This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          1dhXS1FFlvJEQS14xAqiKucmZ1vu3cAPiUysxFtMX0E=
Subject key identifier:   A8:EE:26:69:46:68:22:58:D9:29:44:8C:E1:64:92:2B:16:1D:B3:6C
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       2EEC5E7FC7EF40E52C8703795DF4A6D224709B02
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
Signing time:             Mon 10 Nov 2025 13:47:39 +0000
ROA not before:           Mon 10 Nov 2025 13:42:39 +0000
ROA not after:            Mon 09 Nov 2026 13:47:39 +0000
asID:                     265393
IP address blocks:        168.194.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ec:5e:7f:c7:ef:40:e5:2c:87:03:79:5d:f4:a6:d2:24:70:9b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Nov 10 13:42:39 2025 GMT
            Not After : Nov  9 13:47:39 2026 GMT
        Subject: CN=A8EE266946682258D929448CE164922B161DB36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:aa:dd:98:ed:a1:9a:b9:5c:09:fe:7e:80:
                    12:c7:6f:01:53:26:b5:54:fd:ae:2d:f0:3e:fc:fa:
                    65:2a:4d:0e:1e:b6:0c:c8:b8:30:a5:4c:a6:20:c8:
                    f8:a1:63:a6:3e:c3:cf:ea:29:44:7e:93:59:1e:ae:
                    42:9d:05:65:44:1d:28:a2:70:e2:c7:b4:63:29:0d:
                    85:a2:8d:29:f9:56:c2:21:93:81:04:fe:ce:6b:f0:
                    01:7e:75:0a:1a:79:1b:12:79:76:cf:78:ef:3e:44:
                    f1:73:63:fe:33:ae:d2:29:21:d5:5c:92:b7:3e:8e:
                    8c:da:a3:01:91:9a:f8:49:cd:f2:b9:81:32:a6:b1:
                    4e:32:c0:f9:9d:1a:29:2f:dd:39:8d:6d:e1:b7:fc:
                    4c:fc:4a:8b:5d:3c:80:9a:8f:82:de:15:49:c4:0c:
                    bc:43:e6:cf:53:c2:e6:9d:21:1a:90:0a:2f:19:ee:
                    3d:65:cf:01:2f:74:36:d3:77:2c:d9:c0:61:7c:36:
                    90:7f:e5:32:5d:47:56:6a:e2:08:96:f5:cd:9a:39:
                    7f:4a:8c:88:61:3e:76:09:60:69:76:d5:f9:f1:14:
                    63:c4:6c:95:5d:a9:d1:92:c4:fc:8a:b8:e5:39:d6:
                    51:ed:69:93:a6:f0:be:55:e9:3b:f4:18:fa:69:f8:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EE:26:69:46:68:22:58:D9:29:44:8C:E1:64:92:2B:16:1D:B3:6C
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:3e:31:ef:a8:b7:9e:30:97:21:b4:8f:b5:7d:3b:72:e2:5a:
         f5:9e:cd:f1:e3:52:80:99:25:d0:3b:49:f5:e8:07:75:52:da:
         70:57:af:21:b1:84:f8:ba:1d:90:47:69:30:b2:d3:bb:0e:4a:
         6b:d9:70:68:77:d2:73:82:32:75:85:0d:df:eb:59:63:91:08:
         78:c1:6c:ac:81:75:f2:1d:0d:10:9d:a8:c8:15:8e:b8:e5:da:
         48:7a:18:8a:20:c1:89:bc:2c:40:76:78:e9:bb:e3:c1:a0:42:
         ac:30:29:24:91:65:00:57:f2:c2:ce:b2:18:18:6d:8d:ad:fc:
         65:82:01:15:5d:7b:79:73:93:f8:63:b5:d1:b7:60:01:05:3a:
         51:6e:6f:ff:b0:3b:6d:66:9a:15:d1:8d:e4:ae:c6:82:dd:2a:
         44:55:f5:f1:3d:3d:21:d5:66:c4:d8:cf:8b:c8:42:26:62:14:
         d5:e1:46:05:4c:3e:e7:d7:c2:d9:b7:3f:a2:a8:3e:54:d0:11:
         25:70:9e:7b:e9:a6:2e:1d:f5:3f:b6:81:3f:21:b4:56:6b:54:
         03:78:2e:fb:c3:8f:48:96:40:c5:da:3b:02:1a:ea:f7:96:6e:
         3b:93:84:66:cf:80:91:be:b4:ce:b6:31:5b:45:98:2e:78:11:
         76:20:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:29 2025 by rpki-client