This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa
File:                     3133312e3130382e36342e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier:          2pwwpILl1hQZwjkbSJqlu7VIDtZ+6rER/b7eoVkwBiw=
Subject key identifier:   83:84:E3:09:FE:DA:24:90:3F:DE:56:E2:17:AB:87:90:9F:64:F3:67
Certificate issuer:       /CN=5A04500F2CCC3AD327B65C082F00942A95A22666
Certificate serial:       6F4C441A24A2B74CC6FB354F489ACCC8C5E34283
Authority key identifier: 5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa
Signing time:             Fri 28 Nov 2025 22:04:10 +0000
ROA not before:           Fri 28 Nov 2025 21:59:10 +0000
ROA not after:            Fri 27 Nov 2026 22:04:10 +0000
asID:                     61680
IP address blocks:        131.108.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4c:44:1a:24:a2:b7:4c:c6:fb:35:4f:48:9a:cc:c8:c5:e3:42:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A04500F2CCC3AD327B65C082F00942A95A22666
        Validity
            Not Before: Nov 28 21:59:10 2025 GMT
            Not After : Nov 27 22:04:10 2026 GMT
        Subject: CN=8384E309FEDA24903FDE56E217AB87909F64F367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:57:54:69:98:47:7f:1c:be:3f:3d:2a:bf:50:
                    31:50:8f:68:d4:cd:60:6d:55:6d:3e:d6:5e:40:88:
                    3e:1d:e5:aa:96:40:f2:28:d5:2d:74:ca:f8:46:a2:
                    a8:49:0e:33:5b:be:6f:55:51:ae:ee:33:14:ff:fa:
                    97:82:53:50:16:70:b7:61:0b:df:50:c2:ff:1f:04:
                    af:26:8c:a1:10:84:e7:b7:0e:a8:17:55:02:73:6e:
                    42:ea:ff:f2:99:8f:c7:5b:b1:62:3a:96:e9:32:7d:
                    c6:51:9b:8d:65:37:00:95:9b:5b:d8:0a:6f:16:a2:
                    7e:91:ad:70:fd:63:19:0f:cf:9c:d7:bf:62:f1:c6:
                    fb:12:6e:ce:19:c5:83:ef:3e:07:6a:e2:86:89:39:
                    45:97:82:aa:56:3a:d3:9e:b8:a9:a9:ea:28:ac:27:
                    14:06:f2:f2:48:68:01:c9:31:22:2f:7b:28:d9:2d:
                    4b:7a:a2:62:6e:11:58:22:97:90:50:09:88:59:71:
                    dd:6a:ff:00:87:e4:44:cd:40:79:cb:bc:71:1d:44:
                    cc:1c:7b:50:c4:fc:01:eb:9a:10:ad:75:33:0b:ae:
                    88:89:c4:07:0e:1b:59:b1:77:a8:45:f1:d2:2b:f6:
                    87:14:2a:5a:c8:cf:00:66:c6:94:74:f7:c3:06:1c:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:84:E3:09:FE:DA:24:90:3F:DE:56:E2:17:AB:87:90:9F:64:F3:67
            X509v3 Authority Key Identifier:
                keyid:5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32342d3234203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:04:92:54:25:6f:0a:fc:25:da:aa:3e:b1:71:f5:ec:ef:
