This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa (raw, json)
Hash identifier:          PmtGDJIAUgzvevIDMoeXTfFiq93G1ZeGKDak/EVWo/s=
Subject key identifier:   94:8F:43:68:2A:2B:D3:55:98:AF:2B:5C:DA:E2:7C:E0:49:03:98:26
Certificate issuer:       /CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
Certificate serial:       537FBF9B7D2456AFB93CCB47C8377CC4F3678532
Authority key identifier: F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa
Signing time:             Mon 01 Dec 2025 14:46:30 +0000
ROA not before:           Mon 01 Dec 2025 14:41:30 +0000
ROA not after:            Mon 30 Nov 2026 14:46:30 +0000
asID:                     266385
IP address blocks:        170.80.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7f:bf:9b:7d:24:56:af:b9:3c:cb:47:c8:37:7c:c4:f3:67:85:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
        Validity
            Not Before: Dec  1 14:41:30 2025 GMT
            Not After : Nov 30 14:46:30 2026 GMT
        Subject: CN=948F43682A2BD35598AF2B5CDAE27CE049039826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:68:34:00:0d:42:81:24:ae:25:ee:b2:c5:
                    c4:23:29:63:28:a9:73:9d:47:4e:65:b8:b1:77:3f:
                    85:e7:37:61:ed:24:e4:fe:4d:0f:09:f7:ad:5e:99:
                    38:38:af:d0:e5:bc:63:4a:2b:2f:30:7f:7d:df:c1:
                    9b:80:bc:34:d8:f2:7a:9c:9d:2b:4d:4f:14:5c:8e:
                    17:e1:67:05:e3:26:fd:e3:82:b7:a7:d5:95:ca:54:
                    f5:28:d3:ab:af:58:6c:dd:ef:0a:97:80:20:1f:7b:
                    63:3c:c2:d4:11:1a:4d:74:f1:39:0d:fb:13:84:36:
                    2e:5f:1a:93:b5:df:1b:9a:3c:f5:68:a5:bc:e9:dc:
                    fa:25:02:40:7d:f7:5c:65:89:be:ac:ab:b1:b2:ce:
                    d4:76:11:01:2d:3d:ba:9a:0f:d8:d7:8b:11:c2:45:
                    df:ec:4a:38:77:f6:9e:b3:0f:c9:b2:fd:08:3d:ca:
                    dc:11:55:ed:5b:d6:d9:22:d6:42:92:fe:79:49:10:
                    ab:e1:8d:4e:e4:59:e4:c7:8f:b7:cf:0a:f6:ef:bb:
                    37:ea:46:f0:0d:40:96:27:15:8e:f4:b1:0a:00:f3:
                    1c:21:a9:1c:26:30:1c:50:db:bb:ed:02:8e:7f:80:
                    f1:af:4a:f5:53:a3:90:7a:98:1e:c5:47:1e:16:1c:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:43:68:2A:2B:D3:55:98:AF:2B:5C:DA:E2:7C:E0:49:03:98:26
            X509v3 Authority Key Identifier:
                keyid:F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32342d3234203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f6:87:57:4f:fa:66:a1:5d:59:99:05:a6:62:42:1d:04:40:
         76:ae:7c:4f:00:03:7f:56:38:82:8f:67:08:98:0f:76:f4:0e:
         42:e6:67:89:d7:18:4e:b5:5b:ab:e3:ca:9d:88:c3:72:e1:3d:
         85:ad:88:a3:1a:0b:0a:b6:53:ab:0a:85:a0:d0:b3:84:79:bb:
         9c:58:06:69:8b:ad:4d:6d:75:5e:21:76:bd:e0:e8:e2:68:9d:
         2d:d9:7c:23:05:5e:5e:3c:f9:b3:ad:aa:03:58:bb:f6:ab:e5:
         50:ac:d8:b4:d0:4d:0f:78:5f:e4:52:a0:f7:11:f7:75:c9:ca:
         9f:6c:56:12:e8:d3:ef:65:72:43:70:72:45:0c:92:4c:ac:be:
         ee:fb:d3:e0:80:54:f4:82:c7:10:6a:b6:b6:0c:e3:76:d8:fc:
         19:bd:0a:ae:bf:65:a4:cf:71:c0:c2:ea:19:b4:59:e2:11:2e:
         bd:5e:9e:69:81:af:d5:e7:9a:4b:fc:90:60:7b:c3:e1:8c:8a:
         c9:b3:9d:03:15:81:00:8b:38:69:6b:b6:98:83:c3:b4:a6:c6:
         e1:cc:4d:66:28:d2:dc:6d:41:8c:21:3f:f0:f4:9d:90:ce:11:
         77:a5:cd:75:8e:54:21:e4:59:c3:e6:fd:6d:2c:6e:e4:ab:05:
         ba:f6:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:38:44 2025 by rpki-client