This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
File:                     3133382e3131382e342e302f32322d3332203d3e20323634323431.roa (raw, json)
Hash identifier:          Wgep4lMmgkclLeobP8F70K6mZwCbI4lmMMfl9cd1wsI=
Subject key identifier:   DF:D5:BF:B1:B4:76:3E:2A:B0:C8:9F:F5:F9:67:98:89:A6:52:E9:FB
Certificate issuer:       /CN=32577A972AD1B4B07CC2A40139BB2E70F312CEAD
Certificate serial:       36A142D4E5D90B5633884EFC6548E3C56CB3A968
Authority key identifier: 32:57:7A:97:2A:D1:B4:B0:7C:C2:A4:01:39:BB:2E:70:F3:12:CE:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
Signing time:             Thu 06 Nov 2025 13:25:37 +0000
ROA not before:           Thu 06 Nov 2025 13:20:37 +0000
ROA not after:            Thu 05 Nov 2026 13:25:37 +0000
asID:                     264241
IP address blocks:        138.118.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.crl
                          rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a1:42:d4:e5:d9:0b:56:33:88:4e:fc:65:48:e3:c5:6c:b3:a9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32577A972AD1B4B07CC2A40139BB2E70F312CEAD
        Validity
            Not Before: Nov  6 13:20:37 2025 GMT
            Not After : Nov  5 13:25:37 2026 GMT
        Subject: CN=DFD5BFB1B4763E2AB0C89FF5F9679889A652E9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:e8:66:56:38:cc:15:4d:36:c7:2d:b0:aa:
                    9e:04:2f:2b:4c:3c:3b:1c:d4:98:ce:7a:e4:f5:eb:
                    b9:6f:68:5b:7b:9d:2a:8c:a4:fc:37:a6:b5:54:fe:
                    7c:55:1b:4e:4c:41:11:2a:cb:2a:36:a5:d1:12:d2:
                    aa:1c:73:e3:e0:60:6b:69:29:ea:f3:fe:b9:35:c8:
                    b0:03:66:1f:0c:f1:de:28:c0:f2:72:5a:22:01:5a:
                    ce:16:09:74:7a:ff:20:10:7b:85:55:99:5c:72:8d:
                    a3:6a:ec:ae:db:4c:a6:1e:21:7d:0f:60:f0:89:08:
                    5b:de:f2:66:b0:76:4d:d5:67:94:be:47:16:e3:5b:
                    74:4f:c5:47:58:b7:10:a9:c7:cb:c5:83:c2:81:64:
                    ab:d6:bc:05:3d:73:90:c7:c8:c0:0e:d1:22:d9:3d:
                    55:49:09:23:b6:36:4c:69:56:98:6b:a4:e6:d3:d9:
                    c1:bf:ed:23:0f:c8:4b:9d:10:b4:8e:a6:ce:32:d2:
                    1c:97:80:35:34:e6:cc:31:d5:94:bf:e7:69:39:38:
                    7e:56:fb:ed:03:25:25:da:c0:92:b3:11:e7:53:2c:
                    a4:7f:6a:75:68:b3:14:66:fa:73:9e:80:fc:d3:9e:
                    9d:27:a2:21:95:18:ba:24:18:76:85:17:b2:27:84:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D5:BF:B1:B4:76:3E:2A:B0:C8:9F:F5:F9:67:98:89:A6:52:E9:FB
            X509v3 Authority Key Identifier:
                keyid:32:57:7A:97:2A:D1:B4:B0:7C:C2:A4:01:39:BB:2E:70:F3:12:CE:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:7a:06:f6:47:b5:26:9b:78:aa:e8:b7:ff:18:7c:9d:41:
