This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa
File:                     3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa (raw, json)
Hash identifier:          yY9FPZpQlgW/GvkyJnXp8vX30oDlZkSF/3aVUZJaiY0=
Subject key identifier:   D5:85:65:8A:E7:89:3B:62:1D:3C:38:3A:26:6A:79:EB:64:FC:3E:41
Certificate issuer:       /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial:       368005663652E1A7AB9828B50FB733866F9B90FB
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa
Signing time:             Wed 19 Nov 2025 17:11:14 +0000
ROA not before:           Wed 19 Nov 2025 17:06:14 +0000
ROA not after:            Wed 18 Nov 2026 17:11:14 +0000
asID:                     61657
IP address blocks:        131.100.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:80:05:66:36:52:e1:a7:ab:98:28:b5:0f:b7:33:86:6f:9b:90:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
        Validity
            Not Before: Nov 19 17:06:14 2025 GMT
            Not After : Nov 18 17:11:14 2026 GMT
        Subject: CN=D585658AE7893B621D3C383A266A79EB64FC3E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:9c:b2:0e:a0:26:f0:77:da:80:81:99:59:
                    4d:ff:08:b1:2e:33:95:42:89:57:24:7d:9f:ff:08:
                    42:32:32:a3:03:81:e4:ab:fd:78:8d:28:80:72:03:
                    fa:b7:d8:48:53:32:d4:c3:0a:c3:ab:f2:48:25:51:
                    91:68:b8:95:9d:70:e5:49:6f:b5:c0:5e:4e:e7:cb:
                    4d:2e:2b:01:d9:7e:6a:2a:5f:04:c3:55:26:ac:a6:
                    c5:76:2d:ca:6e:56:4a:83:20:dd:d4:00:8f:df:3b:
                    ad:14:47:fd:32:9d:29:67:9d:1f:cb:22:96:a1:bc:
                    d7:75:f7:6b:86:64:04:f8:61:39:b1:2c:ae:23:5d:
                    93:44:06:69:36:b1:32:10:27:dd:89:6c:be:6a:ed:
                    41:30:e0:a0:1a:48:30:44:90:61:97:a5:62:0d:41:
                    d3:34:7f:fd:59:04:d9:af:e6:74:aa:39:b3:d0:3a:
                    ba:f1:07:e6:cd:3e:c3:bf:78:05:32:f9:7f:39:4c:
                    ad:02:94:6c:a3:4b:8a:02:4d:c9:92:f3:28:a5:24:
                    dc:82:b5:c4:11:53:2f:99:4b:9e:15:9e:a5:eb:81:
                    96:8d:bf:09:d0:d3:9e:2b:45:24:8b:a3:6a:3d:7f:
                    d6:d8:32:c8:4f:b1:e5:c1:f2:4e:dd:1c:7c:c4:68:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:85:65:8A:E7:89:3B:62:1D:3C:38:3A:26:6A:79:EB:64:FC:3E:41
            X509v3 Authority Key Identifier:
                keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:6e:e0:b7:50:e5:65:ab:31:ed:15:e1:0f:23:7f:b6:06:
         5e:67:d4:47:7e:5b:af:d5:16:52:8a:9f:64:d2:ae:3a:d7:9c:
         04:d5:68:4f:76:a1:ec:ad:11:e8:f8:c6:8c:01:26:6a:9c:38:
         bf:f5:58:34:d8:16:6e:28:56:d9:04:d5:e8:10:fd:dc:0f:d4:
         23:2d:65:a3:c6:8c:b5:04:8b:04:e1:eb:00:04:10:79:2a:38:
         07:67:13:4d:40:f7:87:d7:18:6f:ab:86:96:3e:2e:03:4c:ae:
         66:c3:10:87:08:1c:31:55:f8:38:22:85:b7:aa:53:13:ba:9a:
         82:78:2a:46:23:06:bf:96:15:8a:a5:f4:68:d3:92:bd:06:ed:
         e0:34:f2:17:26:75:b8:1d:d1:4c:63:f3:2d:8a:cd:9d:b3:40:
         14:7c:e8:db:fc:08:02:e9:80:7e:92:f9:6c:49:55:34:c3:06:
         03:83:08:cd:a8:1b:09:54:6f:12:98:ea:2b:40:97:31:3c:34:
         9a:cb:ce:69:6c:c0:21:46:0a:50:d4:d8:29:66:c6:76:58:b0:
         cc:63:5f:ac:79:a5:61:63:9a:e6:31:53:65:20:a9:51:58:f3:
         5b:98:ca:aa:51:f4:c3:39:56:1d:0c:f3:07:c1:d5:4d:7f:29:
         d9:8d:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:41 2025 by rpki-client