This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137392e302f32342d3234203d3e20323635373337.roa
File:                     3136382e3139352e3137392e302f32342d3234203d3e20323635373337.roa (raw, json)
Hash identifier:          A2ax1DXHwskCdkVWmst+seI9gDOcqpP071f6BUA2/vo=
Subject key identifier:   EF:86:FA:0C:27:32:38:2D:66:78:5F:53:D6:DE:99:6E:25:DB:95:4E
Certificate issuer:       /CN=7F20B42329826F61A48F5EB8314D3EFEE070F8A3
Certificate serial:       058AC1CB6FFD247F66CABF1A1D4FA3D5A0CE82E1
Authority key identifier: 7F:20:B4:23:29:82:6F:61:A4:8F:5E:B8:31:4D:3E:FE:E0:70:F8:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137392e302f32342d3234203d3e20323635373337.roa
Signing time:             Mon 17 Nov 2025 13:40:08 +0000
ROA not before:           Mon 17 Nov 2025 13:35:08 +0000
ROA not after:            Mon 16 Nov 2026 13:40:08 +0000
asID:                     265737
IP address blocks:        168.195.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.crl
                          rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8a:c1:cb:6f:fd:24:7f:66:ca:bf:1a:1d:4f:a3:d5:a0:ce:82:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F20B42329826F61A48F5EB8314D3EFEE070F8A3
        Validity
            Not Before: Nov 17 13:35:08 2025 GMT
            Not After : Nov 16 13:40:08 2026 GMT
        Subject: CN=EF86FA0C2732382D66785F53D6DE996E25DB954E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:cb:de:a3:8d:e2:ad:56:63:9b:e4:12:f5:
                    4a:d2:0c:26:6c:64:ea:aa:dc:d3:6b:04:28:39:c6:
                    f5:19:49:49:5b:ed:62:ea:7d:80:5d:e5:d5:a8:00:
                    b9:8d:10:51:33:7c:70:22:23:82:af:ad:74:ad:94:
                    44:9b:43:2b:9d:8c:99:0b:ea:78:ba:4b:c8:27:c7:
                    26:ad:34:7b:e8:35:a6:e2:8d:97:65:ee:af:eb:1e:
                    ef:3d:e8:fb:f9:50:a0:c6:fa:30:b5:1c:48:32:55:
                    1f:6e:33:65:18:9a:a3:b4:80:f5:3b:cb:f3:d8:a9:
                    63:76:43:aa:d7:dd:c8:4f:ec:47:45:90:a5:12:15:
                    fb:8a:95:ee:0b:81:70:72:96:94:ec:e9:bd:80:63:
                    eb:11:6d:e7:6b:b7:79:90:1c:2f:df:36:a5:e1:f6:
                    0f:d2:ec:43:92:73:b7:d7:b8:72:aa:9a:e7:57:61:
                    79:f0:aa:a9:80:52:c4:71:67:87:80:3c:6d:13:4b:
                    b9:54:b1:9f:fd:34:7a:18:04:b4:04:be:3d:6f:e5:
                    15:ac:f0:33:07:55:4c:55:38:00:40:e9:5d:58:97:
                    71:5b:aa:7d:28:12:1e:b3:34:e4:94:ee:c4:a2:50:
                    d4:d7:8f:22:d9:ac:14:79:bb:0c:ad:b8:c7:8f:1f:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:86:FA:0C:27:32:38:2D:66:78:5F:53:D6:DE:99:6E:25:DB:95:4E
            X509v3 Authority Key Identifier:
