This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131372e302f32342d3234203d3e20323731303530.roa
File:                     3138372e38342e3131372e302f32342d3234203d3e20323731303530.roa (raw, json)
Hash identifier:          cPkbOye5hSkpSKxhu3Fdpb6rdMlgXquUfVOC5hzR+zk=
Subject key identifier:   53:CE:1B:CD:F3:D6:92:C1:93:5F:32:03:2F:A9:B1:58:AD:4F:40:0B
Certificate issuer:       /CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
Certificate serial:       5BC46227F01F0AB1E9A6A04A8A7C96620F0C2B3D
Authority key identifier: FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131372e302f32342d3234203d3e20323731303530.roa
Signing time:             Mon 17 Nov 2025 17:55:16 +0000
ROA not before:           Mon 17 Nov 2025 17:50:16 +0000
ROA not after:            Mon 16 Nov 2026 17:55:16 +0000
asID:                     271050
IP address blocks:        187.84.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c4:62:27:f0:1f:0a:b1:e9:a6:a0:4a:8a:7c:96:62:0f:0c:2b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
        Validity
            Not Before: Nov 17 17:50:16 2025 GMT
            Not After : Nov 16 17:55:16 2026 GMT
        Subject: CN=53CE1BCDF3D692C1935F32032FA9B158AD4F400B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:cb:3f:ee:d1:0e:ea:02:f8:64:de:1c:83:
                    7e:1f:b6:c9:e2:2e:26:ce:0c:a8:d2:9e:c4:c3:fd:
                    9e:f6:33:a0:32:d0:99:25:5b:be:7e:ad:93:46:b5:
                    11:f8:56:e6:da:77:eb:23:61:b8:f9:44:81:9d:b1:
                    99:0f:5f:30:8c:60:a6:42:3c:03:c5:75:ea:8a:0e:
                    d8:3c:36:db:12:e0:2e:cd:73:df:4a:dc:1d:e4:54:
                    5f:1c:74:ee:c0:cc:7b:1d:46:00:a5:14:9c:bf:26:
                    da:4c:46:ac:db:3b:85:e2:c2:32:ab:14:68:a6:66:
                    b7:1d:e5:72:db:35:51:f1:62:f9:f7:30:9a:2d:63:
                    6d:11:93:a8:8e:03:62:35:6d:61:37:f4:fd:24:4d:
                    8f:03:bd:3e:32:65:86:41:76:1d:4e:2d:aa:69:72:
                    5e:36:0f:32:64:34:88:02:9e:91:0a:b8:5d:84:f5:
                    da:3a:a8:c8:56:7f:42:83:07:ae:e0:74:57:c9:9d:
                    fe:70:c7:e8:d4:03:84:32:40:5e:84:96:99:79:49:
                    bc:dc:6d:ce:50:43:36:44:32:64:c6:54:10:4d:79:
                    5c:fa:e4:90:a4:9d:eb:1c:94:67:7c:4e:ca:f3:a6:
                    2c:e7:79:b1:ff:9a:21:54:e4:8d:40:f8:cd:12:f7:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CE:1B:CD:F3:D6:92:C1:93:5F:32:03:2F:A9:B1:58:AD:4F:40:0B
            X509v3 Authority Key Identifier:
                keyid:FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131372e302f32342d3234203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:74:3e:fb:10:d3:98:ed:d2:d5:8e:2b:6a:3b:e8:f3:bc:
