This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
File:                     3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa (raw, json)
Hash identifier:          FZrzzEA3tHoEJhmOLPING6ijWgQX3KdmCOnnPQMFovU=
Subject key identifier:   BC:FE:37:53:22:D0:9F:64:45:7B:B9:87:A7:FC:CF:D8:31:54:A0:66
Certificate issuer:       /CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
Certificate serial:       77BDAB0068CFCCD4CE2864F012FF464A82F0F64A
Authority key identifier: DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
Signing time:             Sat 08 Nov 2025 15:26:11 +0000
ROA not before:           Sat 08 Nov 2025 15:21:11 +0000
ROA not after:            Sat 07 Nov 2026 15:26:11 +0000
asID:                     269167
IP address blocks:        138.118.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl
                          rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 18:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bd:ab:00:68:cf:cc:d4:ce:28:64:f0:12:ff:46:4a:82:f0:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
        Validity
            Not Before: Nov  8 15:21:11 2025 GMT
            Not After : Nov  7 15:26:11 2026 GMT
        Subject: CN=BCFE375322D09F64457BB987A7FCCFD83154A066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:57:e9:48:8a:bf:55:ae:35:2f:d6:57:56:
                    ff:2d:95:b4:cf:40:ff:24:d3:68:15:49:2f:ee:9e:
                    11:4e:44:d6:ed:c9:c9:a4:e2:21:ca:be:f6:0d:48:
                    ed:c3:b3:c8:87:12:80:db:9b:45:8a:d6:b0:50:2d:
                    50:96:a0:b2:4e:2e:c5:0c:ce:70:91:0f:cc:34:eb:
                    f7:e8:77:27:13:da:59:b4:64:14:d4:b6:13:8f:1d:
                    c4:a1:2c:a0:fd:75:1b:81:dc:2a:0c:94:55:37:19:
                    38:3c:41:03:04:36:4f:c9:c0:50:a1:7b:4b:de:55:
                    23:d7:65:8b:51:43:c9:5c:56:27:89:49:58:16:73:
                    10:c4:93:98:87:e2:fd:cf:d3:f9:1d:d0:b8:af:8f:
                    ab:f5:73:09:8b:64:5f:d2:e5:bc:8a:7b:40:48:12:
                    3d:c4:ed:37:e6:a7:a0:62:c2:91:8c:04:32:15:34:
                    ac:0b:5d:4c:79:79:2b:60:63:90:a6:5e:ab:63:c1:
                    b4:34:3f:ec:0e:7c:28:ee:b6:0e:1f:b5:d7:ae:20:
                    54:8b:c5:3c:bf:fa:27:9c:3a:54:f3:c5:58:5d:30:
                    5b:0a:d1:03:a6:b3:55:b1:f4:ef:26:3a:2b:f0:cb:
                    d3:b9:9d:42:f9:1a:67:11:f7:db:45:cc:12:19:57:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:37:53:22:D0:9F:64:45:7B:B9:87:A7:FC:CF:D8:31:54:A0:66
            X509v3 Authority Key Identifier:
                keyid:DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:53:e8:86:52:f7:25:23:03:73:57:3c:20:fd:8c:d9:87:
         d9:fe:20:ba:ab:f6:7a:bb:1d:d0:33:08:27:da:ce:32:92:31:
         59:35:ec:61:15:ba:16:27:98:d2:fd:64:24:21:77:15:04:6d:
         09:75:c4:16:a5:8c:e5:db:f5:c3:4b:48:1d:26:2b:54:47:8b:
         3b:6c:41:6a:cb:b6:0c:11:d6:db:e6:23:dc:02:53:c9:5c:21:
         bb:ae:6b:cc:7a:fd:32:09:5d:82:9f:4a:30:5b:6d:db:3d:93:
         b0:86:ab:d8:b7:dd:1d:a3:8b:03:51:e3:f1:26:72:fc:d1:87:
         f8:0e:5a:25:3c:0d:fb:f2:2b:a4:6e:4d:d2:12:5b:36:c8:c8:
         64:b6:6e:f4:9c:34:f5:fa:b5:4f:1e:54:75:82:44:b6:fe:83:
         19:90:6d:87:a5:8c:b4:60:f5:54:7b:b6:8a:d0:d4:74:de:20:
         7f:cc:43:df:ab:80:33:4b:fc:86:67:b2:35:47:7e:45:a8:e3:
         72:d7:a6:67:79:97:e8:43:e5:68:18:39:61:26:e2:bb:69:c5:
         58:98:47:8c:ac:2c:b5:42:10:86:42:d1:a3:5a:ca:ef:ea:08:
         2c:b9:18:41:10:38:90:62:3d:5f:43:91:52:6a:c6:36:ae:ee:
         02:80:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:49:30 2025 by rpki-client