This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3232203d3e203631363830.roa
File:                     3133312e3130382e36342e302f32322d3232203d3e203631363830.roa (raw, json)
Hash identifier:          reustH0IN5Jvtd0mkq9tZiJS+VJ3xGKKbbgtRnG73+A=
Subject key identifier:   63:FC:F0:FF:1A:8D:28:F0:7A:77:5C:F3:A7:A4:AD:BA:75:7B:F4:78
Certificate issuer:       /CN=5A04500F2CCC3AD327B65C082F00942A95A22666
Certificate serial:       7E9FEA3D2F8B38D7A46D865351405ED264AE71BA
Authority key identifier: 5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3232203d3e203631363830.roa
Signing time:             Fri 28 Nov 2025 22:04:06 +0000
ROA not before:           Fri 28 Nov 2025 21:59:06 +0000
ROA not after:            Fri 27 Nov 2026 22:04:06 +0000
asID:                     61680
IP address blocks:        131.108.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9f:ea:3d:2f:8b:38:d7:a4:6d:86:53:51:40:5e:d2:64:ae:71:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A04500F2CCC3AD327B65C082F00942A95A22666
        Validity
            Not Before: Nov 28 21:59:06 2025 GMT
            Not After : Nov 27 22:04:06 2026 GMT
        Subject: CN=63FCF0FF1A8D28F07A775CF3A7A4ADBA757BF478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:54:3c:87:89:49:1c:9a:12:78:b5:00:1a:
                    cf:ff:9f:e4:56:5c:7e:6a:4f:86:0c:bb:76:ab:6b:
                    e1:dd:b2:76:78:df:61:24:ff:6a:e8:71:26:e3:33:
                    0a:79:4a:af:87:86:b4:46:50:b7:69:00:fe:be:f6:
                    53:30:c6:49:7b:ff:37:5b:27:3b:2e:5b:7d:45:90:
                    95:02:8c:5e:74:26:36:2f:71:be:90:3f:91:38:bc:
                    cc:fa:9a:f5:f3:8c:b9:95:7e:30:85:e5:3e:ad:52:
                    af:b3:9f:b1:d1:ba:26:08:0e:46:cb:28:ca:b1:6d:
                    8c:fe:3e:f9:97:f9:c3:c3:a9:24:4e:34:df:36:57:
                    e2:79:33:49:53:af:07:e4:43:3e:7c:10:39:0b:5c:
                    2f:9a:ac:38:c9:b9:0c:7d:8d:97:09:9b:ab:3d:19:
                    00:5a:99:47:3b:9f:23:77:63:10:b4:cb:fb:e7:ef:
                    0b:9d:f2:44:28:12:f3:23:32:d5:b0:1f:1d:ca:18:
                    fa:21:6e:19:43:54:ec:3e:a8:48:dd:41:d7:aa:0f:
                    39:2c:b8:db:61:b4:b2:03:cb:13:2e:a5:d8:f8:05:
                    da:a2:e1:27:a0:62:c6:26:d9:5c:0d:b6:f1:a6:e4:
                    f6:bd:5c:42:99:cc:35:c9:c0:5d:7a:8c:e4:c1:3c:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:F0:FF:1A:8D:28:F0:7A:77:5C:F3:A7:A4:AD:BA:75:7B:F4:78
            X509v3 Authority Key Identifier:
                keyid:5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3232203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:1a:31:07:57:8b:5f:37:3c:14:98:2b:9f:df:0f:d4:62:
