319BEB2286CF708D9473565A2464BF2E04B7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:36:90:88:8c:87:b0:c7:49:6b:84:10:98:
                    34:68:71:59:98:2f:e3:f1:8f:3a:12:cd:4f:7d:0e:
                    73:26:36:05:7e:b8:3b:0b:08:2d:83:56:06:5b:30:
                    48:92:fd:94:37:39:a3:6c:37:8b:11:43:74:b4:94:
                    30:32:b7:75:22:c7:d4:dc:b4:88:a2:d1:a9:d7:8c:
                    f3:b7:e3:ce:54:ba:92:62:44:5c:1c:47:95:4a:33:
                    9c:1c:44:f2:7d:7f:3b:67:12:13:2c:b9:c0:c2:26:
                    82:0c:06:da:48:00:21:20:ce:76:12:fc:c6:ec:b8:
                    16:1c:9a:6c:65:05:4b:d4:23:12:6b:8e:bd:bf:be:
                    57:f5:65:b4:2a:63:d9:68:07:b5:4e:fb:56:8f:89:
                    ce:5f:13:ed:c5:dc:51:f5:a2:aa:6d:c0:e2:55:b9:
                    91:7f:1c:d1:19:cd:53:f6:56:f0:c8:2c:5d:3f:7a:
                    e4:5c:2d:ff:10:40:00:2c:2a:55:7b:0e:b1:e4:a1:
                    5e:62:83:4a:5f:3d:c9:da:2e:47:75:c5:8d:ca:ca:
                    59:7e:0a:6d:94:66:21:64:93:3e:a1:fb:3a:b5:04:
                    90:0e:bb:f4:19:86:15:fa:2a:12:bc:e4:82:ef:a1:
                    04:30:0a:e2:21:a2:1f:19:45:c3:f5:38:b2:d6:fe:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:31:9B:EB:22:86:CF:70:8D:94:73:56:5A:24:64:BF:2E:04:B7:BA
            X509v3 Authority Key Identifier:
                keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:06:a9:09:ef:41:1c:10:45:68:d0:a9:2f:3e:71:e7:39:
         eb:af:62:29:a8:f8:af:c0:0c:a5:12:2f:7a:1b:e1:17:14:6b:
         04:cd:ca:d0:d5:4c:f5:67:b5:2e:c6:8e:95:4a:be:f4:85:f8:
         a1:af:07:ba:b5:a0:cd:08:d3:39:1d:fd:0a:1d:d5:37:ce:74:
         6c:74:d2:f0:e7:d9:a1:12:cb:35:42:77:85:a2:cf:9b:49:44:
         12:44:71:f1:2b:3a:c2:0d:da:db:43:11:be:3b:a9:82:10:b1:
         3e:64:d7:2a:c5:6d:21:ab:c3:4c:4c:13:42:4a:b8:c6:ec:6b:
         c2:f5:b8:32:be:38:d3:30:43:9f:ab:7d:97:99:c6:68:fb:ee:
         94:c1:66:4b:a8:b5:b4:d8:26:e5:5f:4b:cc:5c:dd:41:6f:97:
         78:53:d0:a9:09:6e:fc:87:c5:72:3e:84:ce:eb:41:86:56:28:
         50:08:2a:7c:03:99:af:ad:ca:63:82:31:95:aa:b6:4f:32:a0:
         08:f0:29:38:50:1a:c1:89:b6:6e:3d:fb:00:da:28:87:02:49:
         31:6b:f7:ee:07:16:d6:19:13:4a:96:fa:54:d5:26:23:6f:a2:
         42:df:4e:c8:85:50:31:9d:8a:c5:eb:61:da:81:ec:d4:fb:38:
         e1:74:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:55 2025 by rpki-client