         f0:e2:4a:a7:9a:71:47:46:ee:d8:49:62:1a:c6:5f:55:29:6f:
         0f:7b:77:a1:7e:bc:4d:16:69:77:82:56:7c:34:0b:5a:d3:e3:
         0a:46:27:8f:aa:1b:38:d9:7b:ca:03:de:48:73:40:ac:19:bf:
         a3:81:fd:bc:bb:55:20:2b:95:6f:4e:6a:f3:e8:bc:6f:4c:c8:
         e3:e0:53:5f:96:5a:63:20:40:2e:5e:e4:c5:ac:3d:47:cb:e5:
         ad:8f:3b:9a:1e:68:1e:cf:19:f2:93:40:54:0f:83:e7:9e:a7:
         b9:4e:55:f9:e9:64:b2:ba:2a:5c:67:ef:04:72:50:37:50:58:
         5f:9e:d1:cf:3e:34:13:2c:0a:a0:00:bf:2e:5c:98:0c:e1:ff:
         e3:7e:59:7e:41:e5:50:e7:00:c6:99:df:47:42:94:9c:14:90:
         82:f6:c2:93:68:8c:8d:20:1c:32:36:b1:b2:65:5c:e5:6a:3b:
         49:cd:e3:70:00:4f:fc:77:66:a9:88:df:86:bf:0c:8b:3e:e8:
         66:33:93:a7:b7:cd:7a:50:78:d0:ec:28:b3:16:09:66:12:1d:
         93:e3:2d:6d:58:7e:de:1e:9e:b7:09:c7:2e:cb:38:7e:d5:df:
         23:18:bb:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNqFC1OXZC1YziE78ZUjjxWyzqWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI1NzdBOTcyQUQxQjRCMDdDQzJBNDAxMzlCQjJFNzBG
MzEyQ0VBRDAeFw0yNTExMDYxMzIwMzdaFw0yNjExMDUxMzI1MzdaMDMxMTAvBgNV
BAMTKERGRDVCRkIxQjQ3NjNFMkFCMEM4OUZGNUY5Njc5ODg5QTY1MkU5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IehmVjjMFU02xy2wqp4ELytM
PDsc1JjOeuT167lvaFt7nSqMpPw3prVU/nxVG05MQREqyyo2pdES0qocc+PgYGtp
Kerz/rk1yLADZh8M8d4owPJyWiIBWs4WCXR6/yAQe4VVmVxyjaNq7K7bTKYeIX0P
YPCJCFve8mawdk3VZ5S+RxbjW3RPxUdYtxCpx8vFg8KBZKvWvAU9c5DHyMAO0SLZ
PVVJCSO2NkxpVphrpObT2cG/7SMPyEudELSOps4y0hyXgDU05swx1ZS/52k5OH5W
++0DJSXawJKzEedTLKR/anVosxRm+nOegPzTnp0noiGVGLokGHaFF7InhJI1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU39W/sbR2PiqwyJ/1+WeYiaZS6fswHwYDVR0j
BBgwFoAUMld6lyrRtLB8wqQBObsucPMSzq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0E0UDYzYjkyUkJHVmNrRXQ5eE16UmVZWEdtSlN1V0NSSnVGck5uSHdv
MzcvMC8zMjU3N0E5NzJBRDFCNEIwN0NDMkE0MDEzOUJCMkU3MEYzMTJDRUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyNTc3QTk3MkFEMUI0QjA3
Q0MyQTQwMTM5QkIyRTcwRjMxMkNFQUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdBNFA2M2I5MlJCR1Zja0V0OXhNelJlWVhHbUpTdVdDUkp1RnJObkh3bzM3LzAv
MzEzMzM4MmUzMTMxMzgyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzIzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCinYEMA0GCSqGSIb3DQEBCwUAA4IBAQAz53oG9ke1
Jpt4qui3/xh8nUHw4kqnmnFHRu7YSWIaxl9VKW8Pe3ehfrxNFml3glZ8NAta0+MK
RiePqhs42XvKA95Ic0CsGb+jgf28u1UgK5VvTmrz6LxvTMjj4FNfllpjIEAuXuTF
rD1Hy+WtjzuaHmgezxnyk0BUD4Pnnqe5TlX56WSyuipcZ+8EclA3UFhfntHPPjQT
LAqgAL8uXJgM4f/jfll+QeVQ5wDGmd9HQpScFJCC9sKTaIyNIBwyNrGyZVzlajtJ
zeNwAE/8d2apiN+GvwyLPuhmM5Ont816UHjQ7CizFglmEh2T4y1tWH7eHp63Cccu
yzh+1d8jGLvs
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:08 2025 by rpki-client