This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3332203d3e203631363630.roa
File:                     3133312e3130382e34342e302f32322d3332203d3e203631363630.roa (raw, json)
Hash identifier:          WjtjCe7u8GJQPVsEsI0q2pziTz+jHxgiJR2ggY4eWcc=
Subject key identifier:   96:C2:C8:E2:CE:F5:D0:3B:CE:2C:68:CC:9F:20:88:BE:D6:99:1A:C1
Certificate issuer:       /CN=70EA909324397A558577D3D460D16896E1F7AA80
Certificate serial:       0B47DB75B5386FB9153AF3B3D687DDFFEFE0C21D
Authority key identifier: 70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3332203d3e203631363630.roa
Signing time:             Fri 28 Nov 2025 12:58:18 +0000
ROA not before:           Fri 28 Nov 2025 12:53:18 +0000
ROA not after:            Fri 27 Nov 2026 12:58:18 +0000
asID:                     61660
IP address blocks:        131.108.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:47:db:75:b5:38:6f:b9:15:3a:f3:b3:d6:87:dd:ff:ef:e0:c2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EA909324397A558577D3D460D16896E1F7AA80
        Validity
            Not Before: Nov 28 12:53:18 2025 GMT
            Not After : Nov 27 12:58:18 2026 GMT
        Subject: CN=96C2C8E2CEF5D03BCE2C68CC9F2088BED6991AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:16:dd:cb:53:f2:f5:42:26:37:df:b9:c9:
                    87:f5:ef:d2:6c:ef:62:9b:aa:57:79:63:89:13:93:
                    e0:e3:b0:2b:f5:67:49:30:a9:21:08:72:c1:04:27:
                    2d:ab:f4:92:0c:bb:01:ff:7f:a9:ab:ad:09:2a:4d:
                    12:07:cf:ef:7b:0f:d3:97:a2:68:62:4e:57:06:4a:
                    f9:33:5d:23:bd:98:92:73:2b:a2:f3:38:4e:77:39:
                    1e:52:a2:84:45:e6:c9:a3:b0:ee:e8:89:64:27:37:
                    ed:a2:17:b8:1a:35:55:f1:11:66:f4:16:6f:76:83:
                    ac:10:8d:76:62:cf:a6:03:2f:f0:e6:6e:10:9d:bf:
                    9c:b0:ea:fc:eb:44:d0:cd:c5:a6:34:53:f4:67:0b:
                    02:df:45:31:79:f6:40:ab:73:cf:82:75:20:18:d5:
                    5f:f7:7f:fb:54:19:bd:19:7b:c6:76:6f:f6:05:8e:
                    f7:30:c9:2a:46:8d:c1:a1:2b:57:b2:77:fa:3f:af:
                    1d:b6:2c:cb:1d:bc:70:d7:a0:e3:f8:1d:db:a4:a3:
                    bb:d9:a9:7f:0f:44:7d:8e:84:46:32:54:30:0f:09:
                    cf:c6:f1:43:26:ed:4b:66:46:67:b3:47:72:2b:54:
                    65:43:dd:20:2f:16:aa:0f:75:69:2e:e4:f7:64:c5:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:C8:E2:CE:F5:D0:3B:CE:2C:68:CC:9F:20:88:BE:D6:99:1A:C1
            X509v3 Authority Key Identifier:
                keyid:70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3332203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:99:f8:30:0a:29:d9:1c:ff:6d:78:b0:e7:b4:30:50:0d:
         01:63:62:57:ee:08:f1:c9:53:87:40:7b:d0:eb:f4:7c:38:e2:
         cf:f5:2c:18:5b:33:47:56:42:54:d3:81:2e:1d:b9:0e:71:d3:
         17:1b:17:c3:48:f3:a1:b0:47:d2:cf:77:01:a9:13:e6:ee:a8:
         02:1d:59:e6:bf:6a:78:31:6d:3d:6b:8c:60:a7:42:0b:a4:1b:
         ef:d3:29:0e:45:59:26:bb:77:b8:20:fb:59:cb:6b:ba:d5:67:
         f8:8e:c2:ce:29:4a:9e:ce:ef:15:d9:9a:5d:d9:46:05:5b:b0:
         9e:b6:d1:c5:74:98:eb:7f:fe:45:12:99:ed:11:41:9c:34:e4:
         e3:c9:07:dc:72:4c:e2:8e:1b:0e:b2:85:00:15:09:ec:5b:de:
         4f:d6:a8:c4:50:ab:c5:f3:e9:7b:e0:1a:68:05:0c:a1:cc:2f:
         7b:45:fe:63:0d:85:63:3a:3a:c5:aa:14:e6:a7:a2:06:f0:8e:
         f6:06:46:51:a8:0a:65:33:68:d9:63:d8:ad:f9:4b:f4:e8:2a:
         c9:71:42:77:fd:9a:50:54:31:6e:bc:01:cd:0c:c2:a8:bb:4f:
         c3:e6:77:55:4c:9c:d8:0d:20:8d:c9:a0:c7:cb:08:a0:0b:a3:
         14:38:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:17:12 2025 by rpki-client