This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3230312e3135382e32302e302f32322d3332203d3e203631373631.roa
File:                     3230312e3135382e32302e302f32322d3332203d3e203631373631.roa (raw, json)
Hash identifier:          RESyi1+XyqAprQlAlEbcd23/bSd6OPZPtbVBCOqpA0k=
Subject key identifier:   1F:BF:99:98:92:E9:71:5C:4F:7C:80:02:A9:3D:5F:5A:9C:5E:0B:2F
Certificate issuer:       /CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
Certificate serial:       27ADDE67CE14D190510497C0DC8770A926218665
Authority key identifier: 2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3230312e3135382e32302e302f32322d3332203d3e203631373631.roa
Signing time:             Tue 11 Nov 2025 14:56:16 +0000
ROA not before:           Tue 11 Nov 2025 14:51:16 +0000
ROA not after:            Tue 10 Nov 2026 14:56:16 +0000
asID:                     61761
IP address blocks:        201.158.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl
                          rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 19:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ad:de:67:ce:14:d1:90:51:04:97:c0:dc:87:70:a9:26:21:86:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
        Validity
            Not Before: Nov 11 14:51:16 2025 GMT
            Not After : Nov 10 14:56:16 2026 GMT
        Subject: CN=1FBF999892E9715C4F7C8002A93D5F5A9C5E0B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:7f:67:4b:4f:eb:f6:f1:72:36:bb:7e:ce:
                    a2:1c:38:22:17:6c:de:ff:e3:60:7a:91:c0:87:5a:
                    10:b1:bd:df:df:a5:2a:9b:36:02:74:f7:cd:28:d9:
                    0f:af:25:32:f5:09:a7:78:87:85:d1:0d:d8:da:71:
                    c5:80:b0:4a:13:cd:70:5a:f9:1f:0d:ad:e8:d5:04:
                    f8:0c:c6:f8:67:12:e6:c6:be:be:91:d4:a0:58:d4:
                    29:25:99:e7:ad:fe:91:99:20:fb:75:74:c2:a0:67:
                    8a:94:b0:c8:0b:db:5f:16:4b:55:6d:b9:63:df:67:
                    cf:62:d1:f1:af:a0:12:76:ef:97:7a:0d:b0:e6:fb:
                    65:c0:d7:77:19:a7:6f:a6:1b:58:15:57:76:61:e3:
                    2c:56:2c:35:43:a9:a5:ea:76:f3:4d:bf:05:39:e3:
                    9d:23:5c:57:42:69:b5:67:74:56:4a:3a:b9:a5:21:
                    04:90:5e:eb:25:cb:87:06:43:5f:a3:b8:88:06:c4:
                    15:dc:6c:41:bb:92:d0:ef:41:05:bb:93:5e:4c:73:
                    0d:1a:37:2f:12:41:47:99:8e:3c:99:3e:87:99:3a:
                    59:95:2c:d1:93:d2:b4:6c:be:52:af:09:58:13:2a:
                    c3:60:44:5e:9d:7a:e7:6d:af:a5:7f:3f:10:85:0e:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:99:98:92:E9:71:5C:4F:7C:80:02:A9:3D:5F:5A:9C:5E:0B:2F
            X509v3 Authority Key Identifier:
