This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32342d3234203d3e203631383832.roa
File:                     3133312e302e34382e302f32342d3234203d3e203631383832.roa (raw, json)
Hash identifier:          KwAri8C8BA0jtWr/mgxdm0KCAPV+wXgRiwxry+w4sAI=
Subject key identifier:   30:11:B5:D4:6F:17:60:47:4F:7A:B3:40:77:28:BB:B5:32:1E:39:D4
Certificate issuer:       /CN=4F9350644EE4E60E577D84F486918BEA2A20BA6B
Certificate serial:       75B0FA2DE460195CDF4C273A1E0CCEBBF4C8F82E
Authority key identifier: 4F:93:50:64:4E:E4:E6:0E:57:7D:84:F4:86:91:8B:EA:2A:20:BA:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32342d3234203d3e203631383832.roa
Signing time:             Fri 23 Jan 2026 19:25:18 +0000
ROA not before:           Fri 23 Jan 2026 19:20:18 +0000
ROA not after:            Fri 22 Jan 2027 19:25:18 +0000
asID:                     61882
IP address blocks:        131.0.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.crl
                          rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b0:fa:2d:e4:60:19:5c:df:4c:27:3a:1e:0c:ce:bb:f4:c8:f8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F9350644EE4E60E577D84F486918BEA2A20BA6B
        Validity
            Not Before: Jan 23 19:20:18 2026 GMT
            Not After : Jan 22 19:25:18 2027 GMT
        Subject: CN=3011B5D46F1760474F7AB3407728BBB5321E39D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:4e:ff:55:37:9b:e1:d4:30:4a:53:0f:0f:
                    49:46:32:51:c4:f3:86:bb:a6:99:2f:5e:ef:eb:9c:
                    71:d4:76:3a:ea:82:a1:b4:68:0b:13:a0:2b:a5:fe:
                    c8:16:54:1b:d7:fc:0e:3b:dc:7f:a8:64:e3:fd:e4:
                    64:ff:51:bf:c2:94:ab:1b:b3:05:b3:7f:f8:84:70:
                    dd:40:e9:44:56:2f:2b:88:28:5e:56:e8:4c:b7:eb:
                    c6:62:62:50:bc:7b:8c:ef:57:35:41:80:f0:1d:c1:
                    c3:0a:45:98:ae:0f:af:82:cc:08:8f:3f:18:ea:d4:
                    95:09:59:43:2e:26:93:fb:39:71:e8:26:25:7e:fd:
                    66:08:a0:43:43:5c:1b:f3:4c:90:57:2e:3f:52:e1:
                    93:07:b0:72:72:f4:56:5a:ea:61:99:fb:f5:bd:e6:
                    41:35:3a:02:fd:ad:35:44:b8:79:41:10:f5:52:73:
                    a7:cb:1e:9b:a0:50:58:ce:ab:39:32:6d:a2:03:de:
                    6e:ef:79:6d:86:95:ec:33:86:de:59:66:66:10:c9:
                    15:3b:6d:dc:7c:17:58:eb:92:81:01:63:92:d6:65:
                    d3:5e:30:8d:c6:e1:3b:c3:43:f2:94:6c:2f:13:71:
                    6c:74:5c:3c:46:d7:39:72:ad:4e:0a:af:2a:a0:9e:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:11:B5:D4:6F:17:60:47:4F:7A:B3:40:77:28:BB:B5:32:1E:39:D4
            X509v3 Authority Key Identifier:
