This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          ngUr4jLkiA15t1n2/cVGBZUxJLYytsRX3kNJebckvnA=
Subject key identifier:   0D:B8:F0:5C:D1:BF:09:CE:DC:7A:F9:06:57:C7:5B:AC:2B:8C:15:75
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       4DF3818092D95394F3851650F0E82518806D7A9C
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
Signing time:             Mon 10 Nov 2025 13:47:38 +0000
ROA not before:           Mon 10 Nov 2025 13:42:38 +0000
ROA not after:            Mon 09 Nov 2026 13:47:38 +0000
asID:                     265393
IP address blocks:        168.194.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f3:81:80:92:d9:53:94:f3:85:16:50:f0:e8:25:18:80:6d:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Nov 10 13:42:38 2025 GMT
            Not After : Nov  9 13:47:38 2026 GMT
        Subject: CN=0DB8F05CD1BF09CEDC7AF90657C75BAC2B8C1575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:3b:ab:af:99:cb:e0:d9:04:b8:fd:b2:84:
                    e7:2c:7b:6f:8c:5d:ff:ee:e3:3d:bc:9a:f5:9c:07:
                    a1:dd:ac:df:14:8e:9f:1b:3b:d9:9c:98:4f:1e:74:
                    70:2e:48:a9:76:f4:f1:a3:1d:03:ac:ab:a4:a6:16:
                    f9:13:31:8c:10:0c:d3:9b:f6:3b:a5:27:05:88:5c:
                    2a:dd:15:8c:9e:2c:c3:89:28:55:b9:27:64:a6:74:
                    93:34:59:5f:a8:f7:e0:8b:4a:13:89:12:13:b6:f3:
                    55:79:57:04:78:a3:9c:58:bf:8a:ef:13:60:e0:6e:
                    dc:1a:36:2e:58:d3:31:a1:10:86:d0:d5:96:19:5f:
                    74:4e:03:50:7f:bf:2c:04:40:14:e6:e5:bf:ff:f6:
                    af:f4:91:1a:fc:da:cc:58:fc:dc:11:37:92:eb:ae:
                    87:1e:96:8a:cd:c5:b1:f3:56:fd:85:23:31:c2:e8:
                    1d:01:04:12:1f:2a:2d:ae:ce:41:84:c8:8b:76:7f:
                    f3:1f:b3:88:20:19:a8:38:de:47:48:49:23:6a:32:
                    2e:07:8e:85:cd:45:f4:15:20:ac:fb:7f:d6:ee:5e:
                    60:d3:e2:06:67:90:36:8d:74:32:d3:dd:e2:c7:f7:
                    43:14:51:df:51:81:b9:4d:22:39:19:a2:ab:8e:a8:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:F0:5C:D1:BF:09:CE:DC:7A:F9:06:57:C7:5B:AC:2B:8C:15:75
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:f7:8b:c6:ab:7c:87:59:85:93:65:64:98:cb:72:c7:ef:
         3e:af:50:ff:a3:d3:33:48:ca:06:14:3b:04:56:03:21:fe:b7:
         21:f2:d5:0e:7c:e6:24:ee:ed:78:09:d0:4f:bf:d8:d3:45:28:
         9c:60:9e:71:1a:d8:e8:f2:60:16:00:1b:8b:8c:2d:fd:4d:84:
         3a:93:48:8b:4f:88:d6:73:31:c9:f9:33:a2:9e:1e:98:48:39:
         0b:0d:b6:5d:9a:ce:b8:46:b0:8c:25:8f:f4:58:5a:10:8a:1a:
         9a:31:bb:04:77:03:17:2c:80:01:9b:2d:c9:9c:5a:a2:cf:1a:
         5a:5d:13:5e:9b:73:ee:f8:11:41:a6:a2:e1:34:f1:ee:b1:82:
         03:25:65:3f:58:a9:34:42:5b:75:58:9a:3b:45:b0:ed:a3:d6:
         9a:97:92:db:5d:4e:1c:26:4b:77:27:fe:39:df:34:c7:f9:ce:
         54:58:7c:38:01:3e:06:e4:b9:95:20:cd:d1:79:a7:a5:f6:0d:
         04:95:e7:55:63:20:23:d2:2f:44:b1:ca:af:7c:33:aa:53:ed:
         f0:d8:a3:64:2b:6e:bf:5a:64:5e:84:13:47:96:27:9f:8e:ea:
         6c:f4:cf:01:d3:8d:50:06:a8:70:cb:48:4c:73:b9:a2:30:6c:
         a0:d5:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:12 2025 by rpki-client