This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32342d3234203d3e20323731353438.roa
File:                     3138312e3137342e3231322e302f32342d3234203d3e20323731353438.roa (raw, json)
Hash identifier:          Iz1gy3lE958RMpRp96KlkXo1fP8rUwvO5njcvXUvQuQ=
Subject key identifier:   A0:E4:5F:AC:ED:FE:B3:6B:A8:3A:47:4E:A8:5E:AE:68:EB:00:90:69
Certificate issuer:       /CN=079670A0FD31480E710CC2F0D821F426E373FE20
Certificate serial:       6A8255069D2C0704A1B38DE7516AC1910347FF80
Authority key identifier: 07:96:70:A0:FD:31:48:0E:71:0C:C2:F0:D8:21:F4:26:E3:73:FE:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/079670A0FD31480E710CC2F0D821F426E373FE20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32342d3234203d3e20323731353438.roa
Signing time:             Mon 24 Nov 2025 20:22:02 +0000
ROA not before:           Mon 24 Nov 2025 20:17:02 +0000
ROA not after:            Mon 23 Nov 2026 20:22:02 +0000
asID:                     271548
IP address blocks:        181.174.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/079670A0FD31480E710CC2F0D821F426E373FE20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:82:55:06:9d:2c:07:04:a1:b3:8d:e7:51:6a:c1:91:03:47:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079670A0FD31480E710CC2F0D821F426E373FE20
        Validity
            Not Before: Nov 24 20:17:02 2025 GMT
            Not After : Nov 23 20:22:02 2026 GMT
        Subject: CN=A0E45FACEDFEB36BA83A474EA85EAE68EB009069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:4a:fa:3a:6b:82:2d:8f:76:99:9e:2c:63:
                    60:13:ef:d7:99:78:9b:e4:ba:cd:00:1e:a1:d4:c4:
                    cb:ca:5b:68:ed:5b:b0:a2:c6:77:04:96:ef:63:3c:
                    fd:0b:1c:57:82:ad:9e:3c:5f:f2:8c:30:3b:27:15:
                    ff:96:99:e2:1c:77:43:00:6b:95:81:c9:21:b1:48:
                    33:91:a9:df:91:46:36:82:51:09:1d:38:0e:93:3a:
                    80:3b:66:cd:b1:24:68:87:29:cd:91:98:39:e4:8e:
                    65:af:52:9b:77:20:8e:35:ac:b7:02:b8:f6:b0:1b:
                    8e:02:68:ed:93:87:1c:68:b2:b6:6b:0f:dd:d6:df:
                    f5:e9:7c:8e:59:db:3c:7c:4c:ea:aa:a3:f4:77:db:
                    e2:53:74:16:a3:1d:07:23:bc:ad:4c:c4:97:60:bc:
                    c7:4b:a4:36:94:20:b2:dd:98:c3:02:b9:bb:c0:0d:
                    42:57:f6:a1:cb:49:3e:a7:09:7f:e9:0d:1f:cb:48:
                    6a:52:3e:cc:94:df:6a:f3:33:bc:dc:79:6f:71:8c:
                    ce:a4:a6:5c:ac:c1:2b:b1:f2:91:8e:56:88:eb:a6:
                    10:d8:e1:e6:f9:0b:ab:3d:ab:6a:ae:af:b7:ac:d9:
                    a1:50:26:b0:4a:de:a2:3f:6d:10:36:57:fa:14:b1:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E4:5F:AC:ED:FE:B3:6B:A8:3A:47:4E:A8:5E:AE:68:EB:00:90:69
            X509v3 Authority Key Identifier:
                keyid:07:96:70:A0:FD:31:48:0E:71:0C:C2:F0:D8:21:F4:26:E3:73:FE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/079670A0FD31480E710CC2F0D821F426E373FE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32342d3234203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:0a:8a:c5:77:7f:44:2c:75:50:4d:cd:d3:dd:da:73:f6:53:
         a0:6b:f6:c7:78:dd:e1:2a:9c:ff:45:07:f5:18:6a:42:a0:3e:
         af:3c:ed:a3:28:7a:4b:86:8f:d7:0a:04:c0:9b:7c:ba:01:9e:
         fe:16:44:f9:77:f4:ef:f4:6a:2f:29:06:34:19:d5:bc:b3:b7:
         1b:f2:7c:eb:d8:6d:0d:69:61:47:c1:08:3a:06:0f:95:94:3b:
         91:7b:ce:3d:e3:66:8d:5c:af:fa:e3:fc:4d:c8:b5:33:ae:60:
         fb:a6:b7:9b:76:4e:33:9f:cd:1a:91:15:90:a8:6e:f6:6f:70:
         63:6a:b5:dd:de:cc:82:30:ea:db:91:ad:4a:e7:42:09:81:95:
         52:47:a8:2e:4e:f4:12:54:55:27:9d:e3:a6:0d:f9:30:7a:ff:
         36:b4:97:bf:60:fe:f6:6c:bf:ac:76:46:8d:73:af:42:28:66:
         b3:10:ca:a4:ad:c3:30:99:ab:0f:e2:b2:db:f5:07:70:c2:5c:
         31:f4:92:bb:e8:d7:2b:ae:a9:13:a2:d7:98:70:98:bb:b0:10:
         0d:5f:48:33:00:06:2c:2c:07:55:17:a2:40:51:a7:5c:2e:3f:
         04:b8:c6:b3:8a:0e:83:1b:28:12:da:ac:ea:14:0d:3f:78:a6:
         ac:ac:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:54 2025 by rpki-client