This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39362e302f32332d3233203d3e20323634313431.roa
File:                     3138362e3235302e39362e302f32332d3233203d3e20323634313431.roa (raw, json)
Hash identifier:          rIZ6wUWb4wustT3DntulGekEPs0oGizTihIUrwr7O0w=
Subject key identifier:   4F:73:E8:6F:F4:75:0F:79:C3:87:75:A3:CE:10:A2:F9:14:B1:15:EE
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       0F6A10AE060DC94D2060FEB3679B442C63086411
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39362e302f32332d3233203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:51 +0000
ROA not before:           Thu 04 Dec 2025 20:33:51 +0000
ROA not after:            Thu 03 Dec 2026 20:38:51 +0000
asID:                     264141
IP address blocks:        186.250.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6a:10:ae:06:0d:c9:4d:20:60:fe:b3:67:9b:44:2c:63:08:64:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:51 2025 GMT
            Not After : Dec  3 20:38:51 2026 GMT
        Subject: CN=4F73E86FF4750F79C38775A3CE10A2F914B115EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:08:a4:51:43:3f:59:82:37:6a:37:ec:31:
                    54:1d:53:25:fe:27:a5:84:7a:a4:ed:7b:43:55:f4:
                    1d:e6:e7:d5:e3:99:83:95:ca:40:b6:a6:6c:13:d7:
                    e8:29:f8:5f:8e:29:5f:cb:65:76:3e:d6:ae:ed:4a:
                    cf:8b:a2:3c:fd:4a:7c:1b:55:e0:03:6a:52:ba:c8:
                    5c:a0:b7:07:af:ff:e2:52:42:d0:e0:32:5e:dc:b1:
                    eb:1f:fa:6c:9b:b4:d0:2a:c8:b4:de:1e:87:a3:d8:
                    bf:dc:77:58:ed:d7:d0:bc:64:87:9e:53:29:1e:db:
                    57:2e:99:7c:5e:f8:54:1b:68:1b:39:9b:c1:82:13:
                    c8:fe:3d:f9:12:6e:df:40:ed:d8:6f:0d:08:b9:8c:
                    6a:aa:b5:d7:69:44:04:43:b2:fb:83:a7:95:cb:0a:
                    08:5e:e6:4c:50:8d:4f:54:30:b5:d0:06:0e:6a:74:
                    41:ff:df:db:eb:4a:07:18:59:05:ec:38:13:d7:7c:
                    98:9f:02:d3:4d:b2:f7:f9:64:be:82:be:cf:25:a2:
                    04:59:4e:2f:e6:bf:f7:58:fa:ab:e4:99:96:7f:55:
                    e1:36:ad:79:38:94:86:98:2e:28:41:cc:8d:d4:e3:
                    f1:de:3b:e5:7b:eb:b6:60:e2:00:f2:12:51:b7:35:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:73:E8:6F:F4:75:0F:79:C3:87:75:A3:CE:10:A2:F9:14:B1:15:EE
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39362e302f32332d3233203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:4c:7f:e6:49:ba:dc:b8:fc:0f:07:23:47:5a:35:12:9c:52:
         81:70:95:93:1d:8c:ad:7a:b5:51:ae:31:96:29:4d:d0:66:b6:
         56:61:5e:9e:d0:ae:95:48:27:4b:34:c8:7e:7e:3c:34:39:7e:
         43:06:78:db:15:9c:c1:6f:17:23:d2:97:80:74:f0:fc:9c:db:
         38:0f:65:6f:bb:cc:72:f9:0d:ec:ee:59:52:82:8b:90:60:0f:
         27:fc:fd:62:35:d6:c3:4f:07:76:12:88:d5:3f:d2:9d:47:cc:
         22:96:30:ec:fe:99:34:fc:09:52:bf:ec:8a:3f:7c:a6:1a:c6:
         fa:03:a8:a4:01:2f:54:fb:11:dd:63:94:ff:dd:21:fe:76:89:
         50:58:6f:80:6a:e5:1a:34:38:cc:76:53:47:54:85:df:76:ba:
         dd:23:45:3d:51:74:61:27:3f:e6:cb:71:d2:97:2f:58:91:1b:
         00:ec:22:1f:5c:0e:4c:af:df:26:5d:fe:3c:b9:64:74:92:9d:
         4d:6a:fa:29:48:10:20:b4:17:a4:ad:e5:82:06:00:50:cf:22:
         76:99:e1:20:1b:b0:b8:a7:1d:02:db:dc:ca:1f:cd:60:97:b1:
         06:f7:9f:b3:b8:d8:11:e4:f7:6d:10:1b:9a:5d:a3:c0:d2:22:
         e7:93:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:18 2025 by rpki-client