This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          w1VrgR4WrtKbd2EEiV4kOdUCmAKS+2mCLXKY3cdsqCs=
Subject key identifier:   57:04:AE:01:AE:5E:1E:E9:13:93:2A:CE:66:95:CA:8E:B5:FE:F6:86
Certificate issuer:       /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Certificate serial:       224F9ACBAC47A6168424F21E49B88FDC918651F5
Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa
Signing time:             Mon 10 Nov 2025 18:38:34 +0000
ROA not before:           Mon 10 Nov 2025 18:33:34 +0000
ROA not after:            Mon 09 Nov 2026 18:38:34 +0000
asID:                     263059
IP address blocks:        186.232.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4f:9a:cb:ac:47:a6:16:84:24:f2:1e:49:b8:8f:dc:91:86:51:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
        Validity
            Not Before: Nov 10 18:33:34 2025 GMT
            Not After : Nov  9 18:38:34 2026 GMT
        Subject: CN=5704AE01AE5E1EE913932ACE6695CA8EB5FEF686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:22:2c:d8:6a:77:e9:34:03:25:2c:8c:48:
                    b8:ec:90:fa:70:d8:a0:1f:ea:76:cf:43:95:7e:ae:
                    26:8b:1e:1d:8c:57:fe:91:d4:56:58:92:96:04:2e:
                    ca:45:8d:00:3a:04:d0:3f:d9:fb:d1:e7:27:f5:5b:
                    bd:f1:9a:fd:dc:c3:9e:8e:52:d3:2a:29:df:ab:0a:
                    a7:c8:a4:e9:5f:1f:84:91:89:34:5f:33:f1:7e:5a:
                    2f:57:2c:ef:ed:cc:f6:5f:87:29:eb:04:47:0b:e3:
                    72:47:0d:68:78:6d:04:01:d1:a9:04:16:ad:e8:84:
                    3a:8f:d8:8b:72:09:ef:8a:62:60:06:71:a9:d5:b6:
                    06:41:01:43:09:42:11:f5:64:a5:72:2a:bf:7b:5c:
                    15:ee:19:61:84:ca:92:35:cc:62:83:7d:cd:bf:6d:
                    8a:18:47:43:cb:66:4c:2f:37:09:00:7b:33:d4:56:
                    b9:00:8f:83:47:5e:e7:ad:44:87:c9:d9:04:d9:bd:
                    f2:f5:d3:ac:2c:4d:7b:78:25:e3:15:b9:cc:40:a9:
                    d4:d3:a1:de:7d:be:90:4f:e7:c5:a2:15:af:fd:c4:
                    fe:84:0c:3f:a8:d3:63:64:52:c0:b7:d6:12:ee:19:
                    80:8e:d2:70:de:53:b3:e5:13:03:85:88:cd:84:1e:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:04:AE:01:AE:5E:1E:E9:13:93:2A:CE:66:95:CA:8E:B5:FE:F6:86
            X509v3 Authority Key Identifier:
                keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:aa:65:71:c7:28:d6:13:56:c5:84:8a:94:ea:0a:5e:1e:
         6d:5d:de:2b:ec:42:ea:ad:a4:90:4b:8a:7e:b0:28:08:42:9c:
         15:4f:f0:9e:a4:37:b3:1e:ef:3b:f3:fc:db:de:c1:bb:f8:a7:
         98:22:76:5f:83:ce:9b:5d:24:99:5b:26:83:42:fb:b7:c1:2c:
         0e:ec:39:1f:2d:54:86:ff:75:d7:94:dd:f3:e0:67:61:32:d3:
         8c:c5:a1:48:49:19:85:bb:05:8f:df:f4:23:05:ae:5e:79:54:
         7d:99:15:6e:35:b5:46:db:99:95:b2:0b:eb:e5:28:9e:f0:18:
         13:2b:54:b1:b4:89:58:29:31:39:d3:34:c4:9c:bb:63:c0:f1:
         b2:10:9f:34:4e:0e:4c:66:33:39:9b:9a:d5:2b:12:14:dd:88:
         81:eb:fb:3e:14:65:26:fd:a9:50:62:2a:05:e5:39:ff:31:b3:
         ac:a8:16:04:86:fb:8d:fe:ff:23:e3:b9:fe:d2:23:da:58:15:
         09:c3:da:9f:1a:e5:ea:cf:53:18:6f:32:45:8c:38:6d:cc:09:
         87:88:c4:76:b6:ad:c0:66:b2:49:26:ca:7b:bf:9a:4a:40:98:
         e6:b0:36:cf:e1:37:85:6b:8a:b8:37:47:47:e0:7a:0a:30:c2:
         63:9f:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:39:09 2025 by rpki-client