                keyid:4F:93:50:64:4E:E4:E6:0E:57:7D:84:F4:86:91:8B:EA:2A:20:BA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32342d3234203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:08:d0:10:24:58:f0:b8:57:b5:8e:a0:3a:b6:a8:ae:a6:a7:
         e4:19:9b:f7:13:cc:0d:89:41:34:39:be:df:71:0a:48:0f:11:
         37:b4:17:e5:77:1f:d1:56:48:31:a2:2a:ee:59:05:13:f5:47:
         e1:da:30:b9:92:2c:17:01:2f:5a:3d:9f:58:c5:0a:60:70:ce:
         72:1e:c6:a9:da:ed:a9:7f:36:d8:a9:c8:af:8b:fa:5c:b4:2b:
         b6:39:80:f4:65:29:05:18:fd:3e:e8:02:21:59:3c:4a:f7:dc:
         15:eb:0e:2d:31:89:a6:b5:95:38:37:ee:32:71:aa:3c:9f:ec:
         8c:f3:be:25:1d:3e:b0:f2:5d:c6:06:9a:bc:1c:63:28:f1:f0:
         f4:83:72:97:8e:79:cd:53:47:96:60:79:da:ee:3d:b4:1d:5e:
         46:93:b1:56:82:21:b0:15:3c:8b:78:07:d4:2a:63:c6:1b:11:
         25:7d:fb:39:86:cd:04:6e:3f:04:79:7f:f7:b1:f1:56:c1:73:
         00:72:5a:7b:5c:43:b7:78:f5:53:74:c5:4b:98:ac:e6:30:30:
         cb:ff:1c:82:26:4c:e9:5b:69:2c:51:fb:9c:67:84:e5:00:68:
         61:43:6f:6a:22:3b:f1:ec:ae:21:f4:ea:25:b5:97:80:eb:4f:
         fa:b1:de:56
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUdbD6LeRgGVzfTCc6HgzOu/TI+C4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY5MzUwNjQ0RUU0RTYwRTU3N0Q4NEY0ODY5MThCRUEy
QTIwQkE2QjAeFw0yNjAxMjMxOTIwMThaFw0yNzAxMjIxOTI1MThaMDMxMTAvBgNV
BAMTKDMwMTFCNUQ0NkYxNzYwNDc0RjdBQjM0MDc3MjhCQkI1MzIxRTM5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjE7/VTeb4dQwSlMPD0lGMlHE
84a7ppkvXu/rnHHUdjrqgqG0aAsToCul/sgWVBvX/A473H+oZOP95GT/Ub/ClKsb
swWzf/iEcN1A6URWLyuIKF5W6Ey368ZiYlC8e4zvVzVBgPAdwcMKRZiuD6+CzAiP
Pxjq1JUJWUMuJpP7OXHoJiV+/WYIoENDXBvzTJBXLj9S4ZMHsHJy9FZa6mGZ+/W9
5kE1OgL9rTVEuHlBEPVSc6fLHpugUFjOqzkybaID3m7veW2Glewzht5ZZmYQyRU7
bdx8F1jrkoEBY5LWZdNeMI3G4TvDQ/KUbC8TcWx0XDxG1zlyrU4KryqgngedAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUMBG11G8XYEdPerNAdyi7tTIeOdQwHwYDVR0j
BBgwFoAUT5NQZE7k5g5XfYT0hpGL6iogumswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0
dUQvMC80RjkzNTA2NDRFRTRFNjBFNTc3RDg0RjQ4NjkxOEJFQTJBMjBCQTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGOTM1MDY0NEVFNEU2MEU1
NzdEODRGNDg2OTE4QkVBMkEyMEJBNkIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6VEhwRVlhNHlSaTFmUk5xTHpDVExvRkNUbzQ0ZVF3WFNyWU1QS0F2NHVELzAv
MzEzMzMxMmUzMDJlMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzODM4
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACDADAwDQYJKoZIhvcNAQELBQADggEBAJgI0BAkWPC4V7WO
oDq2qK6mp+QZm/cTzA2JQTQ5vt9xCkgPETe0F+V3H9FWSDGiKu5ZBRP1R+HaMLmS
LBcBL1o9n1jFCmBwznIexqna7al/NtipyK+L+ly0K7Y5gPRlKQUY/T7oAiFZPEr3
3BXrDi0xiaa1lTg37jJxqjyf7IzzviUdPrDyXcYGmrwcYyjx8PSDcpeOec1TR5Zg
edruPbQdXkaTsVaCIbAVPIt4B9QqY8YbESV9+zmGzQRuPwR5f/ex8VbBcwByWntc
Q7d49VN0xUuYrOYwMMv/HIImTOlbaSxR+5xnhOUAaGFDb2oiO/HsriH06iW1l4Dr
T/qx3lY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:19:35 2026 by rpki-client