This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          9xv9gmzfO9NoJtk1BW70remD0QwTKEs+0p+Es1C5pKw=
Subject key identifier:   BD:E8:28:C1:0F:52:03:AA:C6:88:5B:78:F0:0B:D2:90:71:26:63:7D
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       4D15B4AE8057C7016497DB814CAEB8CA6C208727
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
Signing time:             Mon 10 Nov 2025 13:47:36 +0000
ROA not before:           Mon 10 Nov 2025 13:42:36 +0000
ROA not after:            Mon 09 Nov 2026 13:47:36 +0000
asID:                     265393
IP address blocks:        168.194.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:b4:ae:80:57:c7:01:64:97:db:81:4c:ae:b8:ca:6c:20:87:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Nov 10 13:42:36 2025 GMT
            Not After : Nov  9 13:47:36 2026 GMT
        Subject: CN=BDE828C10F5203AAC6885B78F00BD2907126637D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:86:e4:c7:88:45:0a:8a:2f:26:61:ee:1d:
                    48:18:5a:f3:17:77:60:61:6b:ce:60:9b:e5:13:79:
                    df:3e:10:33:61:9d:10:93:e0:a2:59:44:5d:c4:5d:
                    5b:ea:29:22:e4:a5:3e:9a:9c:0b:1f:87:72:17:06:
                    f1:6b:96:a6:5d:80:bb:33:3d:00:54:d1:2d:ab:65:
                    4d:80:06:12:73:85:6c:ea:1c:5b:e6:d4:b5:4e:8d:
                    28:f3:90:76:94:31:51:d3:e0:20:da:09:a6:61:7e:
                    eb:6b:28:2f:9b:7f:82:9c:86:1d:15:5f:ac:51:dc:
                    30:16:e4:cd:1a:32:c1:9f:7f:cb:6f:2e:b4:70:c1:
                    04:c4:8f:50:36:b3:bd:f2:bf:f5:5e:8d:0d:b0:07:
                    5e:69:0b:43:e3:6d:f7:12:d2:c3:35:f6:f8:c1:09:
                    cb:e7:f9:10:35:87:a6:dc:24:ff:82:52:7d:c7:7f:
                    a8:7f:0f:79:ce:73:df:80:b4:bd:a0:d4:99:6d:14:
                    11:90:81:c3:30:5e:d8:eb:15:26:92:ff:d8:22:6b:
                    9e:93:ec:98:2d:38:5b:e4:36:a7:6b:9b:a1:1c:52:
                    47:ce:c8:cd:21:30:96:33:37:f0:92:fa:cf:f5:37:
                    79:e6:d8:90:5b:d1:b2:4d:e8:94:71:4d:71:12:ae:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:28:C1:0F:52:03:AA:C6:88:5B:78:F0:0B:D2:90:71:26:63:7D
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:9a:52:d2:01:fe:c5:b7:ec:ee:46:6e:b2:e1:a5:b5:1f:
         a8:ad:9b:50:ec:4e:f4:9c:77:89:92:6a:63:f1:5f:df:e2:0b:
         a2:42:ef:71:99:6b:90:2b:32:14:46:38:c9:ec:0c:72:b4:3b:
         66:5e:2f:cb:af:1a:58:c3:ad:e6:45:1a:c7:8b:e5:5f:3f:45:
         67:3b:f2:48:1f:e7:da:45:23:3a:4d:e3:2b:95:36:62:a7:e2:
         f8:4b:f5:fd:98:ba:49:ba:87:72:74:4b:4d:25:a8:f1:8f:ef:
         b3:85:4e:72:4a:f6:e5:2b:71:ef:56:b0:db:e9:40:4a:5e:b9:
         58:17:75:43:79:83:9a:96:9c:9e:7b:c1:5e:58:8d:df:23:b5:
         eb:9f:da:35:65:06:83:5c:7e:57:e4:cf:44:34:cb:a8:ab:ba:
         c4:dc:5b:5c:b8:7e:25:08:ff:ed:d3:a2:13:fc:12:cc:50:e3:
         53:e8:9b:40:7a:0b:f7:90:47:0f:c8:a1:ea:29:d5:85:af:b2:
         82:5d:af:73:6f:05:a2:19:6d:db:5a:99:86:63:05:b9:67:76:
         f6:c3:ad:26:77:05:60:70:2c:c6:6b:1c:16:c1:c0:55:20:9a:
         b0:b0:0a:cc:a1:99:6d:66:56:9b:c4:4a:e9:d6:0a:62:18:0a:
         b3:5c:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:48 2025 by rpki-client