This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e31352e302f32342d3332203d3e20323734353638.roa
File:                     3138372e38372e31352e302f32342d3332203d3e20323734353638.roa (raw, json)
Hash identifier:          6R13uPstfpiNWcoz8V8MakZEPfERWsXHLZR6aF3//Hg=
Subject key identifier:   BE:C5:36:0D:B8:2C:92:83:38:9E:96:50:7F:7E:B6:69:4E:98:A2:90
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       30BBE13B28F99D92406A01C710C66B00B1D283F8
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e31352e302f32342d3332203d3e20323734353638.roa
Signing time:             Wed 03 Dec 2025 15:02:31 +0000
ROA not before:           Wed 03 Dec 2025 14:57:31 +0000
ROA not after:            Wed 02 Dec 2026 15:02:31 +0000
asID:                     274568
IP address blocks:        187.87.15.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bb:e1:3b:28:f9:9d:92:40:6a:01:c7:10:c6:6b:00:b1:d2:83:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Dec  3 14:57:31 2025 GMT
            Not After : Dec  2 15:02:31 2026 GMT
        Subject: CN=BEC5360DB82C9283389E96507F7EB6694E98A290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e3:ee:7d:c9:3d:cf:2e:ff:11:ca:15:1b:70:
                    7f:6f:01:3a:0e:fa:94:a1:12:bc:f7:30:b5:67:16:
                    34:59:a3:fe:48:28:68:1a:50:c0:aa:11:8d:37:64:
                    bc:f1:55:ed:3a:64:48:ba:59:6e:e3:d9:9e:7e:ae:
                    f9:71:61:7d:7d:13:5c:03:fb:0e:92:0f:14:bf:cd:
                    00:00:c6:60:67:a1:41:4c:12:98:4c:ec:c6:39:8d:
                    66:02:44:da:42:53:9a:29:8a:9d:e8:1a:1c:39:c6:
                    9c:a2:77:cd:1c:4a:fa:a9:ae:87:ea:bc:c7:d7:23:
                    f4:e0:05:66:50:82:dc:9e:4c:0e:5b:75:7a:42:82:
                    66:92:f3:21:39:ec:70:e4:a7:14:95:97:fd:09:5a:
                    6d:7c:18:8b:45:6f:d3:10:89:f8:dd:06:9f:a7:99:
                    42:34:46:4c:2b:e4:c7:82:25:0f:9a:ee:67:54:74:
                    c7:b8:01:38:43:3f:34:70:70:58:96:33:e0:31:0a:
                    46:70:e7:83:bb:5e:53:ea:37:18:f7:ca:c2:08:f6:
                    53:eb:b8:54:4f:51:27:8b:d8:cf:f4:8a:97:26:96:
                    b3:4c:ce:37:7f:e7:14:b2:ea:97:f0:0d:93:03:af:
                    4c:f9:9a:0b:c4:1e:ed:f8:5a:6f:6f:18:dc:75:cd:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C5:36:0D:B8:2C:92:83:38:9E:96:50:7F:7E:B6:69:4E:98:A2:90
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38372e31352e302f32342d3332203d3e20323734353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:77:66:96:97:40:bb:17:ab:55:9c:23:a5:e9:27:20:8e:
         e8:de:a4:bb:38:d9:ec:58:ef:ec:26:62:8d:0d:e1:64:20:3b:
         d3:13:06:f6:b2:41:86:39:ab:9b:b5:42:a9:a1:02:b4:05:38:
         94:32:e7:76:2a:8b:61:32:9e:69:3b:86:71:24:08:a0:16:74:
         dc:98:6c:68:97:a8:7b:8e:e9:4f:e1:37:6a:92:dd:f3:02:2c:
         df:36:d1:6e:58:c0:4c:ef:74:69:73:6d:77:88:8f:dd:f4:b5:
         29:42:20:35:e2:4a:58:df:c3:63:78:76:7d:52:5f:ab:c2:bc:
         78:d5:c5:77:95:5f:f9:3d:ea:ae:d8:87:41:04:e2:18:43:ab:
         7c:71:55:cb:27:24:f3:fe:fa:6e:99:1a:fa:2b:38:02:4f:d8:
         92:ab:12:7b:7b:b1:48:9a:04:04:c8:bd:91:1c:ff:f0:54:81:
         91:90:c9:48:13:cc:b0:b5:2a:95:3b:90:c9:ee:11:82:72:bc:
         fe:db:86:2e:18:7d:58:5b:d9:7e:86:ab:ba:82:19:94:7a:cf:
         7d:dc:d9:87:fc:17:9d:7c:2b:cd:33:a3:95:6e:4f:bd:d8:5e:
         4c:a1:e7:de:14:1c:dd:8a:74:e1:39:6d:c8:2d:68:9a:e7:4b:
         b1:95:28:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:04 2025 by rpki-client