This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa
File:                     3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa (raw, json)
Hash identifier:          hk7I2W8Z6iDu9UQLaZkKnts9aDQip1PiLWv7UPWDOgI=
Subject key identifier:   3E:19:81:F7:B7:FB:11:58:82:3E:6D:72:BD:BF:0E:16:90:4F:45:B1
Certificate issuer:       /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial:       0D37F0E84CFCF8C92660CD0D58BA2299817474FB
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa
Signing time:             Wed 19 Nov 2025 17:11:46 +0000
ROA not before:           Wed 19 Nov 2025 17:06:46 +0000
ROA not after:            Wed 18 Nov 2026 17:11:46 +0000
asID:                     61657
IP address blocks:        131.100.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:37:f0:e8:4c:fc:f8:c9:26:60:cd:0d:58:ba:22:99:81:74:74:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
        Validity
            Not Before: Nov 19 17:06:46 2025 GMT
            Not After : Nov 18 17:11:46 2026 GMT
        Subject: CN=3E1981F7B7FB1158823E6D72BDBF0E16904F45B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:ff:12:c8:22:d7:bd:83:ab:de:45:0c:24:
                    c3:60:35:25:40:18:f4:bc:4a:6e:46:1b:5d:2b:3f:
                    c4:30:4b:b2:4a:30:ce:5a:0b:b2:be:b5:85:d9:aa:
                    43:cf:01:02:c9:24:03:87:12:0e:83:4c:2b:ef:5c:
                    a5:72:33:55:7e:7a:95:31:6f:c1:b9:36:bc:1c:4c:
                    e6:0f:0c:12:ba:5d:48:f3:3e:4f:83:fe:04:81:9b:
                    ef:e3:ed:c4:15:06:e3:ab:25:6a:9c:63:2d:00:4f:
                    0b:e8:83:18:be:3a:24:f4:1c:cc:fe:d8:d7:08:bf:
                    b3:20:c7:fb:f7:76:f3:05:b8:17:79:90:73:b4:b7:
                    7f:60:74:48:71:4d:90:69:f4:ed:8b:50:a5:f2:33:
                    45:03:35:c4:b2:75:27:42:92:9b:75:7d:c2:ae:a9:
                    a4:13:e1:15:5d:7e:cf:74:9a:d6:8e:96:02:74:24:
                    0a:f7:cc:5a:93:d4:8d:81:83:4f:4f:f6:3e:9a:80:
                    b2:ed:65:d1:8a:25:3e:3b:17:a7:62:62:33:97:7e:
                    f8:d2:86:88:97:f6:74:99:be:61:6c:0d:4f:44:3b:
                    fb:01:7f:c0:7b:1a:07:70:c9:26:1a:11:8f:e3:2e:
                    a6:58:62:08:c6:3d:ae:16:bb:6c:3f:f4:81:55:0e:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:81:F7:B7:FB:11:58:82:3E:6D:72:BD:BF:0E:16:90:4F:45:B1
            X509v3 Authority Key Identifier:
                keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:8e:d4:c8:8c:56:37:45:3f:43:49:2d:2d:26:5d:93:d2:
         29:0f:50:de:f2:ee:41:77:15:1f:4c:05:f7:7c:07:d8:b5:41:
         e0:9b:f4:b2:ef:94:7f:31:01:60:17:3e:4c:5c:1b:6c:fd:e7:
         f1:17:d6:a2:03:fa:67:d5:f0:29:6d:e2:60:ea:7e:79:ec:83:
         8b:4f:7f:9f:0b:c9:09:69:fe:e9:24:80:d7:f4:ca:b1:7f:6d:
         1c:9a:3f:17:11:d0:dd:4e:0e:d6:ea:7b:ce:31:3d:5c:a4:71:
         10:4a:52:8b:e4:65:da:2a:23:31:b8:14:16:f3:8f:af:86:2a:
         3b:de:ff:e0:b2:5e:c2:8f:73:2a:ec:bf:b9:fe:e0:70:05:67:
         44:6b:05:0f:40:ab:a5:a6:42:f3:58:fa:6b:48:48:94:db:69:
         9d:f7:11:86:54:1c:e1:54:c5:61:b8:ad:58:89:f2:9a:4a:73:
         a5:9e:ca:84:2f:44:da:b7:b7:94:3e:1f:3d:1c:34:ed:6e:6e:
         e8:84:66:f0:7f:31:c7:35:5e:31:d2:ea:8f:0e:c8:78:82:d9:
         d9:b8:9e:4f:fe:13:82:b3:22:a6:74:e7:56:37:ec:61:37:36:
         ef:63:2e:2c:52:c5:b6:ca:27:53:4a:38:1d:66:d8:ea:df:f9:
         dd:5d:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:20 2025 by rpki-client