This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa
File:                     3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa (raw, json)
Hash identifier:          3G5ez2+JU33lZO+RLNuARo5Nx5X2tywM+1l2i21kvu8=
Subject key identifier:   CC:40:8D:D8:B0:BB:CB:10:46:8A:CD:36:C2:9D:B3:3E:6B:21:0B:EF
Certificate issuer:       /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial:       71546345B9707B21F4FC70D923D920B66DC632FB
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa
Signing time:             Wed 19 Nov 2025 17:09:31 +0000
ROA not before:           Wed 19 Nov 2025 17:04:31 +0000
ROA not after:            Wed 18 Nov 2026 17:09:31 +0000
asID:                     61657
IP address blocks:        131.100.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:54:63:45:b9:70:7b:21:f4:fc:70:d9:23:d9:20:b6:6d:c6:32:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
        Validity
            Not Before: Nov 19 17:04:31 2025 GMT
            Not After : Nov 18 17:09:31 2026 GMT
        Subject: CN=CC408DD8B0BBCB10468ACD36C29DB33E6B210BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:92:16:eb:e6:11:82:2c:42:6d:99:15:67:
                    22:de:bb:e0:28:c1:1b:0b:0d:d9:6a:00:f3:d4:67:
                    a0:73:38:b8:c4:a1:a6:ad:33:73:6f:80:b4:f9:c2:
                    ad:d5:9b:4c:19:6d:b7:44:22:1b:e6:c3:f3:55:b1:
                    97:09:e9:9b:00:bf:a1:3e:a3:e3:ce:38:e0:ca:80:
                    15:74:74:61:d2:d0:69:34:02:ba:2d:76:b7:e5:1a:
                    12:83:ab:c1:31:2b:70:28:06:0a:66:0e:8a:e0:dd:
                    7f:46:74:8f:33:eb:78:6b:80:57:81:5a:52:cb:81:
                    cf:1f:95:24:be:ab:33:ea:72:a7:f7:a0:37:f9:3a:
                    eb:99:c9:0d:29:50:29:99:92:13:28:83:af:17:a5:
                    08:84:e5:c6:f6:13:ff:31:8f:10:79:21:62:ed:70:
                    bb:9e:c5:4f:29:cd:6a:fd:0c:6d:26:35:04:ec:9a:
                    b3:68:f1:bf:d2:fa:6e:a6:b4:10:a9:21:90:2d:4a:
                    fc:93:bd:cc:90:48:7f:c9:eb:9f:96:18:8f:62:44:
                    ba:9b:d7:cb:c3:81:97:9e:a2:5c:73:1f:3f:af:ac:
                    90:23:70:ae:05:65:61:90:b5:2d:a9:bb:12:e7:e9:
                    21:ea:ff:b2:c9:5b:ab:df:b9:ef:69:aa:1c:f6:bb:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:40:8D:D8:B0:BB:CB:10:46:8A:CD:36:C2:9D:B3:3E:6B:21:0B:EF
            X509v3 Authority Key Identifier:
                keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:af:7a:68:39:0f:cf:53:af:39:56:f5:1c:58:e0:e4:ea:
         e1:34:91:6e:1e:0f:c3:df:84:7f:de:60:fd:66:0f:c9:01:55:
         95:b9:8d:4e:e1:d0:f8:ed:a9:24:dd:9a:a0:df:c2:25:8d:e7:
         0e:13:1a:28:ee:17:8f:74:9d:f2:d0:c2:57:40:1d:29:d0:f5:
         03:4a:6a:8f:3f:5d:e0:0a:2a:fb:2b:33:ca:cb:ab:41:9a:68:
         b6:f2:2b:12:9d:57:41:83:d1:9d:05:31:58:e8:b4:55:bd:76:
         11:c3:f6:21:f4:9f:15:e1:4a:69:82:d0:82:66:1d:75:9d:81:
         0d:e6:30:26:84:be:22:10:fb:77:96:ee:45:84:92:c4:be:11:
         e1:a6:17:fe:66:46:ea:18:8d:24:79:e5:f8:6e:ab:f0:e6:59:
         c1:c1:78:25:9c:82:3a:d9:06:3b:b6:f3:89:a0:4c:e2:f9:ea:
         26:c5:6c:de:e8:e6:d8:a3:3d:c2:25:07:05:07:2f:eb:ea:9f:
         37:c6:21:56:a1:19:06:39:33:49:7c:b6:96:cc:1d:dd:ee:0f:
         dd:37:81:b4:df:ef:df:6e:4d:e4:f9:5e:50:6b:2e:ea:99:fc:
         11:ff:25:9f:1c:05:2c:e4:a3:56:24:b8:e6:d2:b6:b5:bd:40:
         a5:5b:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:35 2025 by rpki-client