This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa
File:                     3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa (raw, json)
Hash identifier:          tTLdSet9Jw4w/8eUUnAiSHIrCNgBRbXSkHZTucDqY/0=
Subject key identifier:   B7:BD:94:A0:06:05:9D:E1:7A:9C:D7:48:D8:D5:21:52:60:C1:22:5B
Certificate issuer:       /CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
Certificate serial:       030651C5253FC75908E1889750C8E1C832D68A1D
Authority key identifier: FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa
Signing time:             Mon 17 Nov 2025 18:01:27 +0000
ROA not before:           Mon 17 Nov 2025 17:56:27 +0000
ROA not after:            Mon 16 Nov 2026 18:01:27 +0000
asID:                     271050
IP address blocks:        187.84.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:06:51:c5:25:3f:c7:59:08:e1:88:97:50:c8:e1:c8:32:d6:8a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
        Validity
            Not Before: Nov 17 17:56:27 2025 GMT
            Not After : Nov 16 18:01:27 2026 GMT
        Subject: CN=B7BD94A006059DE17A9CD748D8D5215260C1225B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:61:4a:ae:62:8c:a0:4b:e9:47:80:8d:8e:
                    1a:03:e6:55:d9:c8:59:0f:fc:9f:0d:c3:65:37:0b:
                    e0:43:ce:fd:73:fe:19:6e:89:89:44:4a:bf:5e:24:
                    41:72:15:f7:14:d2:4d:72:9f:86:e1:9c:3c:f7:92:
                    5c:1e:c4:ef:a7:18:30:ec:83:e4:ae:b6:97:84:e4:
                    d6:c8:ca:ed:b0:36:de:6a:44:22:a5:38:8e:8c:5f:
                    5d:af:4b:24:94:25:ae:89:cf:3c:a9:56:1a:9a:5e:
                    2c:27:77:26:40:da:25:80:00:fb:17:35:5c:39:71:
                    21:96:e6:2d:f2:fb:84:21:5d:fc:ab:ae:f6:49:b4:
                    b0:cf:27:9f:2d:3e:bb:b2:e3:fb:33:fd:60:92:b3:
                    dc:4e:3e:6a:b2:d0:1b:b7:1e:15:2e:81:e2:56:fe:
                    5d:14:8b:dc:96:f7:b8:b9:cb:4b:82:d1:63:f6:69:
                    9e:5a:e7:11:c5:00:28:9c:45:e1:5d:fc:ae:9e:f6:
                    46:a6:10:19:8d:88:7a:ca:a3:fe:5a:97:3d:6c:44:
                    e9:ed:dc:7f:f0:9e:47:78:51:75:e9:95:96:e0:97:
                    db:5e:18:49:e0:5d:f0:2b:4f:cb:92:54:9a:19:08:
                    c3:24:72:45:1f:c8:46:21:04:1b:5c:7d:79:16:98:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BD:94:A0:06:05:9D:E1:7A:9C:D7:48:D8:D5:21:52:60:C1:22:5B
            X509v3 Authority Key Identifier:
                keyid:FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ce:96:f0:e2:1c:f5:ce:40:5b:ce:64:8c:77:1b:65:10:48:
