This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa
File:                     AS52903.roa (raw, json)
Hash identifier:          qrdArtV80HzymrbTbF11pSFZWhXgIROL/7g76QvSk1Y=
Subject key identifier:   5F:7D:6E:AF:43:21:E1:2F:09:FE:44:38:E8:28:C0:97:44:DF:98:F6
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       364A21C128A3200D365D6E549AE6DD343C349C48
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa
Signing time:             Mon 19 Jan 2026 19:07:21 +0000
ROA not before:           Mon 19 Jan 2026 19:02:21 +0000
ROA not after:            Mon 18 Jan 2027 19:07:21 +0000
asID:                     52903
IP address blocks:        187.62.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4a:21:c1:28:a3:20:0d:36:5d:6e:54:9a:e6:dd:34:3c:34:9c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Jan 19 19:02:21 2026 GMT
            Not After : Jan 18 19:07:21 2027 GMT
        Subject: CN=5F7D6EAF4321E12F09FE4438E828C09744DF98F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:23:8b:81:83:bb:57:ab:4c:e0:11:7f:72:
                    e6:aa:ee:9b:ff:de:5e:58:90:b6:77:4d:25:65:9c:
                    a9:4d:aa:39:f6:36:56:69:38:fd:74:4b:fa:4b:25:
                    68:f9:07:5e:58:44:a2:f6:ae:93:d5:19:08:70:78:
                    d4:a5:71:26:2b:6e:6f:69:e8:e3:c5:bc:9f:79:81:
                    22:7f:fc:3e:86:ce:60:a5:f9:f4:11:be:e0:86:68:
                    30:2a:0b:a7:86:91:bd:04:1a:50:85:2d:0b:09:f8:
                    3b:b6:f5:5a:ba:62:b6:93:33:03:e7:44:b5:a2:f0:
                    1b:92:a5:73:a9:ab:8f:e7:06:04:81:db:6f:00:3a:
                    ca:ea:37:91:e3:b2:3e:ed:97:98:9a:bf:7a:42:1a:
                    42:1d:50:ce:41:ee:d4:0c:71:9b:05:0a:bc:e5:25:
                    a5:49:bd:70:91:29:a7:27:d7:77:9e:ef:81:76:1c:
                    29:83:47:b9:a4:9d:1e:96:26:aa:78:be:e6:78:a3:
                    1c:0a:2b:ea:fd:9a:ea:13:c2:59:7e:37:f5:f5:f5:
                    ca:5d:e8:aa:6d:44:3a:a0:67:60:a3:b7:52:83:d1:
                    8a:d9:07:8a:75:17:0e:5b:75:19:f4:96:3a:89:82:
                    6e:90:09:3f:fe:76:43:e1:6f:f9:ad:36:a3:d3:07:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7D:6E:AF:43:21:E1:2F:09:FE:44:38:E8:28:C0:97:44:DF:98:F6
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:78:0b:d0:6e:d3:a0:a4:93:50:b2:6c:83:1b:10:9e:37:77:
         61:b7:cc:e4:08:27:f9:ed:43:ae:5b:88:73:4a:1f:d5:6c:b3:
         7e:d4:41:d3:c4:fc:97:2a:1f:77:08:ab:6a:55:b7:3e:61:a2:
         0f:b1:16:d0:ad:69:f2:49:f1:71:b2:66:91:39:e8:fe:4c:38:
         e8:06:ca:e6:6c:ee:49:7a:b0:8d:96:77:e0:76:98:72:c6:8a:
         a9:c8:57:63:c9:cc:57:c0:a3:9b:53:2b:76:d2:a2:f7:f8:7b:
         ab:41:43:c3:84:80:18:84:c7:d3:48:ae:cd:db:4c:06:e4:1b:
         07:df:f1:37:e9:4f:44:20:54:1c:0f:d3:3e:da:de:4d:ad:b0:
         ce:e5:67:dd:51:37:1a:4f:ef:32:6a:cf:f8:2b:c3:33:a4:7e:
         93:43:a5:ca:12:63:9a:6c:87:e1:bf:65:fd:9c:57:0f:9d:0f:
         77:fb:a6:6f:4d:3c:0c:0b:d7:94:b0:a7:8c:f4:b2:6f:86:02:
         63:c6:5d:6a:fa:46:fa:19:e9:cd:a0:bc:4c:11:bd:a7:8c:78:
         3c:f2:9a:b6:fc:0d:d4:2a:d9:76:9c:d3:07:86:5c:fd:7d:57:
         a2:3f:45:14:90:d6:7e:36:ff:d4:b9:95:80:71:ea:7b:ae:df:
         f1:e2:b4:d6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUNkohwSijIA02XW5UmubdNDw0nEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNjAxMTkxOTAyMjFaFw0yNzAxMTgxOTA3MjFaMDMxMTAvBgNV
BAMTKDVGN0Q2RUFGNDMyMUUxMkYwOUZFNDQzOEU4MjhDMDk3NDRERjk4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShyOLgYO7V6tM4BF/cuaq7pv/
3l5YkLZ3TSVlnKlNqjn2NlZpOP10S/pLJWj5B15YRKL2rpPVGQhweNSlcSYrbm9p
6OPFvJ95gSJ//D6GzmCl+fQRvuCGaDAqC6eGkb0EGlCFLQsJ+Du29Vq6YraTMwPn
RLWi8BuSpXOpq4/nBgSB228AOsrqN5Hjsj7tl5iav3pCGkIdUM5B7tQMcZsFCrzl
JaVJvXCRKacn13ee74F2HCmDR7mknR6WJqp4vuZ4oxwKK+r9muoTwll+N/X19cpd
6KptRDqgZ2Cjt1KD0YrZB4p1Fw5bdRn0ljqJgm6QCT/+dkPhb/mtNqPTB5KnAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUX31ur0Mh4S8J/kQ46CjAl0TfmPYwHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Db3RK
M1JjbWY0UDg3VHYzOUo4Qnl0TjVQQW1YTlVINU1wNzRKVWJhajE2VS8xL0FTNTI5
MDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC7Pv0wDQYJKoZIhvcNAQELBQADggEBAN94C9Bu06Ckk1Cy
bIMbEJ43d2G3zOQIJ/ntQ65biHNKH9Vss37UQdPE/JcqH3cIq2pVtz5hog+xFtCt
afJJ8XGyZpE56P5MOOgGyuZs7kl6sI2Wd+B2mHLGiqnIV2PJzFfAo5tTK3bSovf4
e6tBQ8OEgBiEx9NIrs3bTAbkGwff8TfpT0QgVBwP0z7a3k2tsM7lZ91RNxpP7zJq
z/grwzOkfpNDpcoSY5psh+G/Zf2cVw+dD3f7pm9NPAwL15Swp4z0sm+GAmPGXWr6
RvoZ6c2gvEwRvaeMeDzymrb8DdQq2Xac0weGXP19V6I/RRSQ1n42/9S5lYBx6nuu
3/HitNY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:02 2026 by rpki-client