This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa
File:                     3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa (raw, json)
Hash identifier:          ssXjUQKl2AEE/nLCUt0PBaltgLCJczTap8x6Mnyx3Qs=
Subject key identifier:   FD:24:D0:42:DD:BC:16:C7:FD:CA:A0:62:79:04:2B:ED:CD:FC:65:32
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       672BC00060D2F85FE99DE94A5A05234E2F66E179
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa
Signing time:             Tue 25 Nov 2025 14:46:54 +0000
ROA not before:           Tue 25 Nov 2025 14:41:54 +0000
ROA not after:            Tue 24 Nov 2026 14:46:54 +0000
asID:                     267513
IP address blocks:        168.194.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2b:c0:00:60:d2:f8:5f:e9:9d:e9:4a:5a:05:23:4e:2f:66:e1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Nov 25 14:41:54 2025 GMT
            Not After : Nov 24 14:46:54 2026 GMT
        Subject: CN=FD24D042DDBC16C7FDCAA06279042BEDCDFC6532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:49:23:b4:d2:d1:a8:8e:3f:6d:92:c7:cd:
                    53:a8:a8:8b:16:db:d2:fe:82:6f:22:37:18:1f:f7:
                    1b:1d:d7:8e:e9:5e:a0:4c:95:33:5d:61:21:3e:72:
                    c8:64:f4:ff:8b:bc:aa:89:cb:66:4e:03:19:55:ca:
                    81:c6:f6:91:bb:23:dd:92:3c:be:bc:0f:49:58:3b:
                    90:5f:69:6c:50:83:f7:8d:53:fd:37:89:22:25:ed:
                    6d:82:af:1a:86:9f:fb:eb:fa:7c:b4:a9:6c:6d:b3:
                    18:04:6e:e8:1b:56:b0:18:b2:5b:53:08:42:2a:f4:
                    dc:ca:6a:f5:6f:cc:f5:5e:fc:89:45:3c:7f:e3:f1:
                    62:66:8b:07:5b:eb:cd:32:03:9c:48:64:e8:0b:44:
                    4c:6b:c9:73:69:1a:9b:89:1f:0c:bc:71:54:85:cf:
                    11:fe:0e:a8:38:21:53:77:64:da:ac:b9:e3:32:63:
                    67:18:82:1b:dc:b3:0b:5a:7c:af:e4:6d:f4:ad:0a:
                    7a:26:d2:a1:55:a3:e9:6e:af:ec:bd:17:3f:2b:bd:
                    18:3d:c1:80:84:9c:3f:21:19:2b:60:78:25:30:24:
                    6b:e7:c3:f7:49:a2:61:36:3d:61:63:bd:c2:4d:37:
                    16:07:40:00:29:f4:27:d2:f7:97:2f:74:ef:c5:e5:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:24:D0:42:DD:BC:16:C7:FD:CA:A0:62:79:04:2B:ED:CD:FC:65:32
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32322d3232203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:44:6b:0d:72:90:6c:8b:24:eb:4d:9d:c0:ff:30:1d:b3:
         49:60:7f:0c:15:01:73:14:f0:06:fb:48:c1:9a:4e:89:17:95:
         5f:04:a8:d3:0a:ef:82:b9:b6:94:b6:0a:73:f5:22:f8:17:51:
         83:37:bd:bf:93:a6:ac:36:4a:c6:cd:75:ac:eb:e3:3a:da:36:
         29:d2:97:2c:d7:f5:7b:7c:80:4b:29:2f:4d:34:ba:d4:06:72:
         12:62:b1:f7:4e:36:47:a7:42:a0:51:50:f0:fc:cc:f2:c9:c8:
         93:ea:2d:f9:3c:de:96:e0:5a:32:a6:ab:6c:0f:d3:82:b2:db:
         eb:ae:27:9d:46:7f:85:91:95:a3:4b:d3:cf:d3:d1:7a:32:74:
         7c:3b:56:b4:9c:2d:2e:74:ba:10:c3:45:ad:d0:84:ca:b1:36:
         9f:9c:a3:85:70:db:cb:f2:4e:c6:be:ca:d2:82:96:ba:dd:0d:
         97:3f:8a:cc:0d:49:fc:7f:e9:46:3a:3f:52:94:23:8d:f7:0b:
         e6:fe:24:da:c1:c8:9f:fb:da:80:92:a6:6c:dd:04:4e:1e:57:
         a0:a7:b1:9c:63:f2:ba:11:73:bd:62:b6:6f:fe:51:73:58:b7:
         05:ba:34:17:65:f6:f1:c2:01:47:46:19:11:f6:7b:a0:d5:ab:
         2f:11:89:33
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZyvAAGDS+F/pnelKWgUjTi9m4XkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNTExMjUxNDQxNTRaFw0yNjExMjQxNDQ2NTRaMDMxMTAvBgNV
BAMTKEZEMjREMDQyRERCQzE2QzdGRENBQTA2Mjc5MDQyQkVEQ0RGQzY1MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKkkjtNLRqI4/bZLHzVOoqIsW
29L+gm8iNxgf9xsd147pXqBMlTNdYSE+cshk9P+LvKqJy2ZOAxlVyoHG9pG7I92S
PL68D0lYO5BfaWxQg/eNU/03iSIl7W2CrxqGn/vr+ny0qWxtsxgEbugbVrAYsltT
CEIq9NzKavVvzPVe/IlFPH/j8WJmiwdb680yA5xIZOgLRExryXNpGpuJHwy8cVSF
zxH+Dqg4IVN3ZNqsueMyY2cYghvcswtafK/kbfStCnom0qFVo+lur+y9Fz8rvRg9
wYCEnD8hGStgeCUwJGvnw/dJomE2PWFjvcJNNxYHQAAp9CfS95cvdO/F5ak3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/STQQt28Fsf9yqBieQQr7c38ZTIwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzNjM4MmUzMTM5MzQyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKowjgwDQYJKoZIhvcNAQELBQADggEBAFF9RGsN
cpBsiyTrTZ3A/zAds0lgfwwVAXMU8Ab7SMGaTokXlV8EqNMK74K5tpS2CnP1IvgX
UYM3vb+Tpqw2SsbNdazr4zraNinSlyzX9Xt8gEspL000utQGchJisfdONkenQqBR
UPD8zPLJyJPqLfk83pbgWjKmq2wP04Ky2+uuJ51Gf4WRlaNL08/T0XoydHw7VrSc
LS50uhDDRa3QhMqxNp+co4Vw28vyTsa+ytKClrrdDZc/iswNSfx/6UY6P1KUI433
C+b+JNrByJ/72oCSpmzdBE4eV6CnsZxj8roRc71itm/+UXNYtwW6NBdl9vHCAUdG
GRH2e6DVqy8RiTM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:06 2025 by rpki-client