         79:c9:2f:7d:4d:10:fe:d2:ff:80:2b:e3:01:46:6a:97:27:51:
         6a:23:9f:4d:7f:78:a0:16:ba:16:88:f1:b6:75:31:0a:4d:67:
         31:da:7e:57:9d:d3:32:dd:28:34:8d:26:b4:6a:f1:d1:e9:59:
         e7:15:8a:0a:8e:fe:3b:88:c4:c1:5b:02:78:cc:38:a2:54:b6:
         a6:cf:e2:77:0e:b7:99:07:4d:ae:40:74:28:bc:86:de:4b:74:
         e3:85:39:a0:e5:e4:19:22:97:ac:86:06:1a:e4:f0:40:6f:4e:
         11:30:71:5f:c5:2a:d1:00:b6:26:62:a6:7d:70:5d:16:df:b2:
         84:36:ed:93:cb:c0:74:fb:f6:13:5f:41:16:dc:0d:74:66:35:
         00:eb:00:cb:ff:c8:ab:4a:52:1f:34:51:e7:27:7b:26:cd:e6:
         ef:d0:08:0a:88:cc:21:22:58:5d:67:ae:5b:f8:da:a3:fb:50:
         0f:87:cb:27:82:09:ad:93:87:75:3b:a4:bf:b2:7d:e5:c5:bd:
         05:c2:40:16:93:01:4c:23:1d:0f:7c:71:be:a6:52:f9:c5:24:
         11:0d:cb:11:65:2f:bd:cb:c4:d0:77:c7:99:1b:96:5b:20:0d:
         ba:9a:c0:01
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb0xEGiSit0zG+zVPSJrMyMXjQoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEwNDUwMEYyQ0NDM0FEMzI3QjY1QzA4MkYwMDk0MkE5
NUEyMjY2NjAeFw0yNTExMjgyMTU5MTBaFw0yNjExMjcyMjA0MTBaMDMxMTAvBgNV
BAMTKDgzODRFMzA5RkVEQTI0OTAzRkRFNTZFMjE3QUI4NzkwOUY2NEYzNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuV1RpmEd/HL4/PSq/UDFQj2jU
zWBtVW0+1l5AiD4d5aqWQPIo1S10yvhGoqhJDjNbvm9VUa7uMxT/+peCU1AWcLdh
C99Qwv8fBK8mjKEQhOe3DqgXVQJzbkLq//KZj8dbsWI6lukyfcZRm41lNwCVm1vY
Cm8Won6RrXD9YxkPz5zXv2LxxvsSbs4ZxYPvPgdq4oaJOUWXgqpWOtOeuKmp6iis
JxQG8vJIaAHJMSIveyjZLUt6omJuEVgil5BQCYhZcd1q/wCH5ETNQHnLvHEdRMwc
e1DE/AHrmhCtdTMLroiJxAcOG1mxd6hF8dIr9ocUKlrIzwBmxpR098MGHPKFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUg4TjCf7aJJA/3lbiF6uHkJ9k82cwHwYDVR0j
BBgwFoAUWgRQDyzMOtMntlwILwCUKpWiJmYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9Xc3RDWXZLYlB4UTdtQ3BEaFh4U0RjWTVXWk1wQnVRaVdhUTNvZFZq
eHIvMC81QTA0NTAwRjJDQ0MzQUQzMjdCNjVDMDgyRjAwOTQyQTk1QTIyNjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMDQ1MDBGMkNDQzNBRDMy
N0I2NUMwODJGMDA5NDJBOTVBMjI2NjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZvV3N0Q1l2S2JQeFE3bUNwRGhYeFNEY1k1V1pNcEJ1UWlXYVEzb2RWanhyLzAv
MzEzMzMxMmUzMTMwMzgyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg2xAMA0GCSqGSIb3DQEBCwUAA4IBAQAqAwSSVCVv
Cvwl2qo+sXH17O95yS99TRD+0v+AK+MBRmqXJ1FqI59Nf3igFroWiPG2dTEKTWcx
2n5XndMy3Sg0jSa0avHR6VnnFYoKjv47iMTBWwJ4zDiiVLamz+J3DreZB02uQHQo
vIbeS3TjhTmg5eQZIpeshgYa5PBAb04RMHFfxSrRALYmYqZ9cF0W37KENu2Ty8B0
+/YTX0EW3A10ZjUA6wDL/8irSlIfNFHnJ3smzebv0AgKiMwhIlhdZ65b+Nqj+1AP
h8snggmtk4d1O6S/sn3lxb0FwkAWkwFMIx0PfHG+plL5xSQRDcsRZS+9y8TQd8eZ
G5ZbIA26msAB
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:47:28 2025 by rpki-client