This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          NXWxjEo9DJTS8DMq8N/feZe3Gs9v3oq39fxSqFk/E30=
Subject key identifier:   5E:A4:C3:99:3F:97:93:F1:C4:DC:27:44:0C:51:DE:17:21:10:D5:2D
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       04CB25A2EF3152232F1C3C0912DD87B6875A5129
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 25 Nov 2025 14:46:52 +0000
ROA not before:           Tue 25 Nov 2025 14:41:52 +0000
ROA not after:            Tue 24 Nov 2026 14:46:52 +0000
asID:                     267513
IP address blocks:        186.251.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cb:25:a2:ef:31:52:23:2f:1c:3c:09:12:dd:87:b6:87:5a:51:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Nov 25 14:41:52 2025 GMT
            Not After : Nov 24 14:46:52 2026 GMT
        Subject: CN=5EA4C3993F9793F1C4DC27440C51DE172110D52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:19:c6:e9:4c:08:f8:66:18:56:25:2c:a9:
                    62:47:ea:53:0c:3c:fb:7d:57:68:17:12:57:c3:6e:
                    78:37:7a:d9:9b:3c:4b:cf:24:80:e9:29:ca:15:4e:
                    d7:5d:fd:ec:d9:b7:4d:af:ae:44:d9:87:1f:99:c0:
                    59:1e:ea:e0:44:06:24:7a:db:4e:cc:ad:e8:32:69:
                    94:98:17:9b:2d:e0:56:fd:3f:dd:e8:3b:70:d1:2b:
                    4c:a2:99:fe:d7:f6:55:32:b0:7c:11:c1:75:5a:96:
                    b6:ac:f4:87:db:35:04:cc:3e:77:8c:48:81:f6:3f:
                    5b:2e:a2:44:31:bf:75:92:76:e8:a8:b9:c9:df:b2:
                    0f:a6:12:f0:12:15:99:b9:ee:2a:7c:d1:61:41:38:
                    95:ed:5d:8d:4d:6b:df:c4:4c:1c:14:82:61:64:20:
                    07:ce:8c:79:0e:37:9c:fe:5a:45:2b:0d:f5:0a:a1:
                    d1:fb:32:c4:ee:db:04:2c:b6:aa:04:12:1c:3e:97:
                    d4:7b:65:17:f0:5b:ce:77:9a:4c:1c:be:75:29:d9:
                    51:58:77:bf:c4:9e:e3:34:8c:54:4a:34:63:a7:87:
                    7c:50:d3:c2:1f:6c:01:af:3c:0b:61:9c:82:fd:cf:
                    a7:50:42:b7:99:52:c8:b8:28:4d:ed:dd:a6:db:ef:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A4:C3:99:3F:97:93:F1:C4:DC:27:44:0C:51:DE:17:21:10:D5:2D
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:c3:66:bc:82:fe:46:90:b5:db:c4:1d:cf:56:99:e7:7e:
         51:81:75:4d:72:a8:81:1a:fb:c7:2c:f1:11:cb:2c:2b:c5:2c:
         f6:8b:a0:44:01:09:aa:4b:41:16:b0:00:05:e3:43:b2:13:94:
         9f:30:1a:4a:47:62:c9:d6:84:2e:f9:dd:62:8a:de:40:aa:97:
         25:6f:bd:a5:70:88:77:c5:62:55:a2:34:24:ad:6c:78:88:27:
         df:94:f3:97:85:b9:58:b9:2d:02:a1:ba:3b:e6:c0:0f:cf:74:
         38:bd:4d:52:8a:bf:fc:4c:c3:ab:0c:b3:5e:11:e3:45:6b:0c:
         f1:d9:6b:45:97:24:ba:00:91:6a:ad:49:9f:da:ca:20:7c:d2:
         dc:54:a0:49:ce:79:4f:c5:d1:35:03:a7:82:58:5a:99:2e:33:
         ca:76:e4:b0:a5:53:94:d3:f5:8a:b7:75:be:fb:4c:c1:ad:5c:
         ac:1b:c6:f2:aa:6d:c3:b9:98:90:ea:b9:3b:fa:d2:50:72:83:
         75:69:78:e0:fb:e5:8f:7b:52:80:93:cd:2f:f5:05:e1:cd:21:
         bc:3c:c1:3f:7b:6d:75:f6:ba:69:6f:5f:3d:ed:d9:02:83:85:
         8e:13:8b:33:e3:29:2b:d5:25:3b:91:d2:19:0b:e5:8f:bb:f8:
         5f:65:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:25:49 2025 by rpki-client