This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa
File:                     3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa (raw, json)
Hash identifier:          JzShgOhCoABd5LYspzpggCizQSMmI49uldbP3DF6WFA=
Subject key identifier:   17:5D:3D:C6:12:83:EE:6C:5E:35:1D:6B:8D:25:41:C1:6F:47:7C:E1
Certificate issuer:       /CN=9473382722118249A58E8AC63C1F00AEE6F38EC5
Certificate serial:       47FCE3055827185A6A6A1EC39245AE2D7B7C8B82
Authority key identifier: 94:73:38:27:22:11:82:49:A5:8E:8A:C6:3C:1F:00:AE:E6:F3:8E:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa
Signing time:             Wed 19 Nov 2025 12:53:39 +0000
ROA not before:           Wed 19 Nov 2025 12:48:39 +0000
ROA not after:            Wed 18 Nov 2026 12:53:39 +0000
asID:                     271671
IP address blocks:        168.232.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.crl
                          rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fc:e3:05:58:27:18:5a:6a:6a:1e:c3:92:45:ae:2d:7b:7c:8b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9473382722118249A58E8AC63C1F00AEE6F38EC5
        Validity
            Not Before: Nov 19 12:48:39 2025 GMT
            Not After : Nov 18 12:53:39 2026 GMT
        Subject: CN=175D3DC61283EE6C5E351D6B8D2541C16F477CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:2e:29:70:7f:a4:08:c6:43:d9:f2:04:f6:
                    87:1c:72:55:56:6c:01:eb:f4:c7:7a:c6:e1:96:c7:
                    a7:10:e1:1a:ab:ea:a9:fa:0a:c8:a5:51:f2:36:d9:
                    3d:21:7e:f2:30:05:5f:c0:f0:3e:39:4d:87:5a:f7:
                    60:db:25:7a:37:85:c1:2e:fd:76:00:cd:3a:3f:0a:
                    02:eb:3c:b2:3e:81:ad:1e:7d:8e:8b:56:9c:15:56:
                    9e:a6:3d:4f:8d:06:0d:94:f6:b4:c8:13:26:17:cb:
                    8c:64:8b:e1:b7:69:2b:3c:6e:7f:93:91:44:92:66:
                    c8:4d:76:ef:f8:1b:d4:93:96:13:63:fc:14:7d:a4:
                    60:a1:00:b3:21:c6:14:46:13:e1:6b:92:89:40:2b:
                    80:08:05:81:c1:34:62:56:fa:73:76:01:f2:93:4f:
                    f8:0f:1c:5f:07:9c:69:cd:3b:58:fc:ab:50:dd:b6:
                    f3:da:b6:4e:26:32:ac:34:bc:dc:fc:a0:62:c5:fa:
                    95:35:1e:f5:ae:c2:a7:dc:ad:47:50:ec:28:cc:5a:
                    c7:49:62:e6:a2:de:6e:a6:20:56:38:fc:84:82:18:
                    50:65:00:b7:35:9f:62:d3:00:77:be:92:cf:9b:c0:
                    95:98:11:b4:aa:4c:83:c3:4c:66:c3:92:fe:86:cc:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5D:3D:C6:12:83:EE:6C:5E:35:1D:6B:8D:25:41:C1:6F:47:7C:E1
            X509v3 Authority Key Identifier:
                keyid:94:73:38:27:22:11:82:49:A5:8E:8A:C6:3C:1F:00:AE:E6:F3:8E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:79:8d:22:5b:73:fe:4e:8a:ef:38:96:a1:71:f4:af:2e:d6:
         ca:6f:47:97:d5:4a:7a:6c:27:0d:0b:ba:a5:f7:cf:89:f1:16:
         13:f2:d8:1d:d3:69:54:3c:dc:f5:7d:ee:5d:0a:99:41:2b:99:
         ec:e8:06:de:02:4e:52:cd:73:f5:a6:3e:69:2c:4b:b3:15:3e:
         ba:24:39:be:76:54:08:c6:8c:ed:91:8e:10:06:0e:b8:b0:b4:
         46:3f:5f:e4:56:0b:d8:de:04:6c:21:a0:5d:68:a7:85:16:f4:
         28:c0:87:95:a8:ce:5e:4a:a5:94:2e:f3:f1:a6:8c:72:96:1c:
         8e:a0:da:3c:fc:e2:13:d8:e7:f2:db:ad:28:b5:65:77:e4:28:
         d8:c0:7b:71:fb:ec:40:52:9e:92:50:63:b4:5b:7a:b5:20:ac:
         01:35:cd:f7:f1:d9:5b:1c:47:c2:7a:9f:73:80:c7:ef:92:15:
         f3:7d:4b:3a:8e:78:e6:ad:c0:39:ec:d2:88:fd:ef:e9:a3:fc:
         62:8c:9a:c6:d0:2a:1f:e1:9a:86:43:c7:75:6d:88:d3:25:a5:
         f6:23:67:ee:bd:b6:e5:a5:31:62:4a:86:52:3b:4a:47:c5:7b:
         5d:b5:81:55:af:49:65:6c:09:18:c4:dd:03:04:e0:44:24:7b:
         52:9d:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:41 2025 by rpki-client