This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa
File:                     3138362e3232362e302e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          a1mxRKc1cA4R1YCbcp4+aD+lO/Q7on//v6XybGKMi+I=
Subject key identifier:   B2:BD:AF:76:B6:E1:27:E0:49:35:3E:8C:AA:18:0C:F9:C1:4D:B5:D4
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       015F2792EF413F26EBBF548EE5F469BE8A216A20
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa
Signing time:             Fri 28 Nov 2025 18:08:21 +0000
ROA not before:           Fri 28 Nov 2025 18:03:21 +0000
ROA not after:            Fri 27 Nov 2026 18:08:21 +0000
asID:                     262773
IP address blocks:        186.226.0.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5f:27:92:ef:41:3f:26:eb:bf:54:8e:e5:f4:69:be:8a:21:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Nov 28 18:03:21 2025 GMT
            Not After : Nov 27 18:08:21 2026 GMT
        Subject: CN=B2BDAF76B6E127E049353E8CAA180CF9C14DB5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:18:90:57:ba:81:e0:d4:5e:48:17:dd:a2:
                    20:2f:df:8b:89:c5:b5:2c:7d:c4:14:4a:a4:92:a7:
                    0c:6f:c6:05:d0:14:af:2d:18:72:5a:37:4c:5c:06:
                    07:74:3c:ac:ae:c7:72:3d:5d:96:84:50:25:6b:d3:
                    ca:78:4c:d0:de:80:81:25:5e:3d:ae:5b:fe:66:a3:
                    a8:65:bc:62:15:ca:d1:3f:ea:dd:3e:2e:cd:e4:76:
                    b9:b8:c3:18:bf:f2:20:cc:7b:f7:be:3a:90:68:b5:
                    83:64:a0:98:85:47:38:a8:5a:48:6e:bf:6b:c6:e3:
                    ea:79:21:25:67:44:de:c2:76:9b:60:ae:53:36:6a:
                    69:cc:00:92:de:f9:fd:76:17:78:49:99:a3:8a:75:
                    7e:95:87:9e:61:c5:4a:c1:a5:bc:d6:19:3e:74:cc:
                    8c:6b:5d:aa:14:55:9f:5c:15:82:29:47:7b:57:8d:
                    a7:c2:ef:dc:e5:d4:5e:7f:d6:1e:8e:ed:2c:84:37:
                    74:ad:0f:b5:03:08:ad:3e:c7:3a:dc:d0:7c:68:11:
                    5a:42:86:27:06:bd:ea:fb:5d:ed:e3:66:14:62:83:
                    50:de:0b:f3:a4:95:5d:c1:2f:b9:e1:a0:58:a1:d9:
                    b7:f4:2a:df:2e:d9:0e:0d:07:1c:66:45:69:1b:25:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BD:AF:76:B6:E1:27:E0:49:35:3E:8C:AA:18:0C:F9:C1:4D:B5:D4
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:c7:41:db:d5:60:ad:28:f9:55:23:93:8d:2c:b1:a7:9a:
         2d:f2:14:8d:64:a1:fa:73:1e:a5:01:77:58:94:c5:7a:a8:78:
         30:7e:79:d8:06:ef:9a:3a:57:c5:95:a6:41:c6:c4:c7:d5:83:
         f9:a0:ef:d7:62:84:87:84:1b:63:90:54:86:33:77:73:08:b8:
         9c:65:8e:ee:8b:19:11:fb:bc:21:c6:3d:f7:d3:33:ac:f7:2f:
         a1:d6:a1:a9:68:d3:ad:76:40:f7:2d:3e:52:8e:bd:0e:81:af:
         35:fb:db:99:ed:e1:a1:a8:2c:a1:f6:49:eb:75:c9:2b:d3:f3:
         00:b5:59:f1:7d:ee:24:21:f4:95:ec:d6:89:73:64:b1:10:a6:
         f2:90:65:44:69:3d:53:a2:06:03:ea:ed:b0:1c:ae:42:2d:8f:
         5c:09:35:41:be:90:1b:ec:21:71:66:8a:a3:a5:3c:34:31:82:
         74:17:ec:b1:d9:74:d4:c4:04:95:0d:f9:f2:cc:f2:d8:e8:91:
         07:a6:50:56:96:3e:f1:41:0b:b4:47:94:5a:2c:5a:64:9a:3a:
         5e:e8:63:40:00:c9:40:ce:ef:e6:fb:fc:d6:8d:53:3f:70:ac:
         7a:69:6c:ff:24:23:fd:6a:42:aa:4c:6c:ab:14:b2:fd:0b:97:
         c5:c5:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:25 2025 by rpki-client