         7b:2c:e3:a5:8d:41:39:52:ee:05:9a:81:04:ec:2b:91:ac:78:
         7f:84:ae:b3:ef:bb:f7:70:17:0a:c7:8f:9c:90:3b:48:36:17:
         40:b3:3e:c5:b0:38:6f:91:8d:3d:4e:9d:5f:a8:9b:73:aa:a2:
         df:db:75:5c:30:2c:78:bc:9c:41:a0:ec:28:fb:1d:8e:c5:67:
         57:d6:be:0f:a8:72:12:5d:54:8b:32:f9:ce:c4:0b:b3:cb:9c:
         14:84:74:ef:12:9f:39:53:9b:5c:b8:9b:ca:ef:31:6b:89:4c:
         ac:d8:a6:1b:9a:7a:fe:34:84:0d:93:f7:09:74:b9:db:59:d8:
         68:57:c4:c1:37:e9:b6:68:ea:4e:39:af:05:c6:2d:74:c6:2c:
         90:b8:e3:0a:d1:f3:23:ba:8d:9f:0e:b0:08:18:99:2e:ee:57:
         3f:30:0e:b7:c8:d2:e2:47:7a:c3:69:2d:23:09:1b:29:34:fb:
         13:5e:3b:a5:1b:8f:4d:8e:84:18:2d:96:ea:51:d2:94:6e:46:
         12:53:ef:05:7f:69:62:c6:72:28:7a:3b:1a:8b:69:e9:6a:7b:
         11:a9:d0:f5:69:64:ee:29:2b:63:04:a3:a6:62:b7:3a:12:4f:
         33:e5:97:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfp/qPS+LONekbYZTUUBe0mSucbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEwNDUwMEYyQ0NDM0FEMzI3QjY1QzA4MkYwMDk0MkE5
NUEyMjY2NjAeFw0yNTExMjgyMTU5MDZaFw0yNjExMjcyMjA0MDZaMDMxMTAvBgNV
BAMTKDYzRkNGMEZGMUE4RDI4RjA3QTc3NUNGM0E3QTRBREJBNzU3QkY0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9FQ8h4lJHJoSeLUAGs//n+RW
XH5qT4YMu3ara+HdsnZ432Ek/2rocSbjMwp5Sq+HhrRGULdpAP6+9lMwxkl7/zdb
JzsuW31FkJUCjF50JjYvcb6QP5E4vMz6mvXzjLmVfjCF5T6tUq+zn7HRuiYIDkbL
KMqxbYz+PvmX+cPDqSRONN82V+J5M0lTrwfkQz58EDkLXC+arDjJuQx9jZcJm6s9
GQBamUc7nyN3YxC0y/vn7wud8kQoEvMjMtWwHx3KGPohbhlDVOw+qEjdQdeqDzks
uNthtLIDyxMupdj4Bdqi4SegYsYm2VwNtvGm5Pa9XEKZzDXJwF16jOTBPGRnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY/zw/xqNKPB6d1zzp6StunV79HgwHwYDVR0j
BBgwFoAUWgRQDyzMOtMntlwILwCUKpWiJmYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9Xc3RDWXZLYlB4UTdtQ3BEaFh4U0RjWTVXWk1wQnVRaVdhUTNvZFZq
eHIvMC81QTA0NTAwRjJDQ0MzQUQzMjdCNjVDMDgyRjAwOTQyQTk1QTIyNjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMDQ1MDBGMkNDQzNBRDMy
N0I2NUMwODJGMDA5NDJBOTVBMjI2NjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZvV3N0Q1l2S2JQeFE3bUNwRGhYeFNEY1k1V1pNcEJ1UWlXYVEzb2RWanhyLzAv
MzEzMzMxMmUzMTMwMzgyZTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzYzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg2xAMA0GCSqGSIb3DQEBCwUAA4IBAQB7shoxB1eL
Xzc8FJgrn98P1GJ7LOOljUE5Uu4FmoEE7CuRrHh/hK6z77v3cBcKx4+ckDtINhdA
sz7FsDhvkY09Tp1fqJtzqqLf23VcMCx4vJxBoOwo+x2OxWdX1r4PqHISXVSLMvnO
xAuzy5wUhHTvEp85U5tcuJvK7zFriUys2KYbmnr+NIQNk/cJdLnbWdhoV8TBN+m2
aOpOOa8Fxi10xiyQuOMK0fMjuo2fDrAIGJku7lc/MA63yNLiR3rDaS0jCRspNPsT
XjulG49NjoQYLZbqUdKUbkYSU+8Ff2lixnIoejsai2npansRqdD1aWTuKStjBKOm
Yrc6Ek8z5ZeO
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:40 2025 by rpki-client