This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa
File:                     3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          NHC/jOJDDqvrzCKiLrs7rx9oxZDnN8GYqfCzElars18=
Subject key identifier:   87:B9:3C:C6:7D:46:33:24:38:EE:62:1E:CD:B9:F6:6B:EB:14:53:00
Certificate issuer:       /CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
Certificate serial:       230FD78FDF4B708FC9F52DD49AC20C0B31686A58
Authority key identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa
Signing time:             Wed 31 Dec 2025 13:59:25 +0000
ROA not before:           Wed 31 Dec 2025 13:54:25 +0000
ROA not after:            Wed 30 Dec 2026 13:59:25 +0000
asID:                     61632
IP address blocks:        131.100.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl
                          rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0f:d7:8f:df:4b:70:8f:c9:f5:2d:d4:9a:c2:0c:0b:31:68:6a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
        Validity
            Not Before: Dec 31 13:54:25 2025 GMT
            Not After : Dec 30 13:59:25 2026 GMT
        Subject: CN=87B93CC67D46332438EE621ECDB9F66BEB145300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:0e:46:7b:2a:38:a5:70:b0:11:15:54:d6:
                    47:00:fe:13:29:ac:a5:2d:0c:7c:60:f1:f8:07:4d:
                    da:00:c2:f8:65:87:d7:f8:be:b5:3d:e3:74:2c:de:
                    cb:5c:19:9c:81:3b:ec:32:71:ee:11:f4:f6:7c:1e:
                    f1:37:fc:e9:b5:7a:4d:d4:75:6f:e7:ea:50:ea:59:
                    2d:5a:c1:ad:4b:19:f1:af:cf:30:87:b9:63:e8:10:
                    3d:13:d3:9f:bf:2c:93:76:be:fc:e4:f5:7b:f5:d9:
                    01:d2:23:e6:70:85:ee:fe:62:b7:28:37:35:ba:b6:
                    e4:55:7a:16:09:13:e0:62:ad:1a:14:99:66:82:68:
                    9a:e4:9b:19:f9:7a:30:1b:1c:30:ed:d1:9d:ab:ed:
                    a9:16:e1:79:c6:9a:99:89:41:71:50:cf:b3:87:cc:
                    d0:c0:9c:6c:5f:1b:ea:b0:27:a5:96:35:a9:ff:0f:
                    6b:08:fc:41:cb:67:26:57:4a:2e:89:68:d5:03:c1:
                    e8:af:7c:65:39:5b:62:d3:6d:70:b4:e4:cc:df:73:
                    ba:6a:55:47:a4:a1:8b:21:0f:0d:9b:b3:81:c5:0d:
                    3e:d1:5d:c7:bf:1c:03:26:f4:78:64:80:88:79:0c:
                    8d:e5:46:30:a8:5e:93:df:67:99:7e:d5:8d:4f:b6:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:3C:C6:7D:46:33:24:38:EE:62:1E:CD:B9:F6:6B:EB:14:53:00
            X509v3 Authority Key Identifier:
                keyid:1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:89:ee:a3:3b:c3:3c:0d:24:c9:3a:b9:dd:f3:43:ac:18:
         cc:f0:ff:2d:65:1b:4a:d2:07:6d:7d:e8:dc:86:17:fa:0f:d6:
         16:a3:19:33:3f:97:34:f4:81:a9:8e:55:71:70:91:0b:fb:b7:
         bf:58:dd:8a:77:6d:3c:bb:65:94:59:92:b6:18:ae:4d:9b:03:
         d7:ad:af:18:63:9c:0d:e7:91:bf:c1:a8:bf:b5:b1:a4:34:d8:
         9c:02:24:d4:16:58:43:f8:d6:22:5c:d3:96:05:bb:c5:74:37:
         10:60:47:c4:96:07:9b:5b:f0:7e:f2:81:25:e6:dc:12:57:f0:
         8a:7c:8e:84:85:8d:80:c6:8c:65:64:d2:50:31:56:50:39:16:
         82:41:e2:a0:3a:76:d5:79:cc:2e:be:63:fc:62:5e:4b:d9:81:
         1a:98:ef:48:7c:db:25:d4:bb:aa:85:93:d7:38:b1:14:4b:93:
         11:aa:a0:a3:ff:1a:c2:35:95:dc:93:93:7a:88:0a:b2:16:d0:
         4e:ba:88:79:24:92:d4:5b:92:9f:a0:73:bc:10:e8:a1:2f:50:
         3d:4c:59:e4:68:6b:40:ae:15:81:c3:49:d1:3e:73:08:9f:64:
         70:58:9f:bb:f6:c8:bb:04:ce:62:e0:f8:e3:b8:b7:37:50:65:
         23:a1:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:59:25 2026 by rpki-client