This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32342d3234203d3e203631363537.roa
File:                     3133312e3130302e3235342e302f32342d3234203d3e203631363537.roa (raw, json)
Hash identifier:          n+bdObbF322UVynHrxS5t5WeYIR3bhI6gewx74si9aA=
Subject key identifier:   C0:64:47:E9:7D:79:82:54:3A:EF:00:19:31:5D:EF:09:C4:04:F8:73
Certificate issuer:       /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial:       73A3D969301D8B3280CB645755873C51E180D696
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32342d3234203d3e203631363537.roa
Signing time:             Wed 19 Nov 2025 17:10:10 +0000
ROA not before:           Wed 19 Nov 2025 17:05:10 +0000
ROA not after:            Wed 18 Nov 2026 17:10:10 +0000
asID:                     61657
IP address blocks:        131.100.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a3:d9:69:30:1d:8b:32:80:cb:64:57:55:87:3c:51:e1:80:d6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
        Validity
            Not Before: Nov 19 17:05:10 2025 GMT
            Not After : Nov 18 17:10:10 2026 GMT
        Subject: CN=C06447E97D7982543AEF0019315DEF09C404F873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:82:18:a2:c0:fb:10:e5:b0:9c:89:f0:e4:
                    97:59:11:a7:c2:e5:ba:89:5a:57:91:bc:7d:9b:6e:
                    b7:39:43:a8:58:8e:79:4c:59:fc:21:bc:e1:de:d2:
                    00:af:fc:f1:e5:f4:4b:82:f1:da:0d:77:18:fb:3f:
                    7e:2b:89:51:b3:54:a1:67:e7:c2:c2:1b:11:cf:fb:
                    a8:c3:e3:dd:ad:54:9e:2c:54:db:f1:86:0b:9c:5f:
                    d4:a0:03:cb:08:41:fb:64:29:27:a2:29:ea:9d:fb:
                    35:18:98:69:08:7f:68:6b:0b:76:95:0f:3e:29:61:
                    b9:14:ae:31:83:f9:a0:e5:d2:db:3a:67:fb:73:27:
                    c3:16:f1:35:76:49:fa:57:69:e8:ee:73:6d:2b:45:
                    26:b2:48:d8:51:c0:3d:0d:09:67:e3:56:aa:4c:30:
                    9e:49:73:d7:ff:94:7f:5b:a8:ed:b6:b6:bf:f8:6d:
                    cd:aa:68:92:21:4f:7a:db:6c:2e:af:4a:08:0d:02:
                    36:d5:53:21:40:02:19:95:45:54:66:52:f0:30:8e:
                    3d:c5:a6:de:73:3e:77:1c:84:52:fd:7c:d8:05:92:
                    2b:d4:dd:c7:e7:dc:79:d4:d4:83:f8:6a:a8:7a:cf:
                    a3:1f:5f:80:f1:61:be:fd:c6:79:1b:3c:28:22:49:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:64:47:E9:7D:79:82:54:3A:EF:00:19:31:5D:EF:09:C4:04:F8:73
            X509v3 Authority Key Identifier:
                keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235342e302f32342d3234203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:bf:be:4c:9b:fa:4d:7c:b4:9e:18:68:e2:d4:ea:4a:db:
         1c:9d:de:8b:7c:53:3b:e2:b1:a9:a2:88:bd:ac:44:28:cd:57:
         51:cb:95:0a:cd:2e:ad:e3:92:5d:62:0e:64:c8:d7:05:84:23:
         4f:83:c7:0c:fd:d8:7b:0f:a2:cb:03:c6:33:3a:99:b4:8a:1b:
         6d:a4:68:17:09:71:0b:90:6b:35:ed:08:ea:b5:73:9b:80:c0:
         61:ef:f6:16:10:55:82:9f:a0:2c:2d:80:07:05:5e:79:3c:b1:
         04:ba:ca:de:ff:79:fa:1e:5a:87:fc:91:8f:0b:18:09:e2:aa:
         1a:48:0f:bd:6d:5e:e1:58:63:54:16:4d:db:e4:47:7b:d4:15:
         f5:3c:a1:17:13:f7:7b:74:d2:8a:02:bc:ca:c3:f9:9a:e5:a7:
         35:5b:91:78:00:9d:33:10:89:fd:d5:07:0a:f0:d0:e3:1c:c4:
         db:2c:c1:51:94:35:db:be:08:9a:6f:3d:b4:05:48:ed:27:ad:
         c2:7a:0b:1f:97:9b:4d:69:62:a5:c9:eb:74:6f:86:e9:ee:78:
         64:04:74:16:c6:46:5a:4c:1e:74:03:bd:d2:69:de:5f:d1:4f:
         29:92:6d:5f:27:db:63:3a:67:90:ca:d9:7d:e7:22:4a:af:3a:
         6a:2d:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:13 2025 by rpki-client