This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          8d5PQ4rSYEktuEjPB8Z1Wd7i/6LfE4aHZm2Ncrjl9Ug=
Subject key identifier:   83:1F:CC:01:EF:1F:DC:9C:AE:FF:81:F4:B7:CB:22:95:A6:A8:D6:1D
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       50B553B815ADAF8AA23171CE0D254491561D26CD
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 19:38:49 +0000
ROA not before:           Thu 04 Dec 2025 19:33:49 +0000
ROA not after:            Thu 03 Dec 2026 19:38:49 +0000
asID:                     264141
IP address blocks:        186.250.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b5:53:b8:15:ad:af:8a:a2:31:71:ce:0d:25:44:91:56:1d:26:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 19:33:49 2025 GMT
            Not After : Dec  3 19:38:49 2026 GMT
        Subject: CN=831FCC01EF1FDC9CAEFF81F4B7CB2295A6A8D61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2f:51:c4:c9:ef:7c:d3:69:d4:83:0a:69:d1:
                    59:57:65:a4:0c:59:6b:62:5b:20:85:a3:f2:05:21:
                    61:07:45:6e:db:b3:c2:5e:58:94:af:b9:a9:65:25:
                    f2:d3:eb:38:a1:53:a8:07:ff:a1:66:80:45:40:69:
                    66:dc:b8:dd:72:a3:dc:d5:28:c5:21:ee:30:bd:f6:
                    ac:61:ab:1d:df:c0:1c:ef:78:79:6e:50:ab:75:65:
                    95:65:40:04:77:db:e2:a9:09:9d:aa:6e:bd:76:b0:
                    4a:ac:8f:73:2c:ef:8f:41:91:0b:03:1e:de:d1:44:
                    d3:fb:71:37:ad:ee:aa:0a:16:a4:ab:c8:a0:b1:31:
                    d7:e9:41:f6:a4:2d:cf:a7:ba:e5:f8:5c:36:b5:98:
                    af:02:b6:50:27:94:57:b3:ee:c7:d4:59:0f:fa:e8:
                    8e:13:5c:94:06:01:8c:96:5f:9c:5f:16:bb:13:0f:
                    57:6f:98:dd:a7:60:a0:23:e4:78:2e:35:da:ed:0d:
                    62:72:ec:f9:9b:96:f9:71:4f:67:99:d5:8a:db:25:
                    64:25:27:f6:78:ff:2f:dc:56:2d:ae:18:79:47:19:
                    68:28:79:7e:f3:76:1e:8c:b2:49:7c:64:4e:e9:6f:
                    96:25:9c:15:59:c2:c3:b2:67:e4:5e:8d:e1:c7:cc:
                    20:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:CC:01:EF:1F:DC:9C:AE:FF:81:F4:B7:CB:22:95:A6:A8:D6:1D
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:90:06:8b:a0:7b:50:c9:d7:20:15:f1:61:1e:36:a1:f3:
         e6:e9:f5:85:34:30:dc:d4:92:e4:ff:96:2a:99:cf:dc:60:27:
         35:b2:4d:7c:c1:c8:83:d7:7e:be:37:39:8e:62:cc:89:6c:a9:
         53:14:be:53:29:4d:73:d8:90:27:1e:f7:7c:79:70:c9:96:5a:
         8e:96:bd:dc:89:f8:ba:04:07:ba:94:23:23:95:58:15:d1:73:
         db:66:24:ee:af:31:0f:82:fd:57:df:8f:fd:4b:e0:a4:a6:58:
         33:0e:61:95:4a:1c:ed:1a:72:71:6e:b5:d4:db:4a:ca:3c:c2:
         2c:e8:3d:a0:dd:8e:86:49:11:d6:f1:9e:b3:bc:00:89:0c:3b:
         69:65:c7:da:f6:61:8e:f7:7c:f0:59:d1:b8:cf:7b:6d:d2:e6:
         7e:b2:4e:19:d6:d9:e7:70:e4:ee:27:e4:8a:fc:d9:76:dc:6a:
         13:1e:8f:00:2d:80:a2:97:01:b1:6b:67:ee:1a:d9:37:90:54:
         2d:dc:61:29:6c:7c:96:86:2d:d0:87:e5:d6:7c:b5:38:d3:f4:
         f8:57:59:c5:47:ef:4a:06:92:1c:d9:7e:15:62:2d:f2:33:d4:
         b4:f3:5f:84:11:56:13:36:51:a7:39:b0:df:3b:e2:cb:83:74:
         f4:c9:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:16 2025 by rpki-client