         0e:88:96:9d:ba:d1:d7:3f:1e:b0:2c:71:30:3b:54:7f:9c:09:
         a1:7e:6a:aa:a5:53:02:c2:a9:c8:c4:4f:b7:1e:6b:8d:c7:cc:
         82:0f:4b:15:cb:bd:28:99:b8:e0:1b:66:e3:fc:e1:a1:c0:7e:
         d4:e1:2f:4a:7e:6f:9b:9f:bf:87:8f:d3:b0:40:a0:59:a9:43:
         ae:70:bc:3e:c9:f6:34:9e:b2:12:5e:cc:b1:06:94:e7:fb:d4:
         ec:b0:01:86:15:a0:79:da:92:dd:cf:40:2c:41:31:47:34:84:
         39:7d:ef:b4:22:8f:a6:05:6f:fb:08:15:b0:55:53:09:a6:f5:
         2c:cd:26:f3:6b:60:46:2e:f7:cc:b4:64:87:80:07:a7:d8:4e:
         da:4e:fa:6a:33:3b:83:d8:a8:99:4e:d6:79:9b:70:fe:98:d8:
         29:7c:f5:73:8c:a0:22:aa:3a:fb:63:8a:ab:71:2e:0c:9e:79:
         d2:c4:24:f7:ee:f0:be:de:d7:d0:33:b7:4c:17:d4:3a:95:e7:
         e2:db:05:f0:b5:ce:7c:9f:4b:b9:85:0e:0d:e9:41:a8:6c:b7:
         e9:8e:ec:8d:ba:d8:83:a4:08:e2:68:ba:ac:09:eb:21:49:3f:
         84:9c:73:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW8RiJ/AfCrHppqBKinyWYg8MKz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGNTc5NzY3NzJDNEIwOTI2QTJFMTNCODU2QzY5MDVE
OTIwRjFCMDAeFw0yNTExMTcxNzUwMTZaFw0yNjExMTYxNzU1MTZaMDMxMTAvBgNV
BAMTKDUzQ0UxQkNERjNENjkyQzE5MzVGMzIwMzJGQTlCMTU4QUQ0RjQwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT8s/7tEO6gL4ZN4cg34ftsni
LibODKjSnsTD/Z72M6Ay0JklW75+rZNGtRH4Vubad+sjYbj5RIGdsZkPXzCMYKZC
PAPFdeqKDtg8NtsS4C7Nc99K3B3kVF8cdO7AzHsdRgClFJy/JtpMRqzbO4XiwjKr
FGimZrcd5XLbNVHxYvn3MJotY20Rk6iOA2I1bWE39P0kTY8DvT4yZYZBdh1OLapp
cl42DzJkNIgCnpEKuF2E9do6qMhWf0KDB67gdFfJnf5wx+jUA4QyQF6Elpl5Sbzc
bc5QQzZEMmTGVBBNeVz65JCknesclGd8TsrzpiznebH/miFU5I1A+M0S9ykrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU84bzfPWksGTXzIDL6mxWK1PQAswHwYDVR0j
BBgwFoAU//V5dncsSwkmouE7hWxpBdkg8bAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVoUHdGYUZNd29yY3BpWnVLa1FVc3JuTTFHUnFBQnFKNERFeEFtQmJL
c0wvMC9GRkY1Nzk3Njc3MkM0QjA5MjZBMkUxM0I4NTZDNjkwNUQ5MjBGMUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRjU3OTc2NzcyQzRCMDky
NkEyRTEzQjg1NkM2OTA1RDkyMEYxQjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFaFB3RmFGTXdvcmNwaVp1S2tRVXNybk0xR1JxQUJxSjRERXhBbUJiS3NMLzAv
MzEzODM3MmUzODM0MmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7VHUwDQYJKoZIhvcNAQELBQADggEBAE5SdD77
ENOY7dLVjitqO+jzvA6Ilp260dc/HrAscTA7VH+cCaF+aqqlUwLCqcjET7cea43H
zIIPSxXLvSiZuOAbZuP84aHAftThL0p+b5ufv4eP07BAoFmpQ65wvD7J9jSeshJe
zLEGlOf71OywAYYVoHnakt3PQCxBMUc0hDl977Qij6YFb/sIFbBVUwmm9SzNJvNr
YEYu98y0ZIeAB6fYTtpO+mozO4PYqJlO1nmbcP6Y2Cl89XOMoCKqOvtjiqtxLgye
edLEJPfu8L7e19Azt0wX1DqV5+LbBfC1znyfS7mFDg3pQahst+mO7I262IOkCOJo
uqwJ6yFJP4Scc5A=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:10 2025 by rpki-client