This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
File:                     3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa (raw, json)
Hash identifier:          /fiHBrrs/mzdmWUk0PhOCMSHQh3oOph8JHfnJWC5GmM=
Subject key identifier:   6E:4E:BD:0B:EB:F9:69:9E:EC:C8:0E:C3:7C:65:4A:32:8B:00:FE:15
Certificate issuer:       /CN=DFCCDF5F8AC5C763B5218011C9AC6FF566C78511
Certificate serial:       65A7497513FD7651CEDA868CA8FA37FA7C8DAB82
Authority key identifier: DF:CC:DF:5F:8A:C5:C7:63:B5:21:80:11:C9:AC:6F:F5:66:C7:85:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
Signing time:             Wed 10 Dec 2025 20:04:24 +0000
ROA not before:           Wed 10 Dec 2025 19:59:24 +0000
ROA not after:            Wed 09 Dec 2026 20:04:24 +0000
asID:                     271046
IP address blocks:        128.201.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.crl
                          rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 04:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a7:49:75:13:fd:76:51:ce:da:86:8c:a8:fa:37:fa:7c:8d:ab:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCCDF5F8AC5C763B5218011C9AC6FF566C78511
        Validity
            Not Before: Dec 10 19:59:24 2025 GMT
            Not After : Dec  9 20:04:24 2026 GMT
        Subject: CN=6E4EBD0BEBF9699EECC80EC37C654A328B00FE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:27:d8:db:87:89:71:32:f7:fe:7b:81:69:
                    aa:83:1a:30:be:d9:97:87:68:95:b4:f4:f2:f2:16:
                    7b:8f:b7:d1:74:22:44:23:ad:1c:bd:ab:6b:b4:e7:
                    05:dd:4f:cf:9b:36:00:ae:0d:ca:8b:e3:ae:3b:21:
                    9f:a1:5f:9b:ba:d8:1a:8f:91:40:62:a5:b6:2f:96:
                    bc:f8:d9:55:a9:dd:9d:d5:ee:76:1b:62:48:3c:37:
                    44:90:94:48:92:21:ee:04:a2:94:15:f1:15:1b:fe:
                    1b:4b:a7:d5:1e:6e:08:22:33:4e:97:06:5a:a8:45:
                    c3:f5:72:36:bd:b1:8e:75:29:50:55:3f:2d:81:dd:
                    14:1d:0d:a9:14:07:99:97:c7:6d:85:23:d9:ee:a4:
                    38:18:aa:3c:25:7e:12:40:94:0f:3e:c8:c1:8c:69:
                    87:97:fb:b1:dc:af:e2:56:f7:f4:51:47:60:40:10:
                    fc:5f:67:ee:68:b0:1d:11:81:10:97:cc:fa:45:09:
                    ae:2f:83:66:f2:92:3d:72:3b:11:c2:90:1e:c6:0f:
                    94:07:6a:cd:aa:40:e2:f6:30:c3:50:df:62:38:83:
                    23:b2:76:63:7e:4a:90:8c:1e:64:cf:0c:90:24:f7:
                    9c:b8:61:65:8c:5a:2c:83:fd:d6:03:65:12:ae:a0:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4E:BD:0B:EB:F9:69:9E:EC:C8:0E:C3:7C:65:4A:32:8B:00:FE:15
            X509v3 Authority Key Identifier:
