This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3230312e372e3136372e302f32342d3234203d3e20323633323930.roa
File:                     3230312e372e3136372e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          q0Zqsd7FOkcN51CcBECGobtdm+VApEAqCoNYSUSbfh4=
Subject key identifier:   E3:0A:60:57:7F:B0:D4:DA:35:96:67:B7:CE:EC:93:DB:A7:E2:11:EB
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       61304AFFDC4D1E9D363E41C4861D19431E00E265
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3230312e372e3136372e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 17 Nov 2025 17:12:53 +0000
ROA not before:           Mon 17 Nov 2025 17:07:53 +0000
ROA not after:            Mon 16 Nov 2026 17:12:53 +0000
asID:                     263290
IP address blocks:        201.7.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:30:4a:ff:dc:4d:1e:9d:36:3e:41:c4:86:1d:19:43:1e:00:e2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Nov 17 17:07:53 2025 GMT
            Not After : Nov 16 17:12:53 2026 GMT
        Subject: CN=E30A60577FB0D4DA359667B7CEEC93DBA7E211EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:ec:91:62:0e:d5:1e:a6:ec:e4:ee:21:b5:
                    21:ef:50:66:99:34:5e:54:43:88:d6:21:af:e0:72:
                    ce:a0:24:f5:40:9a:82:77:f4:63:11:92:3e:b2:1a:
                    37:f2:2b:ed:47:2b:cd:61:31:72:09:d0:39:2d:03:
                    fc:2d:36:bc:c0:92:d2:7e:a2:60:7c:b8:64:d9:c4:
                    a6:83:9c:18:21:3c:e3:a2:9d:17:66:0c:3f:c6:f4:
                    0a:00:3c:af:ff:d8:dc:7f:1b:66:ed:be:0f:bc:3c:
                    5f:a1:8e:2b:51:db:49:32:0d:b6:22:9b:39:b5:73:
                    08:a7:c4:a1:cf:ce:9e:4e:79:d4:1a:fe:ab:47:88:
                    0f:b9:69:e3:be:ba:a2:1d:8b:8e:72:68:74:cc:8c:
                    6c:74:bc:47:f9:c1:d6:98:26:a7:b8:24:b6:70:a6:
                    fa:5f:31:38:81:d2:71:9d:e0:05:f1:56:42:90:48:
                    fa:ae:48:61:2a:0f:4c:2d:50:3e:10:df:93:14:81:
                    b9:62:7f:3b:e1:ee:4d:52:99:2d:c2:c5:74:db:3b:
                    55:ea:98:d1:62:10:30:af:cf:39:16:2a:31:69:b9:
                    c2:32:ae:f8:41:29:ca:7c:98:95:95:2b:98:41:b0:
                    cc:56:8c:c4:87:bd:b0:58:1f:d0:89:00:8b:05:e8:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0A:60:57:7F:B0:D4:DA:35:96:67:B7:CE:EC:93:DB:A7:E2:11:EB
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3230312e372e3136372e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ab:73:b3:1b:b3:b3:15:1a:34:1f:cc:d5:60:ca:15:38:11:
         38:f3:f3:e7:fa:1d:f4:94:08:82:52:70:7e:39:f6:ea:3f:4b:
         b0:77:ed:47:60:8a:f9:32:5b:19:77:1b:ff:9c:57:d8:ab:08:
         57:4a:aa:1b:4d:43:ec:32:64:7f:64:2d:f3:74:4e:91:3a:2a:
         2d:86:6d:df:e8:9f:ce:ee:87:c3:eb:77:28:05:d0:4e:a0:1e:
         85:fe:14:0d:6b:b1:1e:56:6c:f8:20:f4:50:c6:73:76:2a:76:
         8e:a4:6a:75:e4:bc:e1:3b:6a:46:24:79:c8:66:13:37:1d:d9:
         63:c4:2d:e9:b8:89:c5:89:f1:63:b7:08:07:7f:c7:fd:96:f8:
         7e:51:6b:cc:7c:7a:b5:be:2e:7a:b1:13:6f:cb:ed:e5:67:e3:
         42:45:65:a2:f7:c7:a3:8d:fc:4e:0c:07:8c:00:3c:9b:0a:e5:
         4b:36:f9:85:e7:ce:f2:30:42:f3:ad:3d:d2:d7:51:c1:7c:a7:
         b0:e1:e7:5f:c2:e6:9f:e0:73:f1:eb:06:90:6c:46:5b:f7:61:
         eb:8e:c2:51:25:0a:91:d4:6d:32:38:ba:0b:18:3f:e8:76:06:
         b7:2a:c8:d0:a0:d1:4f:72:35:3f:56:71:da:b4:67:c8:64:19:
         8f:33:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:24 2025 by rpki-client