This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa
File:                     3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa (raw, json)
Hash identifier:          Jby59+SceqI06Qp3c2qs/XrRu8Z6a70/HR3cQ9xWejY=
Subject key identifier:   4B:BD:87:0A:E0:8F:11:B0:40:9B:85:C0:4E:67:94:F8:9D:3A:F2:F2
Certificate issuer:       /CN=01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A
Certificate serial:       7AF907DF04388CC0FD3111D09C177C536342D718
Authority key identifier: 01:92:7C:7E:05:70:DC:28:BF:72:EA:FF:B2:8C:0F:E1:FF:B2:08:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa
Signing time:             Mon 24 Nov 2025 15:08:04 +0000
ROA not before:           Mon 24 Nov 2025 15:03:04 +0000
ROA not after:            Mon 23 Nov 2026 15:08:04 +0000
asID:                     264887
IP address blocks:        168.227.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A.crl
                          rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f9:07:df:04:38:8c:c0:fd:31:11:d0:9c:17:7c:53:63:42:d7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A
        Validity
            Not Before: Nov 24 15:03:04 2025 GMT
            Not After : Nov 23 15:08:04 2026 GMT
        Subject: CN=4BBD870AE08F11B0409B85C04E6794F89D3AF2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:34:a9:d9:02:c6:81:0b:77:f3:02:74:f0:
                    32:7f:9b:ac:00:20:b4:70:e8:28:b4:93:4d:c4:e6:
                    39:51:c8:e6:e4:45:da:47:fa:54:57:6b:69:d4:e4:
                    f7:f6:ee:4d:ee:4d:41:2f:73:fa:28:fc:ae:07:f7:
                    71:46:7f:24:74:e7:69:44:bb:a5:67:58:23:0d:85:
                    40:1b:91:f6:a6:97:78:59:da:7a:67:c7:89:47:b9:
                    e1:f9:65:fd:11:52:14:90:eb:c9:f9:af:48:0d:11:
                    88:68:24:0d:1f:d6:44:0f:f6:fc:68:c7:0d:0c:b7:
                    40:a8:ed:80:23:dc:24:b5:61:f3:3e:ab:b7:ff:c2:
                    f4:be:57:c2:99:24:e6:13:91:b1:65:29:8a:80:11:
                    98:fb:38:28:23:71:66:f1:11:94:f0:44:c0:f5:6f:
                    e3:3a:a4:d5:d6:3f:1f:ce:0e:8d:62:72:50:a5:2a:
                    38:b5:5c:77:07:6f:c7:cb:ce:85:4b:a4:52:c1:89:
                    7f:b3:5c:d7:08:c6:10:3b:ac:d8:2e:56:88:7f:ee:
                    35:25:4d:54:39:a0:90:f3:ff:31:c7:ad:40:5b:21:
                    21:0a:25:c3:25:c6:d0:1a:2d:40:2f:f4:0c:b2:dc:
                    18:65:ce:7d:2d:94:06:6a:4b:70:b2:b1:33:55:4d:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BD:87:0A:E0:8F:11:B0:40:9B:85:C0:4E:67:94:F8:9D:3A:F2:F2
            X509v3 Authority Key Identifier:
                keyid:01:92:7C:7E:05:70:DC:28:BF:72:EA:FF:B2:8C:0F:E1:FF:B2:08:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01927C7E0570DC28BF72EAFFB28C0FE1FFB2084A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:3e:92:46:ba:e4:0d:46:c5:2e:3f:72:cd:4d:7f:26:8a:
         f9:4d:dc:d0:ee:c1:46:e0:c2:5c:e1:c0:19:00:6d:34:d6:81:
         0c:d1:3d:20:12:0f:0c:cb:5a:05:5a:23:d4:fd:3b:dc:6c:ce:
         f4:1f:20:33:a9:a4:00:e0:59:d1:5e:96:e3:02:12:8d:59:70:
         1e:69:c2:16:48:2a:60:0d:67:90:e9:aa:44:4e:2a:36:1c:d7:
         31:d5:28:1f:7a:7c:bf:b2:d2:65:73:c4:35:da:61:d6:b0:bb:
         18:30:fd:a1:f6:3e:60:26:cc:cf:99:4b:26:62:17:7d:7d:c7:
         63:63:fd:d1:41:2f:26:38:b1:4f:b1:03:68:40:a3:42:22:20:
         39:30:cc:80:e6:be:8b:1e:74:f7:21:1f:a9:b2:97:c1:4d:5f:
         db:db:2a:f0:e0:1c:20:0d:fa:d6:91:5b:6b:65:8b:95:19:34:
         4d:79:49:f7:9d:18:8d:a5:49:0d:5f:72:7a:37:37:0d:48:67:
         40:ce:8d:c5:2a:e4:ef:2a:08:56:03:63:79:7e:6e:ca:82:f8:
         d0:4a:bf:89:b3:7c:2c:c7:f2:0d:76:44:ae:ed:a2:46:e8:42:
         35:00:df:41:96:44:f6:6c:36:ea:2d:38:15:d8:d7:c5:54:da:
         88:db:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:03:55 2025 by rpki-client