This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa
File:                     3136382e3139372e342e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          YIwZZgdXyCbcRFZXTQtvXcDEttoXfCxp0etjaCkierk=
Subject key identifier:   93:EE:18:51:49:DE:90:CB:4A:C3:19:03:3D:92:9B:D2:D2:6C:7D:38
Certificate issuer:       /CN=0B7C73A4042A68A85270F43141C006C63BE8A61D
Certificate serial:       112E10192751D51FC9C938D2B1D0C113FBE698D5
Authority key identifier: 0B:7C:73:A4:04:2A:68:A8:52:70:F4:31:41:C0:06:C6:3B:E8:A6:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7C73A4042A68A85270F43141C006C63BE8A61D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa
Signing time:             Sat 08 Nov 2025 16:18:23 +0000
ROA not before:           Sat 08 Nov 2025 16:13:23 +0000
ROA not after:            Sat 07 Nov 2026 16:18:23 +0000
asID:                     262550
IP address blocks:        168.197.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7C73A4042A68A85270F43141C006C63BE8A61D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2e:10:19:27:51:d5:1f:c9:c9:38:d2:b1:d0:c1:13:fb:e6:98:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7C73A4042A68A85270F43141C006C63BE8A61D
        Validity
            Not Before: Nov  8 16:13:23 2025 GMT
            Not After : Nov  7 16:18:23 2026 GMT
        Subject: CN=93EE185149DE90CB4AC319033D929BD2D26C7D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:38:b7:71:41:cc:47:3a:b1:9e:a6:67:8d:21:
                    83:33:c5:41:68:3f:32:e1:ac:19:9e:de:5e:b3:fa:
                    eb:59:18:1d:28:e0:03:29:e0:33:26:43:7c:6b:98:
                    3f:56:34:aa:1e:e8:ab:80:7b:d8:65:86:01:07:99:
                    49:13:55:f2:0c:53:c3:7c:0a:40:20:20:c5:93:9a:
                    7b:db:4a:a6:2d:b0:c1:a5:04:a7:b6:2b:b0:95:2d:
                    94:88:7f:d8:a2:ee:3a:bf:77:d9:3f:8e:a0:f2:1d:
                    d0:d2:9b:62:e2:20:08:74:c7:cc:66:d6:5d:17:a3:
                    4e:f6:12:b3:77:ec:40:3e:e6:0e:2f:b7:6f:25:3b:
                    a9:e2:c1:29:9c:39:c6:36:10:2b:33:62:23:5c:24:
                    97:64:62:5c:56:ed:c7:b3:ce:c5:9c:0d:71:57:fe:
                    dc:87:f7:c9:cb:3c:69:ab:e4:7c:70:a8:a2:b9:58:
                    61:a3:de:11:1e:88:41:14:91:e2:f6:67:0c:26:88:
                    36:a4:0f:41:81:42:5a:73:9d:d5:e1:dd:e4:4f:a1:
                    aa:0b:fc:99:bc:c2:0b:38:4b:d2:b4:f1:c8:fc:7f:
                    71:18:48:fc:6a:da:26:3d:09:43:e5:a6:fd:25:d5:
                    9f:50:f2:cc:d4:03:8f:53:70:1d:0a:a0:42:d1:c4:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:18:51:49:DE:90:CB:4A:C3:19:03:3D:92:9B:D2:D2:6C:7D:38
            X509v3 Authority Key Identifier:
                keyid:0B:7C:73:A4:04:2A:68:A8:52:70:F4:31:41:C0:06:C6:3B:E8:A6:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7C73A4042A68A85270F43141C006C63BE8A61D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:1f:65:e8:3d:5a:c9:90:2e:37:7c:b8:d5:4f:7c:bb:a9:
         93:1f:a1:ba:8a:fd:92:77:a3:ef:2c:04:80:05:a6:51:c2:77:
         2c:15:af:cd:ca:a8:0c:da:34:d6:d9:c2:f5:40:a1:88:76:5d:
         42:08:3f:c4:bc:98:29:5e:52:a3:16:26:6e:08:ee:e8:5d:8f:
         7b:7a:97:ca:39:55:2e:17:12:0a:0b:54:c6:f6:98:77:40:ac:
         e7:fa:af:8f:f2:0e:30:fd:53:68:4a:76:20:70:83:c5:03:3d:
         b0:56:ce:1e:d3:f2:d8:24:9d:a6:b2:0c:dc:9e:a7:5c:b4:50:
         21:58:f2:09:d1:6f:5d:1e:aa:8e:a3:c8:a8:90:d5:78:4b:f0:
         8d:be:17:2b:e0:c6:e6:c8:a4:5b:11:e5:02:64:0e:6a:e0:ed:
         d1:7b:9f:7f:b2:e1:74:5b:d3:0c:f2:f5:13:b3:05:e9:2b:6a:
         01:b8:ff:a4:8e:6e:c2:d3:08:3d:d4:b3:64:00:77:e7:48:82:
         3b:58:cc:cd:b6:56:8e:fd:f4:99:2b:6e:25:12:f6:ac:f7:e5:
         0b:50:df:7e:2f:93:45:23:50:4e:d9:af:f8:fd:64:a1:c9:57:
         ce:3e:dd:b3:eb:59:8d:31:ea:df:02:b4:49:e2:93:0b:88:fc:
         35:a4:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:15 2025 by rpki-client