This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          /pc2e5u60D4VVsZFN61dOjfyyvqzmUvO/IAG2eugw74=
Subject key identifier:   61:9C:0B:AC:04:12:B3:8D:06:FE:89:9D:2F:4A:BE:F2:B1:92:66:10
Certificate issuer:       /CN=55EAC8B2C2BD61F877B5733091AD10F3F4403D6B
Certificate serial:       40D4CCA30083E68100B08CC60C7E221F88B92838
Authority key identifier: 55:EA:C8:B2:C2:BD:61:F8:77:B5:73:30:91:AD:10:F3:F4:40:3D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
Signing time:             Fri 21 Nov 2025 14:57:55 +0000
ROA not before:           Fri 21 Nov 2025 14:52:55 +0000
ROA not after:            Fri 20 Nov 2026 14:57:55 +0000
asID:                     265919
IP address blocks:        131.196.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d4:cc:a3:00:83:e6:81:00:b0:8c:c6:0c:7e:22:1f:88:b9:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55EAC8B2C2BD61F877B5733091AD10F3F4403D6B
        Validity
            Not Before: Nov 21 14:52:55 2025 GMT
            Not After : Nov 20 14:57:55 2026 GMT
        Subject: CN=619C0BAC0412B38D06FE899D2F4ABEF2B1926610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:e7:b8:2b:64:8b:77:e5:a6:d6:73:23:14:
                    30:38:f1:7a:43:18:03:5d:19:af:d1:c0:29:aa:8c:
                    6b:fe:b2:78:6d:3e:d6:ba:63:6d:b2:98:46:f0:be:
                    27:b1:aa:e5:aa:ae:59:cf:2d:94:9f:f6:63:e5:2a:
                    6d:db:d9:ac:52:76:ca:40:0d:e7:7d:3a:f2:67:40:
                    31:c5:18:e4:65:8d:92:5b:dd:07:2b:09:52:a0:46:
                    0f:37:a8:0a:e3:05:fe:b1:a3:41:98:e3:94:ac:ff:
                    fa:fb:3c:f1:9f:23:98:0a:83:83:b8:38:fd:0d:17:
                    ef:08:41:95:58:45:72:49:9c:d4:6e:8f:8a:70:de:
                    42:80:e7:4b:09:3f:86:ec:9c:df:19:70:29:6b:f1:
                    d5:76:3d:02:01:9a:b9:52:1a:91:e8:c8:14:4f:e4:
                    bf:7e:83:84:b9:e2:a8:87:3d:56:ac:8d:98:47:ba:
                    df:8e:19:0b:80:a2:7a:e6:4b:1a:43:25:8f:22:02:
                    85:f5:35:fd:1c:3c:9a:03:b9:42:45:e2:12:47:23:
                    7c:84:3e:7d:3a:a7:f4:0a:bb:49:73:09:1e:8a:02:
                    6e:1a:25:bc:69:4d:30:1e:54:fb:bc:29:3a:9f:a4:
                    2e:93:26:60:63:c0:15:eb:01:8c:11:4b:df:30:06:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:0B:AC:04:12:B3:8D:06:FE:89:9D:2F:4A:BE:F2:B1:92:66:10
            X509v3 Authority Key Identifier:
                keyid:55:EA:C8:B2:C2:BD:61:F8:77:B5:73:30:91:AD:10:F3:F4:40:3D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:94:41:19:aa:59:8a:03:4f:06:15:1f:66:44:e3:5a:b1:
         20:36:60:5b:d3:cd:37:b9:88:52:24:ff:73:59:2f:c4:99:ee:
         17:9c:c1:9b:54:3b:e9:13:e1:e3:96:27:9a:e6:2f:8e:37:8d:
         46:e8:c8:1f:49:ee:8a:fd:bb:44:4c:e7:cb:f5:34:8a:6b:bd:
         da:d7:6c:02:1b:f7:b0:2b:8c:81:1a:1b:16:1d:bb:1d:1f:e2:
         c7:29:7a:f1:82:e4:dd:6d:af:4a:81:48:5b:52:57:a4:06:d4:
         12:0e:2b:8e:22:c9:6d:69:ec:3f:95:39:6d:07:c5:c5:c6:80:
         23:d6:a8:d1:e9:92:3c:aa:ae:5c:f2:d9:5a:a3:19:df:f6:4e:
         03:92:ec:17:f6:7e:f2:1c:36:07:3a:46:af:da:fa:33:6c:2d:
         8f:c6:c5:50:bf:25:b7:70:23:ef:35:a6:21:c8:2d:34:e5:7b:
         68:85:f5:69:75:d4:74:05:1e:1f:71:ca:dd:f7:4f:60:65:04:
         9c:25:ed:48:31:80:c3:74:db:c6:e2:2c:d9:d6:05:79:75:a0:
         4b:1a:4b:41:db:98:bd:78:19:02:e0:39:98:f4:b9:86:a2:e7:
         94:77:7c:82:17:63:ef:aa:b4:3d:31:ec:52:50:48:a9:fc:02:
         bb:e7:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:03 2025 by rpki-client