This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa
File:                     3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa (raw, json)
Hash identifier:          yDCiuciJSZaSRpfKU7QRZDiiG1Hh2X89ALnrnjmPKX4=
Subject key identifier:   20:00:A7:FA:7F:2A:9A:3F:C7:C6:29:57:92:59:8F:CC:56:89:A7:66
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       512E0EBAD08A458DA9342E00CD830D1557546C69
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:52 +0000
ROA not before:           Thu 04 Dec 2025 20:33:52 +0000
ROA not after:            Thu 03 Dec 2026 20:38:52 +0000
asID:                     264141
IP address blocks:        186.250.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2e:0e:ba:d0:8a:45:8d:a9:34:2e:00:cd:83:0d:15:57:54:6c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:52 2025 GMT
            Not After : Dec  3 20:38:52 2026 GMT
        Subject: CN=2000A7FA7F2A9A3FC7C6295792598FCC5689A766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:77:71:3f:2a:ae:5f:c7:09:94:a7:54:85:
                    d4:c6:ad:ef:6a:58:75:b1:84:05:6e:be:32:f6:d5:
                    f5:97:20:7c:66:4b:8b:59:a1:59:fa:fb:3d:d5:fc:
                    65:86:81:65:d3:b8:29:d3:73:96:c8:3e:59:cd:3d:
                    01:77:b5:ff:c9:6f:e3:97:a9:40:fb:18:0d:89:76:
                    61:5a:ff:e6:86:1c:29:02:b4:19:06:1f:96:45:08:
                    ef:8f:96:dd:1a:9b:4a:93:6d:0b:94:c6:11:e7:1e:
                    4f:85:13:78:4a:0c:79:9f:2f:62:a1:6a:cf:0e:5a:
                    36:f0:77:51:0b:a0:63:dc:45:08:63:23:6c:07:96:
                    57:b1:c4:ec:43:0c:3a:71:3e:80:be:20:cf:72:56:
                    71:9b:53:b2:ea:51:20:7c:f9:3a:19:05:d6:3c:94:
                    88:0d:e9:9a:45:d9:f6:9a:ea:f2:36:b4:79:d0:5a:
                    69:7e:e5:fc:31:c8:64:08:cc:23:d9:f6:fb:78:a1:
                    0c:6c:02:b9:52:74:03:8b:8e:6d:7f:0f:55:5f:1e:
                    c4:64:96:d5:73:23:ed:24:30:74:93:0f:13:dc:b9:
                    20:cf:31:b7:df:b3:c4:1f:8f:13:5e:55:87:4c:b2:
                    70:2a:0d:7d:94:a0:0d:5d:05:5c:9a:af:b5:41:49:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:00:A7:FA:7F:2A:9A:3F:C7:C6:29:57:92:59:8F:CC:56:89:A7:66
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:30:ee:2e:44:f2:a2:fb:11:f9:a0:2a:c3:1e:af:73:64:0d:
         0a:7c:67:a4:f5:fe:0e:81:a7:03:26:92:f8:80:a5:41:23:3d:
         fc:5b:60:62:42:3a:2f:eb:29:6c:08:57:7d:09:b1:25:60:40:
         2d:cd:16:d2:6f:84:57:76:b0:59:7a:72:12:ea:f9:2e:26:da:
         b0:44:07:f8:af:d2:15:ab:63:c9:dd:9d:39:c5:06:6b:f7:d1:
         d7:94:91:75:ae:56:32:3c:ea:1d:03:34:81:67:c5:08:8f:af:
         88:b7:60:88:4e:46:b2:e6:e4:9a:9d:e1:74:75:63:85:7c:db:
         f5:10:87:d9:db:39:1f:98:57:02:6d:6c:43:26:c3:44:94:32:
         81:fb:ae:a4:68:3f:01:a3:c4:11:37:3d:48:22:3d:d5:61:12:
         f0:d6:0d:af:e1:7e:57:a6:60:0a:69:c4:1d:72:19:c4:69:18:
         2f:a7:e8:8c:a3:1b:8b:bc:b3:22:a4:e3:55:ad:32:cf:ab:36:
         4a:6f:ae:ff:ad:8d:6f:37:11:97:8b:83:87:13:71:d0:2d:55:
         1f:48:71:7e:2f:29:4c:7e:24:b7:b6:c4:46:ff:a1:ba:2d:6d:
         9e:49:0f:61:49:a9:f4:77:9f:2a:27:fd:23:6c:0f:b9:0a:ae:
         0a:97:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:38 2025 by rpki-client