This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          ynAUMoLm3u9+Q/cE+RNHx2yzvWBRjNuniT9B6gM3kS0=
Subject key identifier:   97:1A:CD:F0:60:22:FA:D6:69:8D:6F:AE:AA:1C:AD:5A:28:C3:09:00
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       4038762A61414E3BF3E713BEEC60CAAB7AA01F91
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 25 Nov 2025 14:46:54 +0000
ROA not before:           Tue 25 Nov 2025 14:41:54 +0000
ROA not after:            Tue 24 Nov 2026 14:46:54 +0000
asID:                     267513
IP address blocks:        186.227.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:76:2a:61:41:4e:3b:f3:e7:13:be:ec:60:ca:ab:7a:a0:1f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Nov 25 14:41:54 2025 GMT
            Not After : Nov 24 14:46:54 2026 GMT
        Subject: CN=971ACDF06022FAD6698D6FAEAA1CAD5A28C30900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:fd:62:d6:77:cb:74:e0:46:59:9d:05:5a:
                    77:fc:a9:39:44:18:db:8b:86:c7:6e:20:40:d9:ff:
                    3c:6f:f6:97:a7:88:e9:be:4f:26:6f:84:ef:c1:28:
                    64:16:58:9b:9a:8a:48:d7:86:03:dc:ae:2c:70:de:
                    c4:e8:f9:e5:6e:c2:46:43:88:04:ef:a7:f4:a2:e7:
                    8d:5a:db:27:3f:91:db:02:00:36:c8:87:6b:3a:21:
                    4c:f9:93:3e:f4:99:11:b5:18:1b:e5:10:e4:a9:0d:
                    b4:e5:7e:a2:be:d4:8c:be:cc:b1:f3:75:c8:6b:dd:
                    e8:7d:6c:74:c7:86:bc:d8:af:4d:07:dd:87:22:60:
                    e4:54:34:b1:b9:01:0b:ec:56:b1:7f:44:81:96:9f:
                    3e:14:73:c7:61:59:20:bf:b2:57:c6:ee:ed:ae:85:
                    fe:d8:83:20:29:fc:67:e7:2c:68:14:c6:b6:cb:51:
                    c3:69:67:73:8e:e7:50:00:b4:dc:cc:13:6b:5f:ca:
                    b8:36:1e:ae:72:49:b5:bd:08:ed:cf:42:5b:a8:4a:
                    f5:29:de:66:9f:63:c3:64:37:44:e9:9f:4c:0a:f4:
                    7a:1c:41:9c:55:d2:9a:c2:20:8b:9f:5d:26:ac:35:
                    18:b2:bc:fc:83:e3:2d:7f:d4:88:12:f7:fd:d8:50:
                    5a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:CD:F0:60:22:FA:D6:69:8D:6F:AE:AA:1C:AD:5A:28:C3:09:00
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:9e:e1:38:1d:a4:5f:e6:c5:fc:97:74:c7:8d:86:c6:e4:
         3b:fc:b5:a1:3c:0f:e5:e3:9e:f5:30:9b:d7:db:cc:c8:d7:22:
         72:15:df:af:36:80:8e:22:1e:e1:a9:eb:5a:6b:a8:06:30:64:
         ce:28:ef:fc:b8:13:7c:6d:5e:31:e3:f2:94:d2:42:c7:3b:38:
         c1:23:66:db:51:eb:60:cb:d9:d8:07:d0:66:f5:c9:3b:27:a2:
         0f:5d:dc:77:f9:00:4d:3e:de:83:2c:ad:0b:2d:f3:0e:0b:a5:
         d0:01:3b:b0:fb:db:9e:63:49:10:0b:56:a5:f9:a6:58:3d:14:
         6d:b3:99:c3:2c:e8:e7:e5:3a:5b:4d:f7:6c:05:79:ac:42:28:
         3e:42:b4:49:bd:82:49:10:93:34:25:17:cd:ce:2d:1a:fe:04:
         ab:60:bd:bf:1f:ce:2b:d4:ac:ce:19:2b:88:24:c0:bf:60:8c:
         19:22:92:56:fc:ae:5e:da:ba:95:fa:bd:51:f1:d8:f9:15:9f:
         fa:3d:c8:d7:ca:b4:1b:b3:91:81:78:54:4c:a5:19:d9:c0:48:
         a0:ab:7d:60:3c:22:ac:8a:5e:fd:71:17:17:43:65:c7:a9:9d:
         fa:65:72:e1:26:2b:e8:b4:85:b6:8e:41:96:de:f5:01:99:22:
         ea:1e:ef:3c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQDh2KmFBTjvz5xO+7GDKq3qgH5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNTExMjUxNDQxNTRaFw0yNjExMjQxNDQ2NTRaMDMxMTAvBgNV
BAMTKDk3MUFDREYwNjAyMkZBRDY2OThENkZBRUFBMUNBRDVBMjhDMzA5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5/1i1nfLdOBGWZ0FWnf8qTlE
GNuLhsduIEDZ/zxv9peniOm+TyZvhO/BKGQWWJuaikjXhgPcrixw3sTo+eVuwkZD
iATvp/Si541a2yc/kdsCADbIh2s6IUz5kz70mRG1GBvlEOSpDbTlfqK+1Iy+zLHz
dchr3eh9bHTHhrzYr00H3YciYORUNLG5AQvsVrF/RIGWnz4Uc8dhWSC/slfG7u2u
hf7YgyAp/GfnLGgUxrbLUcNpZ3OO51AAtNzME2tfyrg2Hq5ySbW9CO3PQluoSvUp
3mafY8NkN0Tpn0wK9HocQZxV0prCIIufXSasNRiyvPyD4y1/1IgS9/3YUFpbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlxrN8GAi+tZpjW+uqhytWijDCQAwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzODM2MmUzMjMyMzcyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC640gwDQYJKoZIhvcNAQELBQADggEBAIbtnuE4
HaRf5sX8l3THjYbG5Dv8taE8D+XjnvUwm9fbzMjXInIV3682gI4iHuGp61prqAYw
ZM4o7/y4E3xtXjHj8pTSQsc7OMEjZttR62DL2dgH0Gb1yTsnog9d3Hf5AE0+3oMs
rQst8w4LpdABO7D7255jSRALVqX5plg9FG2zmcMs6OflOltN92wFeaxCKD5CtEm9
gkkQkzQlF83OLRr+BKtgvb8fzivUrM4ZK4gkwL9gjBkiklb8rl7aupX6vVHx2PkV
n/o9yNfKtBuzkYF4VEylGdnASKCrfWA8IqyKXv1xFxdDZcepnfplcuEmK+i0hbaO
QZbe9QGZIuoe7zw=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:24:57 2025 by rpki-client