This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          bAJv07CwuKbN5C7IX9PcbKBLDL0LGX+oQppFoUpFbZ8=
Subject key identifier:   CE:92:ED:0C:28:51:FD:AA:91:42:61:5F:8F:E9:CD:F8:EE:2C:28:84
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       37D41A87DEAADDF65D3BC2EB6CD3B1EC1478C10C
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:44 +0000
ROA not before:           Thu 04 Dec 2025 14:42:44 +0000
ROA not after:            Thu 03 Dec 2026 14:47:44 +0000
asID:                     262687
IP address blocks:        187.87.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d4:1a:87:de:aa:dd:f6:5d:3b:c2:eb:6c:d3:b1:ec:14:78:c1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:44 2025 GMT
            Not After : Dec  3 14:47:44 2026 GMT
        Subject: CN=CE92ED0C2851FDAA9142615F8FE9CDF8EE2C2884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:77:7a:6f:0e:bc:c3:e8:fb:3e:13:b9:d6:
                    b2:9a:6a:0e:da:92:23:d6:46:16:10:35:4f:26:a8:
                    8a:0d:4f:5e:9f:dc:df:40:5e:37:03:09:ce:be:1f:
                    3c:e3:67:49:3d:a2:bd:b4:c4:3c:10:40:ae:5e:26:
                    f0:c5:6c:c1:5c:4a:65:e4:cd:72:e4:b6:56:9e:6d:
                    09:1b:c6:be:a6:e5:58:02:a0:a0:a0:85:e3:0c:f3:
                    20:0b:48:c2:91:d1:0e:b4:11:82:fc:91:d9:39:f3:
                    c9:d1:be:07:76:94:ad:b7:f2:d0:51:10:ac:0f:08:
                    fa:56:21:00:9d:9d:aa:db:d4:2e:20:f2:2e:e4:91:
                    38:47:3d:3a:c4:f6:f7:5f:ae:32:70:f1:d2:05:08:
                    aa:d4:b7:a4:a7:a1:b4:98:ca:93:14:fd:0b:a0:44:
                    5c:e0:13:f2:83:0d:2b:47:9a:f1:0a:03:c3:b0:0a:
                    8f:d3:9a:55:f1:19:fb:89:8f:98:0c:e0:27:43:f3:
                    22:84:c4:ed:7b:f6:3c:47:f5:3c:56:c3:06:7e:2d:
                    fc:1b:49:7f:b4:56:79:a3:dd:b7:be:19:d6:61:ee:
                    58:28:70:39:5f:ae:09:bd:53:4f:26:b2:d3:d4:8f:
                    b0:72:7c:3b:4b:13:b5:b7:df:ce:c4:dc:9c:e9:3d:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:92:ED:0C:28:51:FD:AA:91:42:61:5F:8F:E9:CD:F8:EE:2C:28:84
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3c:6d:ac:b3:0c:28:3b:85:50:34:1d:eb:ec:f7:a8:ce:e7:
         1e:d2:07:98:b5:0d:e3:a7:f1:89:e0:d4:57:f5:1b:65:79:9d:
         d0:73:b5:e6:1c:1b:f3:0c:38:21:9e:fe:3d:11:16:8d:83:71:
         ce:16:64:3c:94:f7:68:27:93:6f:c5:d8:c2:58:21:2a:18:eb:
         61:75:93:02:2f:f4:09:19:bf:6f:2b:40:c6:30:fa:04:54:ce:
         76:d5:2e:2f:47:14:f6:d9:6b:cb:5a:96:9a:e2:e1:7d:a5:1d:
         2b:84:6c:cc:69:62:7d:22:eb:df:35:57:59:56:00:49:a9:94:
         1b:73:5b:1a:1a:4b:fb:61:67:c5:41:85:88:4e:34:4d:92:40:
         a2:a9:e9:84:b1:8e:3a:43:6a:f2:9c:04:34:4a:45:0d:25:32:
         e7:99:2f:88:55:3e:be:c6:41:8c:cf:6e:97:3a:51:db:7b:c1:
         74:d5:02:e1:49:a6:47:5d:8b:ae:70:9b:41:9e:07:ae:3d:7c:
         7f:ea:7b:13:6f:61:66:67:58:26:ed:33:a5:1a:a5:5f:4f:18:
         a9:94:4a:cb:c4:7f:2b:b9:06:a8:59:8e:ac:6d:8a:3b:20:58:
         0f:a5:c7:5e:67:23:67:b1:38:4f:ca:b0:4c:0e:cb:39:ec:79:
         f3:8f:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:50:12 2025 by rpki-client