                keyid:DF:CC:DF:5F:8A:C5:C7:63:B5:21:80:11:C9:AC:6F:F5:66:C7:85:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:40:d2:48:85:f7:9c:e2:e3:2d:48:e6:d7:7d:8c:97:db:
         73:ba:12:08:54:4b:de:44:59:c8:7e:41:94:2a:fd:04:99:2f:
         ef:9c:01:10:1c:de:aa:8a:73:79:fe:7b:6b:d0:c5:3f:d9:98:
         6d:98:26:1c:a2:90:bc:ef:e1:8f:eb:a7:e0:2d:3f:d3:6e:8e:
         f8:a7:51:f9:03:c1:03:ad:55:0f:3d:fe:23:19:05:e0:3c:43:
         7d:90:be:79:da:1a:68:32:61:21:21:5e:e0:33:e2:cd:ea:89:
         2b:e4:31:73:7a:3f:46:b1:19:d4:28:8d:4e:0e:de:53:e8:f4:
         99:d0:ea:78:86:cc:4d:fe:b4:dd:3b:c4:5b:63:93:6a:fd:c4:
         eb:72:32:a5:64:88:9c:84:d4:e6:33:97:9c:26:9f:c3:77:6c:
         20:3a:13:b4:c3:67:59:7a:4f:38:3a:2d:f9:0b:84:15:04:01:
         bf:a6:10:9e:d7:29:0e:20:7d:84:ae:6a:da:53:4f:28:c3:6c:
         61:ef:a8:df:55:b3:9e:d8:f8:0d:29:1a:1b:7f:04:15:26:94:
         40:12:03:6b:d8:36:c4:9b:38:84:c1:b0:73:30:83:0b:d4:80:
         e8:17:bd:cd:d7:03:dc:fa:b9:03:9d:37:52:51:fb:64:04:1b:
         cf:ef:31:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZadJdRP9dlHO2oaMqPo3+nyNq4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZDQ0RGNUY4QUM1Qzc2M0I1MjE4MDExQzlBQzZGRjU2
NkM3ODUxMTAeFw0yNTEyMTAxOTU5MjRaFw0yNjEyMDkyMDA0MjRaMDMxMTAvBgNV
BAMTKDZFNEVCRDBCRUJGOTY5OUVFQ0M4MEVDMzdDNjU0QTMyOEIwMEZFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURifY24eJcTL3/nuBaaqDGjC+
2ZeHaJW09PLyFnuPt9F0IkQjrRy9q2u05wXdT8+bNgCuDcqL4647IZ+hX5u62BqP
kUBipbYvlrz42VWp3Z3V7nYbYkg8N0SQlEiSIe4EopQV8RUb/htLp9UebggiM06X
BlqoRcP1cja9sY51KVBVPy2B3RQdDakUB5mXx22FI9nupDgYqjwlfhJAlA8+yMGM
aYeX+7Hcr+JW9/RRR2BAEPxfZ+5osB0RgRCXzPpFCa4vg2bykj1yOxHCkB7GD5QH
as2qQOL2MMNQ32I4gyOydmN+SpCMHmTPDJAk95y4YWWMWiyD/dYDZRKuoCsvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbk69C+v5aZ7syA7DfGVKMosA/hUwHwYDVR0j
BBgwFoAU38zfX4rFx2O1IYARyaxv9WbHhREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tlVXhTOGVZTTR4NGlFaUxWTkJkaDhZVlVvaDJDcEtNMVZzaXZlWjFQ
ZGUvMC9ERkNDREY1RjhBQzVDNzYzQjUyMTgwMTFDOUFDNkZGNTY2Qzc4NTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQ0NERjVGOEFDNUM3NjNC
NTIxODAxMUM5QUM2RkY1NjZDNzg1MTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drZVV4UzhlWU00eDRpRWlMVk5CZGg4WVZVb2gyQ3BLTTFWc2l2ZVoxUGRlLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMDM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKAyQwwDQYJKoZIhvcNAQELBQADggEBAIf7QNJI
hfec4uMtSObXfYyX23O6EghUS95EWch+QZQq/QSZL++cARAc3qqKc3n+e2vQxT/Z
mG2YJhyikLzv4Y/rp+AtP9NujvinUfkDwQOtVQ89/iMZBeA8Q32QvnnaGmgyYSEh
XuAz4s3qiSvkMXN6P0axGdQojU4O3lPo9JnQ6niGzE3+tN07xFtjk2r9xOtyMqVk
iJyE1OYzl5wmn8N3bCA6E7TDZ1l6Tzg6LfkLhBUEAb+mEJ7XKQ4gfYSuatpTTyjD
bGHvqN9Vs57Y+A0pGht/BBUmlEASA2vYNsSbOITBsHMwgwvUgOgXvc3XA9z6uQOd
N1JR+2QEG8/vMaI=
-----END CERTIFICATE-----
Generated at Wed Dec 17 21:44:46 2025 by rpki-client