                keyid:2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3230312e3135382e32302e302f32322d3332203d3e203631373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:95:07:49:72:87:15:f3:df:e5:8f:f5:2c:b3:78:0b:b2:8b:
         26:8f:04:99:d6:3d:80:a7:e9:16:5d:17:82:9b:25:df:e4:d0:
         40:01:5b:4f:90:ef:55:98:d4:b4:2c:d9:57:8b:f9:78:14:4b:
         ff:16:fe:f9:31:fd:98:d9:9c:0e:58:f5:8d:42:19:dc:16:83:
         13:55:0b:be:b5:a7:1c:ea:1c:ac:cf:fc:82:3b:d3:96:61:ee:
         2a:0c:ee:2b:c5:41:57:9a:47:b1:82:c7:7d:f7:17:85:e6:5a:
         68:14:fa:0e:70:65:52:36:85:db:67:5a:b1:1a:73:50:b6:3d:
         39:63:cf:f6:6f:35:13:32:51:58:b8:ce:3e:35:f9:fd:63:2c:
         b8:bc:38:3a:e1:31:0b:c2:80:57:49:da:ec:bf:52:10:93:46:
         fb:0e:4c:68:bd:b4:c2:7b:01:a2:6a:5e:4d:36:62:e9:ce:7c:
         cd:24:59:bb:14:39:50:09:b7:bd:41:2d:82:bb:4e:74:7e:73:
         12:76:69:58:42:9b:39:cc:73:51:db:6f:fc:b7:6d:7e:d2:ab:
         b0:66:52:aa:2f:1b:25:4f:09:2e:4a:65:1b:de:d3:64:cb:36:
         59:25:18:ec:0a:55:54:0f:3c:ca:0b:be:55:7e:39:a4:2d:fe:
         b2:2c:b1:ea
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJ63eZ84U0ZBRBJfA3IdwqSYhhmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0NjVCNEQ2N0I3OTg3MjhEMDg2MTc1MjkyQUY5QTVD
RTNGMjhCOTAeFw0yNTExMTExNDUxMTZaFw0yNjExMTAxNDU2MTZaMDMxMTAvBgNV
BAMTKDFGQkY5OTk4OTJFOTcxNUM0RjdDODAwMkE5M0Q1RjVBOUM1RTBCMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8H9nS0/r9vFyNrt+zqIcOCIX
bN7/42B6kcCHWhCxvd/fpSqbNgJ0980o2Q+vJTL1Cad4h4XRDdjaccWAsEoTzXBa
+R8NrejVBPgMxvhnEubGvr6R1KBY1Cklmeet/pGZIPt1dMKgZ4qUsMgL218WS1Vt
uWPfZ89i0fGvoBJ275d6DbDm+2XA13cZp2+mG1gVV3Zh4yxWLDVDqaXqdvNNvwU5
450jXFdCabVndFZKOrmlIQSQXusly4cGQ1+juIgGxBXcbEG7ktDvQQW7k15Mcw0a
Ny8SQUeZjjyZPoeZOlmVLNGT0rRsvlKvCVgTKsNgRF6deudtr6V/PxCFDqLfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUH7+ZmJLpcVxPfIACqT1fWpxeCy8wHwYDVR0j
BBgwFoAUL0ZbTWe3mHKNCGF1KSr5pc4/KLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm9LbjJlMmdpYlF3cnFRZTVWZE5ZQ3ZaWFV2NHRVZmk2UEhnTVZ0a3Qx
YWQvMC8yRjQ2NUI0RDY3Qjc5ODcyOEQwODYxNzUyOTJBRjlBNUNFM0YyOEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDY1QjRENjdCNzk4NzI4
RDA4NjE3NTI5MkFGOUE1Q0UzRjI4QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvS24yZTJnaWJRd3JxUWU1VmROWUN2WlhVdjR0VWZpNlBIZ01WdGt0MWFkLzAv
MzIzMDMxMmUzMTM1MzgyZTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzczNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyZ4UMA0GCSqGSIb3DQEBCwUAA4IBAQABlQdJcocV
89/lj/Uss3gLsosmjwSZ1j2Ap+kWXReCmyXf5NBAAVtPkO9VmNS0LNlXi/l4FEv/
Fv75Mf2Y2ZwOWPWNQhncFoMTVQu+tacc6hysz/yCO9OWYe4qDO4rxUFXmkexgsd9
9xeF5lpoFPoOcGVSNoXbZ1qxGnNQtj05Y8/2bzUTMlFYuM4+Nfn9Yyy4vDg64TEL
woBXSdrsv1IQk0b7DkxovbTCewGial5NNmLpznzNJFm7FDlQCbe9QS2Cu050fnMS
dmlYQps5zHNR22/8t21+0quwZlKqLxslTwkuSmUb3tNkyzZZJRjsClVUDzzKC75V
fjmkLf6yLLHq
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:05:50 2025 by rpki-client