This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa
File:                     3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa (raw, json)
Hash identifier:          DBln3/Zck0Vd7H+ELv2KORBpIIOVR998f0SX6SUixpQ=
Subject key identifier:   B3:A9:FD:BB:EE:3C:4B:8D:1C:35:73:D8:86:F9:B5:FD:B4:A4:95:32
Certificate issuer:       /CN=29714F97A53F69A40841F2805D919FCAC517F546
Certificate serial:       10E8EF9367A6588DBF8B3D07F255AD6BA64724F3
Authority key identifier: 29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa
Signing time:             Thu 13 Nov 2025 19:17:59 +0000
ROA not before:           Thu 13 Nov 2025 19:12:59 +0000
ROA not after:            Thu 12 Nov 2026 19:17:59 +0000
asID:                     265468
IP address blocks:        168.196.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e8:ef:93:67:a6:58:8d:bf:8b:3d:07:f2:55:ad:6b:a6:47:24:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29714F97A53F69A40841F2805D919FCAC517F546
        Validity
            Not Before: Nov 13 19:12:59 2025 GMT
            Not After : Nov 12 19:17:59 2026 GMT
        Subject: CN=B3A9FDBBEE3C4B8D1C3573D886F9B5FDB4A49532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:20:54:a9:94:3f:13:62:de:c5:c6:ca:c7:
                    a5:f4:94:d3:f2:31:15:f1:94:98:ff:c9:6f:34:2a:
                    a6:78:47:8d:c2:aa:6b:67:8e:72:0f:e0:df:bb:73:
                    e3:36:6d:54:72:56:5f:23:76:ee:95:48:35:1e:19:
                    f1:50:74:5a:21:c9:e7:f2:6b:9c:ff:4c:d7:45:cc:
                    82:e5:26:aa:24:c0:50:e3:96:7c:f9:a8:dc:3a:aa:
                    ca:f3:a5:86:90:37:55:c1:07:e3:35:8a:db:2d:4e:
                    c5:20:4b:ee:90:e2:24:e1:1d:91:9b:dc:5e:35:9a:
                    d8:49:1c:fa:46:96:b4:9b:23:c3:70:06:4c:a6:f6:
                    30:3f:43:92:1f:25:f7:7a:39:4f:d0:3d:13:a0:16:
                    a4:da:bf:49:ad:bd:26:e4:2a:6f:e1:91:80:d2:4f:
                    3a:ff:e9:da:a4:eb:fe:8b:c4:03:ab:08:8e:6d:98:
                    39:dd:fc:0f:47:91:bd:bb:59:11:a8:81:09:81:fc:
                    18:5d:ee:40:9e:f8:69:c4:9b:a3:dd:e5:b1:1e:d5:
                    10:95:7c:a9:19:83:f4:79:bc:4c:99:d5:ae:65:6d:
                    bb:b4:84:05:27:dc:62:f4:99:9e:1b:0f:07:22:70:
                    5b:cc:0b:32:19:04:8f:d4:01:1c:c8:fc:94:3c:a1:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A9:FD:BB:EE:3C:4B:8D:1C:35:73:D8:86:F9:B5:FD:B4:A4:95:32
            X509v3 Authority Key Identifier:
                keyid:29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e1:3b:5a:9d:7f:09:67:2a:f8:b5:69:3a:26:57:75:79:55:
         d9:b8:12:e3:dc:2e:c0:bd:fa:20:a3:91:ec:94:14:3a:2b:75:
         0f:71:5e:86:6e:90:d5:20:87:58:bd:6a:2f:72:5e:f0:30:60:
         62:5c:76:c6:a9:4a:63:ac:72:58:5e:ba:2f:c3:0a:f7:1a:d3:
         2d:4e:a8:51:9b:c9:a1:77:b2:46:a1:6a:14:b5:68:7c:f4:70:
         48:ff:46:e8:98:2d:87:a8:36:58:6e:56:b7:3f:18:b8:94:a7:
         a8:21:ef:e0:e0:4a:45:0a:ed:02:f1:96:15:30:01:cb:af:99:
         c8:82:f7:b3:0c:32:af:85:da:e9:77:bb:57:fa:46:ff:b7:d3:
         72:86:27:0c:49:70:8c:96:f1:7a:60:f0:58:db:4c:4f:7a:2e:
         a5:13:1a:2c:8a:14:4b:74:86:93:bd:1e:6e:95:b6:bb:30:f2:
         7b:eb:f0:f6:a3:00:a1:bc:08:f7:e9:69:2b:97:f4:3e:9f:08:
         c7:02:74:91:f2:5d:50:a9:4a:c7:99:4f:15:fe:b8:de:cc:3d:
         20:07:15:c6:9c:c4:fe:4f:f1:a5:2f:4a:6e:02:47:44:7b:6d:
         66:88:8a:d6:7c:c4:ee:a7:64:3c:ae:3e:d4:86:e7:b7:25:6f:
         4e:a2:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:36 2025 by rpki-client