This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32332d3233203d3e20323637353133.roa
File:                     3136382e3139342e35362e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          80rCEyueZmmBfAilvr2fg/xG6TebRhF15dQajkSLqSQ=
Subject key identifier:   F9:A4:B4:EB:96:B1:E8:B9:22:12:09:56:E7:83:BE:37:12:F5:F6:0C
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       122B671E2277AA6D12C3B8C81C231015E2994D06
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32332d3233203d3e20323637353133.roa
Signing time:             Tue 25 Nov 2025 14:46:53 +0000
ROA not before:           Tue 25 Nov 2025 14:41:53 +0000
ROA not after:            Tue 24 Nov 2026 14:46:53 +0000
asID:                     267513
IP address blocks:        168.194.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2b:67:1e:22:77:aa:6d:12:c3:b8:c8:1c:23:10:15:e2:99:4d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Nov 25 14:41:53 2025 GMT
            Not After : Nov 24 14:46:53 2026 GMT
        Subject: CN=F9A4B4EB96B1E8B922120956E783BE3712F5F60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:04:7d:57:c3:b3:c2:c2:78:61:39:3b:6d:
                    06:9e:4c:6d:29:a5:02:68:34:f3:6e:70:a3:65:b8:
                    0f:12:84:2c:ad:fe:9b:52:ab:d5:ef:e2:e6:5b:c4:
                    34:12:06:ff:e6:0b:e8:36:b9:f2:1e:e4:15:9b:ad:
                    d9:5d:27:c7:11:51:8b:c5:33:fd:75:d7:55:14:52:
                    54:56:4e:f2:70:a5:3b:67:04:e6:f7:8f:c7:4c:ee:
                    83:10:32:b9:38:51:56:9f:1a:34:d0:69:b8:2f:d8:
                    53:34:ec:b4:a7:8f:f7:03:49:aa:f8:4c:b3:e1:66:
                    5b:2a:ce:7a:b6:b5:bd:44:e5:17:74:23:e3:d9:a7:
                    fd:3e:7f:63:fe:85:5d:cd:e6:ab:b1:22:d0:54:06:
                    c8:52:db:c6:2e:06:99:89:22:61:7e:b2:e4:3e:f8:
                    6e:37:6f:49:5d:70:41:4d:1b:4e:0f:db:e9:2f:b0:
                    bb:6a:47:3a:a9:c0:95:c5:e3:d0:73:43:6a:06:ec:
                    c8:01:66:52:c7:52:65:66:b0:7a:7a:24:9a:e2:e1:
                    38:42:2b:6c:21:31:6d:39:a9:6b:87:fd:3e:45:63:
                    a6:6d:52:2d:73:f1:00:a8:e4:5c:d5:0c:ba:a3:9b:
                    82:55:54:44:08:51:61:b0:d4:c1:a6:6c:60:03:55:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A4:B4:EB:96:B1:E8:B9:22:12:09:56:E7:83:BE:37:12:F5:F6:0C
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:98:a2:43:c8:84:db:91:ee:3f:4b:85:0e:7b:4e:ca:32:1c:
         f7:65:da:4b:87:95:ad:60:97:50:86:7b:20:b5:a0:9c:54:dd:
         2d:77:5d:1e:df:55:94:54:87:d4:c0:67:3b:18:54:c8:66:4e:
         a0:7e:2f:31:cd:11:5c:a2:96:a9:39:01:e0:ab:b7:22:78:b4:
         c7:65:d8:72:f7:bd:ba:0d:f0:08:f4:93:90:ef:45:21:79:90:
         a5:88:02:f8:37:01:07:8c:53:ba:7c:16:c5:61:41:72:fb:79:
         2a:95:b5:0e:9f:63:41:5a:f2:af:22:44:1a:82:55:ae:1e:ef:
         3b:75:6d:e3:fe:07:3e:6f:69:02:84:dc:84:c4:8c:94:b0:59:
         a4:b1:fb:1f:27:81:54:50:28:03:be:1e:30:a7:21:0d:ab:65:
         b5:c7:97:c5:e2:7d:ae:a8:83:33:d9:a9:d0:2a:cd:8b:6d:a8:
         aa:7a:a4:b9:d1:70:36:90:ba:b6:6b:a1:37:cd:16:2c:e0:c0:
         fb:c8:94:b2:8b:f9:b7:50:ee:39:e0:e2:ce:97:d9:a4:90:8c:
         38:34:9d:7f:87:6e:cb:78:30:c8:91:0d:0d:e6:16:d1:e3:52:
         52:df:3b:83:68:9b:6a:d7:2a:41:9b:75:1d:54:be:84:53:e1:
         97:1b:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:05:11 2025 by rpki-client