This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e39352e3232342e302f31392d3332203d3e20323632373733.roa
File:                     3138372e39352e3232342e302f31392d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          Ehi+lZYsDbnLWQL6/cgvY/a9kz1m0l8jx2fN2Rnm26E=
Subject key identifier:   00:68:5C:44:83:91:73:9F:C5:26:B9:39:5A:49:45:9A:74:1A:AF:0F
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       1B8B8E161B9A25E9337AFBD99020C8D1259AA169
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e39352e3232342e302f31392d3332203d3e20323632373733.roa
Signing time:             Fri 28 Nov 2025 18:08:18 +0000
ROA not before:           Fri 28 Nov 2025 18:03:18 +0000
ROA not after:            Fri 27 Nov 2026 18:08:18 +0000
asID:                     262773
IP address blocks:        187.95.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8b:8e:16:1b:9a:25:e9:33:7a:fb:d9:90:20:c8:d1:25:9a:a1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Nov 28 18:03:18 2025 GMT
            Not After : Nov 27 18:08:18 2026 GMT
        Subject: CN=00685C448391739FC526B9395A49459A741AAF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:57:97:7e:47:e7:0b:f6:fe:e2:1a:b2:6e:
                    77:0a:f7:cb:c5:5d:61:ac:b7:28:d8:c7:77:b5:1d:
                    e1:ec:ea:d7:61:1b:31:75:3b:5b:52:f8:f5:36:05:
                    53:8c:46:b9:bd:1a:9a:9d:85:f4:ef:d9:89:a6:de:
                    99:f4:81:70:ac:78:47:59:88:62:88:36:a5:57:f4:
                    71:fe:f4:54:dd:94:73:60:65:11:70:12:93:17:a0:
                    cc:be:2a:83:d7:82:7a:66:d6:03:91:05:6d:cc:04:
                    95:28:67:4f:d8:31:ae:a3:ec:11:11:ea:01:8b:38:
                    b8:4a:d0:46:5b:c8:55:28:d9:ca:b4:fd:ba:84:8b:
                    35:1d:c3:f3:ad:c3:f2:ba:81:17:bf:f4:f1:44:00:
                    71:a9:ee:b7:84:ec:55:6b:ad:79:1d:60:90:a5:83:
                    6f:4d:54:27:39:d6:dd:5c:de:3e:ab:96:5f:74:ee:
                    5f:4e:0f:a7:a6:a2:9e:77:0f:47:2d:b6:d4:60:fe:
                    36:6b:b7:9a:95:e6:21:62:e7:58:07:cd:54:08:64:
                    19:33:a3:18:b8:b0:ce:59:79:07:ad:19:36:53:f1:
                    77:41:01:20:2b:e1:1c:31:95:98:01:2c:0d:20:73:
                    11:9d:16:fc:d1:75:71:a2:6b:0f:2f:8c:b0:76:ae:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:68:5C:44:83:91:73:9F:C5:26:B9:39:5A:49:45:9A:74:1A:AF:0F
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e39352e3232342e302f31392d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:c2:cd:2f:2e:76:98:a7:49:e3:e5:73:26:b4:84:48:89:
         f8:a9:bc:22:5a:a4:b3:d6:bf:77:3a:5f:6e:b8:1e:07:0b:3f:
         a7:a4:2e:0f:1e:58:24:36:e3:2f:30:9b:00:2b:1e:00:97:6d:
         b7:fe:44:8c:a7:f5:67:63:67:cf:ba:64:dd:de:b8:2b:9c:4a:
         67:bc:00:ab:cd:13:ce:6a:3a:3b:ab:5c:17:3a:f6:e8:11:ec:
         bc:b2:14:72:3a:09:11:4a:04:8c:c0:c5:86:0a:cb:f2:1a:d2:
         47:30:fb:fc:15:5a:35:5a:51:8e:5f:13:69:e2:1b:82:ef:9a:
         55:67:6a:ed:84:50:54:e8:50:ba:50:e5:47:11:b8:cb:8b:b8:
         76:1f:96:49:c3:f3:7e:d4:7e:48:ac:88:d2:12:a8:07:86:2e:
         2e:62:83:f4:7f:ef:bd:c8:13:2a:c5:ca:0a:33:7d:90:dd:32:
         c4:17:fa:d4:d8:03:88:f1:97:f0:85:f8:ad:03:ab:5c:b3:16:
         c0:cf:9c:c9:32:31:ad:11:46:33:c5:62:ae:6e:8c:9c:e7:24:
         d1:06:03:8f:6c:76:60:8b:e6:1a:99:25:53:ed:3a:f0:8a:d6:
         15:32:32:6f:77:bd:2b:db:82:53:40:1d:b0:f8:3b:09:2c:d9:
         16:86:71:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG4uOFhuaJekzevvZkCDI0SWaoWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1
NERCMjY2QjAeFw0yNTExMjgxODAzMThaFw0yNjExMjcxODA4MThaMDMxMTAvBgNV
BAMTKDAwNjg1QzQ0ODM5MTczOUZDNTI2QjkzOTVBNDk0NTlBNzQxQUFGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhleXfkfnC/b+4hqybncK98vF
XWGstyjYx3e1HeHs6tdhGzF1O1tS+PU2BVOMRrm9GpqdhfTv2Ymm3pn0gXCseEdZ
iGKINqVX9HH+9FTdlHNgZRFwEpMXoMy+KoPXgnpm1gORBW3MBJUoZ0/YMa6j7BER
6gGLOLhK0EZbyFUo2cq0/bqEizUdw/Otw/K6gRe/9PFEAHGp7reE7FVrrXkdYJCl
g29NVCc51t1c3j6rll907l9OD6emop53D0ctttRg/jZrt5qV5iFi51gHzVQIZBkz
oxi4sM5ZeQetGTZT8XdBASAr4RwxlZgBLA0gcxGdFvzRdXGiaw8vjLB2rtAVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAGhcRIORc5/FJrk5WklFmnQarw8wHwYDVR0j
BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE
OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzODM3MmUzOTM1MmUzMjMyMzQyZTMwMmYzMTM5MmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW7X+AwDQYJKoZIhvcNAQELBQADggEBAFjPws0v
LnaYp0nj5XMmtIRIifipvCJapLPWv3c6X264HgcLP6ekLg8eWCQ24y8wmwArHgCX
bbf+RIyn9WdjZ8+6ZN3euCucSme8AKvNE85qOjurXBc69ugR7LyyFHI6CRFKBIzA
xYYKy/Ia0kcw+/wVWjVaUY5fE2niG4LvmlVnau2EUFToULpQ5UcRuMuLuHYflknD
837UfkisiNISqAeGLi5ig/R/773IEyrFygozfZDdMsQX+tTYA4jxl/CF+K0Dq1yz
FsDPnMkyMa0RRjPFYq5ujJznJNEGA49sdmCL5hqZJVPtOvCK1hUyMm93vSvbglNA
HbD4Owks2RaGcQs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:58 2025 by rpki-client