This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa
File:                     3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa (raw, json)
Hash identifier:          8+bfCMy9SKC3r0PL99GkpIjxFOJ3BYT/o8X1/UnaUwc=
Subject key identifier:   59:67:87:21:EF:02:2A:14:94:55:41:A3:D7:E3:7C:70:01:6B:87:3E
Certificate issuer:       /CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
Certificate serial:       06DAD3A6D2AA3872D53F609BF8D8B0305F3EE068
Authority key identifier: FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa
Signing time:             Mon 17 Nov 2025 17:55:17 +0000
ROA not before:           Mon 17 Nov 2025 17:50:17 +0000
ROA not after:            Mon 16 Nov 2026 17:55:17 +0000
asID:                     271050
IP address blocks:        187.84.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:da:d3:a6:d2:aa:38:72:d5:3f:60:9b:f8:d8:b0:30:5f:3e:e0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
        Validity
            Not Before: Nov 17 17:50:17 2025 GMT
            Not After : Nov 16 17:55:17 2026 GMT
        Subject: CN=59678721EF022A14945541A3D7E37C70016B873E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:0f:37:9a:df:01:b9:cb:be:e7:80:02:45:
                    2a:da:bc:b6:bd:26:01:72:fc:ff:44:3f:90:e4:1b:
                    94:93:03:5a:87:a9:c9:f7:53:1c:f5:aa:13:4a:d9:
                    9d:0d:32:b5:95:76:c9:a0:f5:ef:a9:c4:8c:10:0c:
                    71:84:e4:24:c9:0e:c5:ee:ba:22:05:be:82:56:29:
                    bf:e1:98:b5:26:bf:cc:3d:3c:e9:c8:f8:b3:6a:3a:
                    14:27:cb:e2:b9:e3:6e:6e:03:d6:c5:ce:78:f5:8b:
                    27:11:40:34:46:84:99:e2:18:83:a5:4c:30:ad:6b:
                    b4:9b:25:f5:25:9f:62:85:e2:7e:16:f4:75:e0:5b:
                    95:57:76:9b:e1:94:25:ec:5f:82:92:b7:c6:94:82:
                    cd:21:40:ed:7f:e8:98:51:cd:ab:4e:1c:74:3f:0c:
                    a7:29:a8:ad:f9:0d:48:3f:15:8c:1a:25:f6:39:f4:
                    c7:80:b3:6c:e4:62:fb:d2:f2:88:3b:94:96:27:74:
                    31:e1:86:3c:c1:4e:1c:72:c2:26:79:a9:a0:09:33:
                    4d:d2:0a:07:24:0a:3f:a6:54:a1:64:26:24:84:52:
                    2a:81:8d:3f:68:cc:45:7f:33:22:01:c7:6d:3e:95:
                    58:80:42:b5:08:05:9e:05:32:e2:30:66:9e:f4:4d:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:67:87:21:EF:02:2A:14:94:55:41:A3:D7:E3:7C:70:01:6B:87:3E
            X509v3 Authority Key Identifier:
                keyid:FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:9c:df:5b:b7:7d:a9:9c:32:a8:84:d4:6c:75:b5:ee:e0:
         12:aa:a5:b2:ec:61:d8:58:53:65:8a:50:6f:bc:33:31:a1:f5:
         a1:c4:86:42:33:22:63:8f:b6:bb:21:bb:af:11:70:d8:3c:df:
         ee:e5:bf:b6:fd:4a:e3:f3:21:83:4a:45:37:60:d4:97:08:6c:
         18:1e:b7:09:1d:80:7a:af:01:37:2a:93:af:26:e5:75:d7:c6:
         12:e6:50:70:46:42:cf:e4:47:f9:ba:70:f8:d3:a6:c1:5c:61:
         ee:ce:dc:38:e8:9d:47:f8:e4:1f:ea:fc:8d:df:03:81:eb:f7:
         c8:fd:32:65:98:7b:cc:bd:4f:53:2a:ad:05:77:59:7e:b2:ea:
         26:44:27:2f:37:7c:57:e6:c6:0d:75:2f:a3:4c:84:4a:1b:71:
         bb:24:d8:7c:c4:d1:e9:c7:4b:6d:72:b9:8b:e6:dc:c8:fb:fa:
         e3:2d:01:61:cd:64:02:e8:1c:13:0f:18:ce:3e:02:59:5a:fa:
         c7:88:16:2a:ac:1a:51:f7:93:49:71:92:9d:7f:05:db:15:a7:
         3b:9c:82:e6:d5:26:fe:92:3b:58:d3:15:42:6e:15:b5:e7:a9:
         02:67:12:b9:67:34:ad:37:94:19:99:ad:1b:44:41:b9:89:7c:
         9b:26:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:04 2025 by rpki-client