This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e35302e302f32342d3234203d3e203631383832.roa
File:                     3133312e302e35302e302f32342d3234203d3e203631383832.roa (raw, json)
Hash identifier:          FzW1ILLjnmNGYoTB+i/MrxTh2akk83TOEse7SVYw0kU=
Subject key identifier:   0E:22:5E:80:CB:D6:89:61:91:03:65:6E:14:76:70:07:AE:7E:A6:B5
Certificate issuer:       /CN=4F9350644EE4E60E577D84F486918BEA2A20BA6B
Certificate serial:       3C31C856C3BB3F1699977294078190E5063121B0
Authority key identifier: 4F:93:50:64:4E:E4:E6:0E:57:7D:84:F4:86:91:8B:EA:2A:20:BA:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e35302e302f32342d3234203d3e203631383832.roa
Signing time:             Fri 23 Jan 2026 19:25:17 +0000
ROA not before:           Fri 23 Jan 2026 19:20:17 +0000
ROA not after:            Fri 22 Jan 2027 19:25:17 +0000
asID:                     61882
IP address blocks:        131.0.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.crl
                          rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:31:c8:56:c3:bb:3f:16:99:97:72:94:07:81:90:e5:06:31:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F9350644EE4E60E577D84F486918BEA2A20BA6B
        Validity
            Not Before: Jan 23 19:20:17 2026 GMT
            Not After : Jan 22 19:25:17 2027 GMT
        Subject: CN=0E225E80CBD689619103656E14767007AE7EA6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:68:b9:89:bd:0d:a3:68:4f:04:4b:8e:22:
                    5d:2c:b1:bb:dc:41:39:db:63:71:cd:d2:2a:b2:d0:
                    10:d2:fa:8c:a6:fe:23:68:6b:8f:f9:45:7b:a0:e4:
                    74:72:05:ad:60:21:70:c4:a4:2e:fa:89:f5:d1:4d:
                    b2:75:5a:a0:20:b2:6d:f9:f4:67:20:b4:d0:55:9a:
                    c2:a1:8d:66:92:f9:6d:37:14:81:dc:f4:da:3e:c7:
                    1e:14:fa:4b:ff:44:5a:f6:25:2e:f1:4f:3f:2c:82:
                    27:3b:60:02:79:82:58:2d:86:de:71:db:6f:72:e7:
                    6c:a4:fa:90:6a:43:d8:92:8c:32:08:92:cb:14:3d:
                    f9:48:71:94:8e:82:2d:54:14:2b:57:a4:6c:23:84:
                    48:38:9f:6b:8f:5c:56:50:8b:c9:3a:11:d1:4c:47:
                    92:4b:e9:0a:13:4e:3a:86:0d:f7:a1:f6:14:ff:d0:
                    37:ca:d8:b8:12:99:c2:c6:7b:82:dc:58:7b:e6:7e:
                    45:86:f5:f0:65:51:a0:60:a4:a7:13:0a:36:ac:8a:
                    de:0a:65:c3:95:f0:40:0a:6f:25:dc:ff:a8:51:53:
                    31:9e:35:ff:bc:b8:62:66:a6:15:4f:96:5c:15:c0:
                    67:24:2f:35:49:ab:cf:0d:0a:77:55:7b:f3:70:9e:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:22:5E:80:CB:D6:89:61:91:03:65:6E:14:76:70:07:AE:7E:A6:B5
            X509v3 Authority Key Identifier:
                keyid:4F:93:50:64:4E:E4:E6:0E:57:7D:84:F4:86:91:8B:EA:2A:20:BA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e35302e302f32342d3234203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:41:6d:a4:5d:04:41:fa:49:e0:67:f8:a4:2a:53:4d:84:
         9b:0a:c1:29:e9:c2:06:a0:7b:be:2d:29:a6:3c:9c:5b:4b:b1:
         5b:e5:8e:85:ea:9d:a2:c4:70:0b:d9:76:7d:f1:f6:55:77:40:
         90:b8:aa:bc:68:66:90:da:65:4e:64:42:16:9b:12:1e:9a:43:
         f5:e9:fc:f8:13:ca:62:6d:eb:6d:f5:80:b9:33:96:25:99:5a:
         9b:a9:48:de:01:f8:e5:1e:91:e7:af:3a:38:68:01:f6:1b:77:
         6f:da:61:f8:34:db:ae:1c:98:14:16:bf:34:72:16:98:d4:aa:
         8a:e9:d7:65:74:f9:a6:e9:c4:5f:db:53:22:de:0b:46:1a:54:
         f7:57:64:c5:82:84:74:b0:71:b1:a4:0d:8a:fe:14:77:5b:d7:
         80:47:51:c0:ad:22:92:ef:ac:10:7d:8c:95:18:54:8f:6b:7c:
         64:e5:bf:af:6a:6d:f8:9d:da:4d:60:93:a3:2b:cc:c5:c0:da:
         d1:22:de:7a:5e:7a:16:ad:09:74:f5:46:79:2f:9c:77:d1:10:
         de:af:c0:3a:31:ce:da:6e:1c:08:cf:70:ae:58:f4:df:d4:4a:
         22:09:a6:e2:c1:53:96:9f:97:e3:2e:9a:6b:f9:f9:20:72:ca:
         9b:bb:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:19:41 2026 by rpki-client