This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37342e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3232372e37342e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          9//GUH/OhhYi8kulKlLgp8j62EtmJREBwQG9P/w9V4M=
Subject key identifier:   D8:AE:00:67:FF:51:7E:E7:95:44:30:F3:5D:F8:A1:C8:DD:C1:F9:84
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       2D60A81BD513106D16CD501681625032E2091F59
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37342e302f32332d3233203d3e20323637353133.roa
Signing time:             Tue 25 Nov 2025 14:46:54 +0000
ROA not before:           Tue 25 Nov 2025 14:41:54 +0000
ROA not after:            Tue 24 Nov 2026 14:46:54 +0000
asID:                     267513
IP address blocks:        186.227.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:60:a8:1b:d5:13:10:6d:16:cd:50:16:81:62:50:32:e2:09:1f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Nov 25 14:41:54 2025 GMT
            Not After : Nov 24 14:46:54 2026 GMT
        Subject: CN=D8AE0067FF517EE7954430F35DF8A1C8DDC1F984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:f9:40:10:65:fa:b7:a5:bb:cf:27:d0:fa:
                    70:d1:50:21:4f:0d:8b:42:66:7a:c3:ce:d9:f5:a1:
                    d9:e7:bb:c2:22:f3:bd:07:ee:88:8d:2c:a5:63:e7:
                    80:fa:7e:b1:01:90:52:23:01:ba:b0:c7:54:e0:83:
                    5c:f5:3c:39:e2:4f:7d:e0:c1:ed:f5:4e:b8:5a:b2:
                    87:df:bc:d4:e3:26:85:2a:2c:a1:9c:df:44:25:23:
                    79:e9:4a:0e:00:6a:e8:65:fa:11:75:c2:7b:62:cf:
                    2a:f7:a5:14:7e:6f:92:89:fe:6f:a0:71:38:e7:b3:
                    5a:bc:45:d6:1b:95:84:08:ce:1a:8d:4d:2f:d8:8f:
                    93:12:d1:85:1c:2e:a7:83:ac:56:05:a3:91:f4:32:
                    1e:67:1a:60:04:28:62:da:89:e2:35:c9:9a:ce:8c:
                    de:66:a9:2a:e9:72:da:5b:ca:db:0f:c0:b9:19:f3:
                    ef:66:d6:eb:53:df:de:cc:ae:84:97:79:d7:c2:d9:
                    9c:46:89:31:99:10:90:5c:89:66:51:53:ef:98:12:
                    7e:8e:d9:ef:98:6a:d2:f1:63:a1:4c:4e:2c:a2:1a:
                    45:e2:51:eb:ee:63:d3:5c:ca:97:7b:27:aa:ed:36:
                    bc:99:08:79:ed:fa:87:6f:eb:92:d1:bd:24:91:61:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AE:00:67:FF:51:7E:E7:95:44:30:F3:5D:F8:A1:C8:DD:C1:F9:84
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37342e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:a3:35:99:58:16:37:0c:77:81:e0:cf:72:c5:5e:71:7c:ff:
         1c:2b:22:cd:3c:13:96:35:5f:6c:bd:d4:82:48:92:09:8d:b6:
         ef:b6:27:0b:80:36:69:09:f1:f3:fe:bf:1c:05:71:a1:1b:c1:
         fa:cc:f4:eb:f0:7c:1a:ce:81:9f:ef:36:eb:36:6a:b5:f3:36:
         32:7e:7f:d3:d7:27:27:57:c0:84:df:50:1d:52:c2:88:70:e9:
         31:ae:8c:d2:4e:ad:9b:ed:2e:98:6a:1a:3b:b4:0f:d2:9c:23:
         70:d9:99:98:48:3a:b0:dd:7d:a3:8b:e3:87:aa:4f:a1:8a:bb:
         7f:ff:5b:86:90:e6:b4:11:1e:4b:25:6a:02:11:4f:3b:22:61:
         35:1b:1c:0f:70:b4:c3:0e:39:14:b9:47:a0:6c:a1:ef:87:6a:
         35:b8:21:f7:d7:6c:b7:2a:37:5c:34:0d:3c:c7:3c:2a:b0:95:
         4e:de:d6:3f:cd:51:ed:c1:8a:0c:ea:66:c0:8b:07:11:67:01:
         d8:24:2c:11:98:b9:66:85:97:d7:55:bc:8f:2d:15:d9:4b:4e:
         3b:1b:e4:2f:86:38:39:9c:b2:76:94:c8:af:8e:51:fe:95:80:
         88:a0:59:e2:1c:d6:ca:44:ea:b9:9e:89:1e:dd:94:cb:8d:dc:
         99:e8:43:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULWCoG9UTEG0WzVAWgWJQMuIJH1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNTExMjUxNDQxNTRaFw0yNjExMjQxNDQ2NTRaMDMxMTAvBgNV
BAMTKEQ4QUUwMDY3RkY1MTdFRTc5NTQ0MzBGMzVERjhBMUM4RERDMUY5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYm/lAEGX6t6W7zyfQ+nDRUCFP
DYtCZnrDztn1odnnu8Ii870H7oiNLKVj54D6frEBkFIjAbqwx1Tgg1z1PDniT33g
we31TrhasoffvNTjJoUqLKGc30QlI3npSg4Aauhl+hF1wntizyr3pRR+b5KJ/m+g
cTjns1q8RdYblYQIzhqNTS/Yj5MS0YUcLqeDrFYFo5H0Mh5nGmAEKGLaieI1yZrO
jN5mqSrpctpbytsPwLkZ8+9m1utT397MroSXedfC2ZxGiTGZEJBciWZRU++YEn6O
2e+YatLxY6FMTiyiGkXiUevuY9Ncypd7J6rtNryZCHnt+odv65LRvSSRYcm7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2K4AZ/9RfueVRDDzXfihyN3B+YQwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzODM2MmUzMjMyMzcyZTM3MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG640owDQYJKoZIhvcNAQELBQADggEBAAujNZlY
FjcMd4Hgz3LFXnF8/xwrIs08E5Y1X2y91IJIkgmNtu+2JwuANmkJ8fP+vxwFcaEb
wfrM9OvwfBrOgZ/vNus2arXzNjJ+f9PXJydXwITfUB1Swohw6TGujNJOrZvtLphq
Gju0D9KcI3DZmZhIOrDdfaOL44eqT6GKu3//W4aQ5rQRHkslagIRTzsiYTUbHA9w
tMMOORS5R6Bsoe+HajW4IffXbLcqN1w0DTzHPCqwlU7e1j/NUe3BigzqZsCLBxFn
AdgkLBGYuWaFl9dVvI8tFdlLTjsb5C+GODmcsnaUyK+OUf6VgIigWeIc1spE6rme
iR7dlMuN3JnoQxY=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:07:34 2025 by rpki-client