         e9:03:c7:b6:ea:df:e0:fa:ad:02:94:66:54:6e:b8:0c:67:b4:
         7f:17:f4:63:9f:1e:b4:89:0a:1a:84:8b:fb:65:af:a5:f7:28:
         cd:5f:27:39:c5:ce:55:a0:87:8c:c3:4a:ea:4b:50:89:83:df:
         b2:89:3c:e3:57:f1:e5:ba:38:41:95:bc:ad:ad:a4:a5:fc:0e:
         7e:af:90:e9:90:a5:c5:77:e5:ae:b4:82:e3:bb:85:77:97:37:
         33:f7:00:5d:f2:2a:92:c2:16:3d:bd:07:af:cd:94:a8:44:4b:
         d7:4c:08:dd:99:5a:89:66:99:60:48:80:b0:d0:d5:4d:7a:b6:
         59:64:73:cd:3a:2b:11:7c:92:b3:df:a1:bc:19:cb:40:19:62:
         15:23:93:8f:25:c4:a0:b5:ec:e4:48:3c:c3:08:5c:bb:21:77:
         0c:85:8f:6e:ab:99:03:74:db:85:6d:14:41:11:4f:19:3d:d0:
         a1:d0:a1:62:98:07:8e:da:f1:60:14:a6:00:b7:03:ff:e3:0d:
         c1:8a:b2:6c:6c:a4:73:00:8d:cc:2a:1c:a9:28:dc:54:af:79:
         db:89:c4:26:3d:df:dd:e3:8b:38:a3:81:97:cd:37:0c:03:19:
         55:79:36:e1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAwZRxSU/x1kI4YiXUMjhyDLWih0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGNTc5NzY3NzJDNEIwOTI2QTJFMTNCODU2QzY5MDVE
OTIwRjFCMDAeFw0yNTExMTcxNzU2MjdaFw0yNjExMTYxODAxMjdaMDMxMTAvBgNV
BAMTKEI3QkQ5NEEwMDYwNTlERTE3QTlDRDc0OEQ4RDUyMTUyNjBDMTIyNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTmFKrmKMoEvpR4CNjhoD5lXZ
yFkP/J8Nw2U3C+BDzv1z/hluiYlESr9eJEFyFfcU0k1yn4bhnDz3klwexO+nGDDs
g+SutpeE5NbIyu2wNt5qRCKlOI6MX12vSySUJa6JzzypVhqaXiwndyZA2iWAAPsX
NVw5cSGW5i3y+4QhXfyrrvZJtLDPJ58tPruy4/sz/WCSs9xOPmqy0Bu3HhUugeJW
/l0Ui9yW97i5y0uC0WP2aZ5a5xHFACicReFd/K6e9kamEBmNiHrKo/5alz1sROnt
3H/wnkd4UXXplZbgl9teGEngXfArT8uSVJoZCMMkckUfyEYhBBtcfXkWmEtFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt72UoAYFneF6nNdI2NUhUmDBIlswHwYDVR0j
BBgwFoAU//V5dncsSwkmouE7hWxpBdkg8bAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVoUHdGYUZNd29yY3BpWnVLa1FVc3JuTTFHUnFBQnFKNERFeEFtQmJL
c0wvMC9GRkY1Nzk3Njc3MkM0QjA5MjZBMkUxM0I4NTZDNjkwNUQ5MjBGMUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRjU3OTc2NzcyQzRCMDky
NkEyRTEzQjg1NkM2OTA1RDkyMEYxQjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFaFB3RmFGTXdvcmNwaVp1S2tRVXNybk0xR1JxQUJxSjRERXhBbUJiS3NMLzAv
MzEzODM3MmUzODM0MmUzMTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7VHcwDQYJKoZIhvcNAQELBQADggEBADPOlvDi
HPXOQFvOZIx3G2UQSOkDx7bq3+D6rQKUZlRuuAxntH8X9GOfHrSJChqEi/tlr6X3
KM1fJznFzlWgh4zDSupLUImD37KJPONX8eW6OEGVvK2tpKX8Dn6vkOmQpcV35a60
guO7hXeXNzP3AF3yKpLCFj29B6/NlKhES9dMCN2ZWolmmWBIgLDQ1U16tllkc806
KxF8krPfobwZy0AZYhUjk48lxKC17ORIPMMIXLshdwyFj26rmQN024VtFEERTxk9
0KHQoWKYB47a8WAUpgC3A//jDcGKsmxspHMAjcwqHKko3FSveduJxCY9393jizij
gZfNNwwDGVV5NuE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:26 2025 by rpki-client