This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa
File:                     3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa (raw, json)
Hash identifier:          0Qps8lTeSMgPQLfJttu2yKlzv4oiNaigSM9UbRc5TRo=
Subject key identifier:   04:52:0E:48:B0:EF:1A:40:BD:44:72:74:87:E2:54:AF:C3:61:43:95
Certificate issuer:       /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Certificate serial:       3D8245BB7237E22D34BB511918BFDF5B4692293F
Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa
Signing time:             Thu 20 Nov 2025 22:56:46 +0000
ROA not before:           Thu 20 Nov 2025 22:51:46 +0000
ROA not after:            Thu 19 Nov 2026 22:56:46 +0000
asID:                     52561
IP address blocks:        186.227.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
                          rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:82:45:bb:72:37:e2:2d:34:bb:51:19:18:bf:df:5b:46:92:29:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
        Validity
            Not Before: Nov 20 22:51:46 2025 GMT
            Not After : Nov 19 22:56:46 2026 GMT
        Subject: CN=04520E48B0EF1A40BD44727487E254AFC3614395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:d7:c7:75:54:7d:dc:1b:57:56:60:d6:56:0a:
                    bc:a9:e5:87:e7:cf:9d:99:25:7a:b2:74:0a:2a:ae:
                    ef:f6:61:f1:05:d0:78:55:e6:44:d4:f9:29:26:61:
                    bc:db:13:c9:0f:9a:c8:32:09:95:e9:cc:03:0c:d2:
                    6f:bc:f8:9b:ab:0c:88:34:e3:1a:c1:bd:a1:26:da:
                    80:d7:31:21:6b:ae:9a:47:8f:be:32:a1:04:b4:76:
                    fa:29:cb:9d:5e:e0:c0:17:9c:28:16:bc:e6:a1:c6:
                    7c:bd:2f:c6:e8:4c:b1:1b:b1:ca:ba:a4:d2:0b:1e:
                    dd:3d:6b:44:85:d2:b8:00:ed:ee:39:8f:ab:bc:86:
                    dc:c1:90:19:ae:d2:7b:8e:cc:d3:0c:59:55:25:00:
                    2d:d6:42:dd:13:c9:c3:7f:be:c4:b6:a5:94:6c:0a:
                    69:2a:f9:47:eb:f9:22:b1:85:9d:5c:a0:2d:15:e3:
                    d3:02:25:68:5d:0a:7a:be:38:37:a4:57:23:87:81:
                    fd:22:a1:a3:a4:9a:32:12:e8:ae:ce:b6:d2:d8:d2:
                    1a:d0:95:95:74:7b:b3:3a:16:b7:a1:ea:ba:12:8f:
                    3e:b7:82:2f:d0:4e:d7:fd:7b:a5:d7:07:69:12:c4:
                    d7:8f:fd:e8:3c:1d:24:02:63:e2:27:0a:10:6a:47:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:52:0E:48:B0:EF:1A:40:BD:44:72:74:87:E2:54:AF:C3:61:43:95
            X509v3 Authority Key Identifier:
                keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:9f:de:b9:4d:df:a4:77:59:48:c6:23:3f:8f:9a:75:d9:d5:
         c0:8e:5d:0f:3d:c1:1d:14:d8:03:26:97:e0:a8:26:07:1e:32:
         05:5b:74:c3:fe:ac:61:7c:ce:5b:91:55:f2:54:79:a8:87:98:
         89:40:9c:e7:52:50:ea:16:02:1b:29:a6:c0:78:2f:c3:e9:75:
         a0:d0:c7:a3:b0:fb:8d:44:1d:a7:b2:ce:a4:eb:f1:84:c4:a3:
         1d:e0:9a:7c:f4:4d:d7:b4:d3:1f:1b:8e:49:1b:0e:42:ff:38:
         5b:ff:cd:9f:b4:18:ec:51:0c:76:5d:92:20:ad:7b:12:89:c3:
         c7:20:98:35:45:44:ff:fc:8a:8e:47:1c:57:0e:3a:5b:60:e1:
         fc:1f:ff:4f:f6:32:6f:eb:57:19:ad:12:e3:2c:f4:cf:5e:e2:
         67:e9:d1:d0:63:b9:9c:27:3c:27:90:b4:b5:67:9b:66:03:45:
         31:f5:5c:8f:a0:0e:de:1c:c8:d2:8b:c6:53:65:31:58:18:4d:
         6b:c7:c1:de:33:01:50:f8:f8:be:d9:41:34:43:35:51:32:b7:
         43:35:22:6d:00:f3:0b:31:34:73:7f:a6:e4:e3:46:f3:ca:a7:
         8b:a5:45:58:1d:52:e2:53:fa:4f:98:40:5d:b6:74:18:25:28:
         3f:cb:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:20 2025 by rpki-client