This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          yYQpZaa5tLeNm9Ytbmg7dJnoVA7g0sGpSY+Bm+QMkD4=
Subject key identifier:   7D:08:54:28:19:38:F4:F6:50:20:5A:81:9C:1F:42:E5:6A:C3:75:02
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       3AA9B2C9DDDB0ED0F8B47251A611B5CF7221E2
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 25 Nov 2025 14:46:53 +0000
ROA not before:           Tue 25 Nov 2025 14:41:53 +0000
ROA not after:            Tue 24 Nov 2026 14:46:53 +0000
asID:                     267513
IP address blocks:        186.227.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a9:b2:c9:dd:db:0e:d0:f8:b4:72:51:a6:11:b5:cf:72:21:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Nov 25 14:41:53 2025 GMT
            Not After : Nov 24 14:46:53 2026 GMT
        Subject: CN=7D0854281938F4F650205A819C1F42E56AC37502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:68:ff:bf:c1:4a:bd:46:e4:38:8c:bb:52:
                    5b:2c:e6:02:bf:4f:22:d8:b0:6e:b7:90:82:c1:5f:
                    12:a3:89:bd:66:64:00:92:d5:14:19:8b:fc:27:62:
                    5a:f8:bf:92:47:cb:92:b9:d0:e7:4f:81:6d:34:28:
                    e1:82:23:a5:bd:7b:26:f1:7e:a2:79:f3:0f:17:6c:
                    25:f8:b2:b4:e8:71:b9:ba:f3:7a:0e:f5:59:96:7a:
                    d6:97:24:b8:e6:fe:a4:e3:52:d1:a4:c3:36:6d:2b:
                    7a:6e:aa:bd:97:32:04:99:8f:22:84:ec:41:7b:87:
                    61:10:b7:1f:3a:48:4c:48:6b:1c:36:87:2c:ec:d4:
                    72:b8:fd:08:0f:b3:1e:99:08:2f:6d:4b:af:2e:36:
                    ce:59:42:f9:4f:20:a7:8d:d0:01:04:9a:53:c8:2a:
                    36:cd:74:9b:29:45:26:a4:b0:48:da:09:f1:85:1b:
                    ed:08:d2:f3:c6:b3:ff:9a:91:f5:3e:02:35:c7:fe:
                    2b:2d:0d:a6:60:21:72:51:fd:ad:e4:57:9d:05:ce:
                    9a:a7:a9:0c:eb:de:ea:e7:fb:2e:26:d0:82:a1:d1:
                    aa:2f:36:67:e4:5a:5f:6e:cf:23:4b:44:cd:37:82:
                    a5:dd:15:43:fa:fe:53:a3:69:17:ca:56:07:40:53:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:08:54:28:19:38:F4:F6:50:20:5A:81:9C:1F:42:E5:6A:C3:75:02
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:68:2d:0d:1a:47:a8:a4:d3:0d:c4:88:56:93:1f:45:1b:
         d2:a3:cf:6c:43:4d:20:a2:fd:45:e8:e3:5f:3e:2f:8f:64:bb:
         5f:2a:b9:90:92:22:56:5b:27:25:7a:75:55:78:5d:2f:e8:3d:
         ae:31:cc:ac:3f:f2:5a:bb:29:bb:a6:4f:d0:ca:d0:dc:1c:32:
         da:79:32:92:66:b4:63:87:29:0d:ff:8d:13:d1:c1:c8:0e:59:
         23:ea:13:0d:3f:b8:21:8b:84:16:85:08:77:6d:28:85:e2:e1:
         a3:a2:54:f6:16:8f:27:52:ee:3a:94:3e:06:58:e7:32:f3:48:
         b0:06:bb:78:0a:bf:ee:66:f3:1c:cd:86:14:7b:f2:3c:f6:c3:
         8a:54:ee:63:74:f9:ba:1f:8d:4b:cc:b7:f2:5a:d2:88:ac:75:
         bb:15:8a:17:16:e0:74:bd:22:2b:9a:a5:66:38:be:b8:df:70:
         56:14:4b:5f:ab:e3:d9:c0:94:e9:19:d7:e7:d2:43:8a:8b:1b:
         0c:54:ea:0d:cb:ff:d5:7e:c5:8c:ce:f6:7f:28:98:37:60:01:
         55:c9:1b:fc:68:43:21:92:31:ba:cb:ca:2a:88:00:e3:ec:ba:
         66:9a:98:80:18:d2:cf:75:ea:4c:74:2c:6a:3f:e9:53:d7:39:
         19:6f:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:10:09 2025 by rpki-client