This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e302e302f32302d3233203d3e20323632373733.roa
File:                     3138372e38372e302e302f32302d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          lbDqX4nAVUbcfcAvXXpMqNmBDyHPG73JSYp1UwIXmlg=
Subject key identifier:   B2:D4:AA:F2:21:74:CA:DF:B6:F2:67:F8:71:3B:12:DF:CF:08:59:48
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       3A07C62F8EFF0DCAFB939FAC5DFA7A2AB11800BC
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e302e302f32302d3233203d3e20323632373733.roa
Signing time:             Wed 03 Dec 2025 15:03:11 +0000
ROA not before:           Wed 03 Dec 2025 14:58:11 +0000
ROA not after:            Wed 02 Dec 2026 15:03:11 +0000
asID:                     262773
IP address blocks:        187.87.0.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:c6:2f:8e:ff:0d:ca:fb:93:9f:ac:5d:fa:7a:2a:b1:18:00:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Dec  3 14:58:11 2025 GMT
            Not After : Dec  2 15:03:11 2026 GMT
        Subject: CN=B2D4AAF22174CADFB6F267F8713B12DFCF085948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:e2:66:c1:b8:e3:8c:2f:ba:86:86:e7:24:
                    aa:70:66:42:20:35:6b:6e:af:52:39:52:22:12:fc:
                    04:46:56:a3:1f:7f:89:ea:3f:8a:a3:97:70:54:dc:
                    a6:ad:78:c4:1e:57:51:29:1d:ca:77:09:9d:6c:09:
                    a7:ea:31:de:02:36:e3:01:ea:97:7a:41:b9:28:3e:
                    f3:9a:21:9b:63:21:b9:f7:63:9c:b8:cf:53:6d:7f:
                    d0:c9:d1:65:a8:90:da:8e:45:dc:86:3f:59:00:0d:
                    b1:66:8b:06:03:9f:fc:c6:01:ef:3f:c7:06:e3:08:
                    fa:f1:01:98:9f:f6:dc:6f:84:3c:0f:32:14:1b:3a:
                    a7:63:a5:b6:a2:f1:32:1d:d4:ca:99:49:4a:5c:cc:
                    5a:6d:7b:1f:cf:fe:ea:1d:da:aa:8d:76:b3:05:fb:
                    de:dd:12:9c:90:6f:c5:45:0e:d5:cd:8c:ce:63:5a:
                    16:21:e7:24:5f:3b:9a:8b:2e:8b:b3:15:a4:1b:7a:
                    a1:ed:d6:0d:00:fe:91:a9:d0:ca:6e:33:b3:04:ac:
                    12:61:04:5c:6b:9a:ae:06:c9:2e:e2:54:82:51:7d:
                    b9:32:23:b4:00:25:70:8c:26:8f:d5:a9:61:df:e1:
                    d4:37:95:66:5d:8a:97:2c:2b:17:d6:8e:8f:03:fb:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:AA:F2:21:74:CA:DF:B6:F2:67:F8:71:3B:12:DF:CF:08:59:48
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e302e302f32302d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cf:63:c6:a0:e0:38:d6:f2:00:e4:de:28:f4:58:93:30:4e:17:
         3c:43:c0:5d:45:9d:40:b9:86:e8:43:54:63:8b:5c:35:f9:90:
         65:a3:62:41:ac:96:56:26:c0:57:b2:28:59:04:b0:10:cb:fd:
         30:03:b4:ef:c2:1e:ad:38:1f:3b:98:de:da:2e:9e:ee:5e:3a:
         a1:e2:81:af:5c:ea:7d:2e:14:16:69:31:72:be:4d:5b:89:c0:
         70:f4:52:21:7d:3c:bd:3f:63:11:a9:e3:4b:2b:7d:b6:37:6b:
         d7:bd:11:3b:e8:31:bc:7a:a4:68:c2:a9:66:f3:bc:52:cc:49:
         b7:50:80:25:ec:03:a7:7b:f6:f0:e8:65:88:52:65:28:8b:b0:
         49:5e:77:20:fb:3f:77:2d:f8:e5:ff:ea:00:1b:a6:67:46:75:
         37:34:ba:66:c8:70:c6:c9:8a:52:57:4b:82:70:a0:e6:5e:60:
         31:15:8a:80:4e:b2:01:e4:ee:ec:66:e4:5d:e3:a4:50:f8:57:
         17:bf:3e:dd:81:c8:84:5d:4f:52:4a:e8:15:1b:27:52:4c:a1:
         06:6d:a6:a6:d8:c4:ad:59:ad:a6:7c:03:2e:92:f7:c4:b4:66:
         ca:7a:4c:a9:27:e9:77:db:2b:85:cc:d7:af:2c:ff:3f:36:2c:
         1a:e7:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:50 2025 by rpki-client