                keyid:7F:20:B4:23:29:82:6F:61:A4:8F:5E:B8:31:4D:3E:FE:E0:70:F8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137392e302f32342d3234203d3e20323635373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:17:2a:a5:f6:d2:ea:01:e8:38:b9:8b:ae:c2:93:e0:8d:
         92:89:91:89:14:7c:1e:3b:ec:d4:6d:f3:d8:f7:e8:7a:14:21:
         74:30:d5:34:15:c0:56:9e:10:48:eb:fd:d6:bb:cf:cf:e1:e5:
         fa:31:43:02:cd:63:b3:cf:bd:8b:d1:50:5b:aa:ce:74:63:e6:
         2b:f2:be:ac:78:1f:3f:2e:9f:cd:39:86:9f:b3:43:1a:31:cc:
         5a:30:62:2a:df:20:1d:6c:39:4e:08:2b:28:0f:b8:94:d5:f4:
         a2:06:fa:f3:5a:6d:b0:ac:cd:28:28:d0:c2:e7:2d:73:e5:4f:
         3b:7b:fe:a8:50:9b:b4:26:99:59:19:e0:14:2f:ca:7b:bc:31:
         85:08:2e:ad:bb:01:4c:9e:25:fe:6e:37:ac:7a:df:c2:de:7d:
         b6:73:2a:71:6b:f1:27:23:69:e8:9a:ff:be:ca:02:67:da:d8:
         d3:43:b3:c1:33:b2:15:c0:99:b0:72:5d:9c:30:4f:40:1e:24:
         1b:56:0f:29:09:28:52:2b:77:0a:b8:62:01:eb:e4:d9:61:1d:
         8b:83:2a:5e:7a:1a:ec:0f:b2:cc:f1:06:61:ae:cd:9c:f5:b0:
         4c:7f:4f:e6:ec:4f:ef:2d:8c:ff:e4:41:48:14:0b:dd:f6:10:
         14:46:57:45
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBYrBy2/9JH9myr8aHU+j1aDOguEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyMEI0MjMyOTgyNkY2MUE0OEY1RUI4MzE0RDNFRkVF
MDcwRjhBMzAeFw0yNTExMTcxMzM1MDhaFw0yNjExMTYxMzQwMDhaMDMxMTAvBgNV
BAMTKEVGODZGQTBDMjczMjM4MkQ2Njc4NUY1M0Q2REU5OTZFMjVEQjk1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSMveo43irVZjm+QS9UrSDCZs
ZOqq3NNrBCg5xvUZSUlb7WLqfYBd5dWoALmNEFEzfHAiI4KvrXStlESbQyudjJkL
6ni6S8gnxyatNHvoNabijZdl7q/rHu896Pv5UKDG+jC1HEgyVR9uM2UYmqO0gPU7
y/PYqWN2Q6rX3chP7EdFkKUSFfuKle4LgXBylpTs6b2AY+sRbedrt3mQHC/fNqXh
9g/S7EOSc7fXuHKqmudXYXnwqqmAUsRxZ4eAPG0TS7lUsZ/9NHoYBLQEvj1v5RWs
8DMHVUxVOABA6V1Yl3Fbqn0oEh6zNOSU7sSiUNTXjyLZrBR5uwytuMePHzrXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU74b6DCcyOC1meF9T1t6ZbiXblU4wHwYDVR0j
BBgwFoAUfyC0IymCb2Gkj164MU0+/uBw+KMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzZBbWNuYng1TnVEemJnRDk3N3puV2JmMU5jUjJvcXFaZE5MVVlRbVJ0
bWUvMC83RjIwQjQyMzI5ODI2RjYxQTQ4RjVFQjgzMTREM0VGRUUwNzBGOEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGMjBCNDIzMjk4MjZGNjFB
NDhGNUVCODMxNEQzRUZFRTA3MEY4QTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M2QW1jbmJ4NU51RHpiZ0Q5Nzd6bldiZjFOY1Iyb3FxWmROTFVZUW1SdG1lLzAv
MzEzNjM4MmUzMTM5MzUyZTMxMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM3MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjDszANBgkqhkiG9w0BAQsFAAOCAQEAU+kX
KqX20uoB6Di5i67Ck+CNkomRiRR8Hjvs1G3z2PfoehQhdDDVNBXAVp4QSOv91rvP
z+Hl+jFDAs1js8+9i9FQW6rOdGPmK/K+rHgfPy6fzTmGn7NDGjHMWjBiKt8gHWw5
TggrKA+4lNX0ogb681ptsKzNKCjQwuctc+VPO3v+qFCbtCaZWRngFC/Ke7wxhQgu
rbsBTJ4l/m43rHrfwt59tnMqcWvxJyNp6Jr/vsoCZ9rY00OzwTOyFcCZsHJdnDBP
QB4kG1YPKQkoUit3CrhiAevk2WEdi4MqXnoa7A+yzPEGYa7NnPWwTH9P5uxP7y2M
/+RBSBQL3fYQFEZXRQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:09:30 2025 by rpki-client