This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa
File:                     3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          QjQkrEe2FwfRGANS7pxU8dB/XOIkM9cUuA48/LiQzn0=
Subject key identifier:   71:B9:7C:72:BE:07:3E:B3:81:2C:0A:53:A8:FD:7E:3C:5C:D6:CA:F4
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       356013B543B9FA68FCBAAA89B1733EA70987C628
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa
Signing time:             Thu 13 Nov 2025 15:58:39 +0000
ROA not before:           Thu 13 Nov 2025 15:53:39 +0000
ROA not after:            Thu 12 Nov 2026 15:58:39 +0000
asID:                     262777
IP address blocks:        138.219.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:60:13:b5:43:b9:fa:68:fc:ba:aa:89:b1:73:3e:a7:09:87:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Nov 13 15:53:39 2025 GMT
            Not After : Nov 12 15:58:39 2026 GMT
        Subject: CN=71B97C72BE073EB3812C0A53A8FD7E3C5CD6CAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:bd:18:fc:74:6c:63:0e:9a:ce:70:e1:4c:
                    a0:0a:63:e4:85:a1:c8:e4:24:7a:cd:dd:1a:58:24:
                    05:b3:85:fc:1f:6f:03:77:3c:ed:9b:5d:c6:c2:0a:
                    73:83:33:44:6c:83:3d:ec:9b:84:36:9c:70:86:cf:
                    c7:f5:8d:cc:8b:eb:26:89:a0:3b:b6:af:f2:94:2a:
                    01:3f:73:3f:93:54:5b:58:92:2b:4d:98:39:26:e7:
                    60:47:84:8d:be:ac:9c:dc:00:3f:bd:fc:d8:ed:01:
                    47:cb:35:27:05:9e:cf:a3:e2:12:fa:dc:95:c5:de:
                    7e:84:81:96:c5:41:48:bc:f9:e4:0c:a5:5c:f8:e5:
                    19:7e:86:97:d1:36:5d:e9:ea:15:46:7d:79:7d:49:
                    e7:2d:97:f1:f7:c7:55:f9:21:c7:4c:2a:fe:43:a3:
                    3a:08:e4:ff:1b:cd:f1:da:c0:6f:6b:13:30:d0:8d:
                    94:79:0e:c0:de:86:db:c5:fb:2c:3f:e0:f8:12:aa:
                    cc:51:5f:b4:45:eb:7f:be:73:27:fd:e5:3a:26:b5:
                    83:57:51:da:0e:6a:00:9e:94:9a:c5:46:99:ce:f3:
                    31:d5:18:40:82:d7:84:65:16:f9:c9:c5:b0:f1:82:
                    26:0f:e1:e8:14:81:86:23:23:2c:4e:82:e6:3a:ff:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B9:7C:72:BE:07:3E:B3:81:2C:0A:53:A8:FD:7E:3C:5C:D6:CA:F4
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133382e3231392e3230382e302f32322d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:f5:be:63:90:56:39:91:cf:a7:dd:02:8f:4f:8f:78:dd:
         9e:13:34:96:a1:29:bd:7e:1a:1f:75:28:0f:e4:09:82:be:37:
         fc:3d:fc:cf:40:20:a9:58:5b:c1:c1:17:50:cf:77:a7:b7:10:
         d1:5c:fc:cb:fa:f0:1d:84:2e:a6:4a:c1:08:dc:62:31:96:aa:
         f1:8d:8c:1c:95:fd:f0:38:65:b2:48:6d:57:75:a5:22:c0:8a:
         82:fe:d3:f2:55:76:2d:1a:d9:67:8b:2e:b0:c1:cd:d4:b8:6c:
         3c:ea:70:58:b9:ce:b2:10:ba:cb:28:8e:ad:86:ac:65:a7:7d:
         c4:1b:9a:56:86:aa:92:ed:1d:b2:a7:8e:6f:de:f0:de:6a:b3:
         50:c3:db:23:ac:c4:04:6e:72:d0:26:4e:5c:af:06:09:5c:64:
         48:d5:79:53:6e:a9:f8:48:5a:5b:e1:7c:58:41:93:62:dd:e4:
         79:1b:07:3c:bb:04:f8:25:c3:02:74:5e:94:bb:4c:4f:ab:75:
         6f:f6:70:f4:4f:26:1c:46:84:a8:92:f8:24:d3:a3:3b:23:98:
         0c:e0:91:32:cc:6e:c6:35:b2:35:e5:9b:18:69:28:70:e9:ca:
         4f:4b:84:3d:03:15:f7:fc:40:9d:a4:cf:51:bb:eb:86:9d:6b:
         ac:9e:5e:79
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNWATtUO5+mj8uqqJsXM+pwmHxigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYzNDdBNEMyQUU0MDNDOTk2QTkzNzFFRjYyRjFDRTE5
RTMzRjYwNjAeFw0yNTExMTMxNTUzMzlaFw0yNjExMTIxNTU4MzlaMDMxMTAvBgNV
BAMTKDcxQjk3QzcyQkUwNzNFQjM4MTJDMEE1M0E4RkQ3RTNDNUNENkNBRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKr0Y/HRsYw6aznDhTKAKY+SF
ocjkJHrN3RpYJAWzhfwfbwN3PO2bXcbCCnODM0Rsgz3sm4Q2nHCGz8f1jcyL6yaJ
oDu2r/KUKgE/cz+TVFtYkitNmDkm52BHhI2+rJzcAD+9/NjtAUfLNScFns+j4hL6
3JXF3n6EgZbFQUi8+eQMpVz45Rl+hpfRNl3p6hVGfXl9Sectl/H3x1X5IcdMKv5D
ozoI5P8bzfHawG9rEzDQjZR5DsDehtvF+yw/4PgSqsxRX7RF63++cyf95TomtYNX
UdoOagCelJrFRpnO8zHVGECC14RlFvnJxbDxgiYP4egUgYYjIyxOguY6/3nlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcbl8cr4HPrOBLApTqP1+PFzWyvQwHwYDVR0j
BBgwFoAURjR6TCrkA8mWqTce9i8c4Z4z9gYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FVUzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpN
S2IvMC80NjM0N0E0QzJBRTQwM0M5OTZBOTM3MUVGNjJGMUNFMTlFMzNGNjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MzQ3QTRDMkFFNDAzQzk5
NkE5MzcxRUY2MkYxQ0UxOUUzM0Y2MDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhVVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzAv
MzEzMzM4MmUzMjMxMzkyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorb0DANBgkqhkiG9w0BAQsFAAOCAQEAWdD1
vmOQVjmRz6fdAo9Pj3jdnhM0lqEpvX4aH3UoD+QJgr43/D38z0AgqVhbwcEXUM93
p7cQ0Vz8y/rwHYQupkrBCNxiMZaq8Y2MHJX98DhlskhtV3WlIsCKgv7T8lV2LRrZ
Z4susMHN1LhsPOpwWLnOshC6yyiOrYasZad9xBuaVoaqku0dsqeOb97w3mqzUMPb
I6zEBG5y0CZOXK8GCVxkSNV5U26p+EhaW+F8WEGTYt3keRsHPLsE+CXDAnRelLtM
T6t1b/Zw9E8mHEaEqJL4JNOjOyOYDOCRMsxuxjWyNeWbGGkocOnKT0uEPQMV9/xA
naTPUbvrhp1rrJ5eeQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:13 2025 by rpki-client