This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39332e302f32342d3234203d3e20323634333937.roa
File:                     3133312e3136312e39332e302f32342d3234203d3e20323634333937.roa (raw, json)
Hash identifier:          3jil/AxIAp/svBS7Q8E+yuGOuYMx26pX5vtfpraDcHY=
Subject key identifier:   76:FC:E5:0C:1C:40:4D:01:A2:85:0A:EB:EE:2F:8B:2E:99:DE:A3:F2
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       28ED3901BCABBBA921AE9FE8B6E46A928344F447
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39332e302f32342d3234203d3e20323634333937.roa
Signing time:             Wed 26 Nov 2025 15:19:16 +0000
ROA not before:           Wed 26 Nov 2025 15:14:16 +0000
ROA not after:            Wed 25 Nov 2026 15:19:16 +0000
asID:                     264397
IP address blocks:        131.161.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ed:39:01:bc:ab:bb:a9:21:ae:9f:e8:b6:e4:6a:92:83:44:f4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: Nov 26 15:14:16 2025 GMT
            Not After : Nov 25 15:19:16 2026 GMT
        Subject: CN=76FCE50C1C404D01A2850AEBEE2F8B2E99DEA3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:29:89:15:12:60:6c:6e:36:1f:8f:5b:fd:
                    7c:41:b0:0f:03:72:41:02:5a:ef:25:69:e0:fa:e9:
                    c6:52:77:04:f8:75:66:6b:3a:30:2b:73:b1:b5:72:
                    ec:89:46:52:6a:d8:cb:bb:c1:73:46:1c:02:51:2b:
                    d3:71:ba:f1:f3:27:a9:2b:4b:e5:6f:e7:e5:79:45:
                    0d:78:38:cd:d1:de:4f:0a:9f:89:65:9b:58:7c:bf:
                    a4:41:95:14:f2:27:ea:f6:64:de:5b:5d:eb:5b:bf:
                    84:5a:77:88:bc:52:ed:f9:2b:65:77:b8:c5:75:c5:
                    5f:d9:40:ba:0b:ba:e2:9e:9a:62:c7:7e:ce:49:54:
                    ab:8f:08:82:fa:80:cc:8a:0c:10:13:44:a9:37:05:
                    c4:19:14:f9:a8:35:b2:cb:92:60:42:e9:94:6f:c4:
                    08:17:32:90:65:11:b5:9a:5e:ec:1c:d3:f3:85:a0:
                    a2:47:25:d9:32:16:de:2c:20:b9:45:59:4c:8e:82:
                    05:09:d2:32:35:03:24:22:93:14:2f:c2:2f:54:28:
                    a0:c8:51:b0:a5:2b:d0:e0:53:1d:ef:05:6b:b0:05:
                    63:e2:08:66:34:6c:a8:f9:93:59:88:2a:2a:33:8a:
                    0b:31:4f:47:52:a5:13:45:09:1f:c6:7f:a9:e5:c8:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:E5:0C:1C:40:4D:01:A2:85:0A:EB:EE:2F:8B:2E:99:DE:A3:F2
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39332e302f32342d3234203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:21:2a:42:c0:33:0c:89:2c:eb:7f:00:1f:ce:4c:8d:f3:
         0c:52:64:22:29:78:9d:46:91:8e:53:34:71:92:eb:62:bf:0b:
         3d:0b:bc:d1:bd:8e:02:91:9f:6c:71:60:f8:53:35:f9:7a:40:
         b5:3d:18:d9:25:bd:26:aa:a5:5c:a9:3f:5a:19:ad:aa:1f:08:
         55:0e:24:f6:49:26:b3:4f:c0:2b:32:a8:40:c0:f7:8d:42:9e:
         5d:f7:30:f6:a8:0c:23:27:65:c9:9e:e2:dc:2a:92:98:73:75:
         eb:0f:7b:fe:33:1e:03:1c:d1:1c:5b:b8:bb:95:5b:66:89:29:
         de:9e:f2:5f:15:6d:1e:d9:3e:ae:dc:fa:82:94:bb:44:cc:10:
         4e:a4:f3:b7:9d:ef:38:24:f0:e9:01:50:8a:07:42:36:1b:5e:
         1d:7d:29:dc:ae:fb:b3:41:81:b1:08:20:c7:46:d7:d2:98:df:
         37:58:eb:e0:c5:0f:8e:a4:77:9d:9d:50:92:d9:47:3a:22:86:
         46:a3:e1:6c:83:57:d9:84:f4:aa:b0:6f:a5:df:55:19:bf:6e:
         eb:42:f7:c4:7f:2e:8d:89:fa:59:98:04:bb:7e:f1:9b:5e:fd:
         10:f2:40:1d:72:9f:94:98:eb:81:1e:df:d7:4e:26:29:dc:27:
         d0:75:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:35:42 2025 by rpki-client