This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa
File:                     3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          b/DEJVV80uI78Lvaf/j+nxSV/BiSh7BT477g/g1l+6Y=
Subject key identifier:   4A:0B:15:F5:2C:BC:4F:5C:AA:F1:79:2E:A6:C1:E6:BB:84:0F:40:A1
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       49E7C227F00978276095128971431C8CA7264C50
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 25 Nov 2025 14:46:52 +0000
ROA not before:           Tue 25 Nov 2025 14:41:52 +0000
ROA not after:            Tue 24 Nov 2026 14:46:52 +0000
asID:                     267513
IP address blocks:        168.194.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e7:c2:27:f0:09:78:27:60:95:12:89:71:43:1c:8c:a7:26:4c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Nov 25 14:41:52 2025 GMT
            Not After : Nov 24 14:46:52 2026 GMT
        Subject: CN=4A0B15F52CBC4F5CAAF1792EA6C1E6BB840F40A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:93:fc:d9:65:a8:6d:87:82:0c:c8:93:21:
                    c4:e4:07:60:fb:a6:80:79:9b:aa:61:9b:51:18:96:
                    b1:e1:1d:b9:25:a4:5f:91:ed:90:37:92:8c:ac:bb:
                    9d:d7:44:65:de:f5:31:86:68:79:2b:f3:12:05:75:
                    14:a9:e9:9c:2c:4a:46:ac:af:10:a1:f6:95:76:b1:
                    f7:bb:b5:d4:85:6e:9f:64:37:65:b1:26:05:66:9e:
                    a2:75:50:22:86:d0:87:d4:72:3e:8b:48:d7:a4:05:
                    a1:da:30:ee:ca:11:65:d3:b8:b9:f4:18:49:46:b2:
                    40:58:c6:cb:cc:76:df:8a:ef:86:5a:ae:6a:3b:39:
                    94:71:5e:0c:4a:b3:15:fb:59:5a:81:25:b9:3b:69:
                    38:c5:a7:ef:b2:44:ae:31:f9:c5:9b:45:4a:59:d2:
                    df:c8:1c:c1:07:16:2d:d4:24:2f:68:eb:49:7f:8c:
                    82:ac:cf:ce:9f:ad:9f:fe:80:e5:a7:12:b6:b3:ad:
                    98:cd:dd:55:ab:bc:3e:33:7b:d9:78:0d:cf:ea:be:
                    4f:28:11:e6:1d:33:ed:27:9c:6a:ac:34:b7:f8:0a:
                    10:07:b6:57:2c:41:79:90:86:99:b2:27:6a:cb:71:
                    eb:36:60:1c:2a:23:00:2d:ca:74:51:ff:e2:5f:5d:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0B:15:F5:2C:BC:4F:5C:AA:F1:79:2E:A6:C1:E6:BB:84:0F:40:A1
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:47:f4:f6:b1:53:15:d9:8e:71:72:48:a4:65:31:4f:7f:c3:
         08:81:95:4e:cb:49:92:bd:61:73:b5:40:52:f6:e7:0a:9a:5f:
         06:ac:f4:d2:63:51:3c:be:ac:ca:d1:42:f6:b2:85:b8:17:bd:
         a0:22:e0:7e:d4:73:35:56:ee:e9:97:77:6b:bc:a7:5c:4c:72:
         74:b4:3b:66:01:7a:7d:3d:4c:83:3b:ff:08:af:22:96:78:6d:
         cb:8a:61:f4:b4:30:4e:69:e9:da:86:59:40:0a:cb:f6:ea:8f:
         5f:d0:c1:bf:6a:b5:35:05:16:92:7c:cb:7a:85:a3:16:88:a4:
         36:d1:27:be:7f:d1:ed:0d:f0:4e:e6:ac:0e:02:15:83:a3:01:
         16:26:61:c5:17:85:6c:f4:ba:b8:ad:72:7e:f0:cb:50:d9:d5:
         36:f2:56:37:f2:77:42:ef:3e:c9:8a:04:ab:1b:5c:88:bf:ac:
         52:ad:b7:5c:b5:da:48:97:ef:45:a8:45:e3:38:db:89:9f:3a:
         89:f2:a4:37:10:53:99:be:7c:8c:70:bf:05:14:92:ca:28:cc:
         e6:36:a2:f2:05:80:a3:f8:09:95:5f:e5:e9:fb:9c:e3:a6:a3:
         e6:a6:2a:41:a9:b3:14:a6:52:a9:07:85:82:e0:4f:62:81:30:
         18:3e:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:06:40 2025 by rpki-client