This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/3138372e38362e3136332e302f32342d3234203d3e20323733343137.roa
File:                     3138372e38362e3136332e302f32342d3234203d3e20323733343137.roa (raw, json)
Hash identifier:          yuTehaC3awz4SgrpHQQR/vhuJWUXYI7QsYSmBFNeDDs=
Subject key identifier:   85:72:4D:F2:BF:75:BE:06:1E:EC:AF:8E:71:9D:09:1C:CE:22:4E:05
Certificate issuer:       /CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
Certificate serial:       3359E82849E07059CC4AB64D7CC31D69329C3C10
Authority key identifier: 6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/3138372e38362e3136332e302f32342d3234203d3e20323733343137.roa
Signing time:             Wed 17 Dec 2025 16:20:17 +0000
ROA not before:           Wed 17 Dec 2025 16:15:17 +0000
ROA not after:            Wed 16 Dec 2026 16:20:17 +0000
asID:                     273417
IP address blocks:        187.86.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 18:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:59:e8:28:49:e0:70:59:cc:4a:b6:4d:7c:c3:1d:69:32:9c:3c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
        Validity
            Not Before: Dec 17 16:15:17 2025 GMT
            Not After : Dec 16 16:20:17 2026 GMT
        Subject: CN=85724DF2BF75BE061EECAF8E719D091CCE224E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:8a:d6:43:41:8a:97:eb:bf:af:c6:d8:db:
                    19:96:07:29:e6:b1:6f:08:06:30:1a:c4:8e:1d:bf:
                    df:27:75:67:5e:3f:d0:1c:02:18:79:5b:d0:69:3a:
                    f0:40:0f:b4:2c:c5:04:eb:2b:66:76:b4:e2:df:ce:
                    17:15:96:92:e7:6e:ed:91:01:e0:70:a7:7b:c6:2a:
                    8e:59:13:58:ca:8c:68:97:ed:91:a1:83:76:87:52:
                    6a:cc:84:10:35:0f:41:c1:69:dd:65:3a:6a:89:dc:
                    2f:d4:7a:be:8e:9e:3d:64:30:84:d0:c6:b0:9d:d7:
                    05:55:40:06:2c:70:46:da:07:c7:ee:a9:f4:4b:0d:
                    7a:75:20:23:1b:f0:8b:f9:78:b2:cd:e0:ae:ff:f4:
                    91:7d:4a:a0:4c:82:13:01:1c:fc:30:2e:9b:0c:43:
                    ac:88:cb:d7:2d:40:13:ae:e5:6e:04:d0:cc:89:86:
                    c6:9f:8b:83:6a:b2:7b:3f:66:db:fe:e0:ac:4c:d4:
                    e3:40:45:90:ea:e6:72:bc:7f:c8:1b:48:6b:a3:5c:
                    50:7f:1e:3a:cf:39:04:00:5b:ba:87:d6:48:35:87:
                    98:e3:d0:f1:c6:08:79:ac:55:76:1f:0a:6c:9e:e6:
                    3e:9a:49:42:23:19:ee:cc:d1:eb:1a:6d:62:dc:73:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:4D:F2:BF:75:BE:06:1E:EC:AF:8E:71:9D:09:1C:CE:22:4E:05
            X509v3 Authority Key Identifier:
                keyid:6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/3138372e38362e3136332e302f32342d3234203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:18:30:ee:95:10:a3:c2:04:ad:3c:c5:2d:e9:94:b2:54:7a:
         a0:de:62:f7:9e:92:4e:2e:9b:b1:d9:a5:44:19:ec:68:a6:de:
         89:4d:c1:c9:57:df:a3:7b:a3:37:74:9b:a7:ee:07:d4:c7:a4:
         99:09:4a:07:c3:37:b2:c8:f8:ef:d5:0c:83:bb:3c:95:b8:a4:
         64:8b:04:79:fe:9b:3f:87:b9:9e:c4:a8:22:a3:e1:18:7a:a5:
         67:80:18:16:ea:b6:7f:b1:12:00:d9:4e:6c:79:f2:6a:d6:36:
         d1:59:24:8e:ec:f1:61:f4:fd:f3:d8:66:c5:a6:ef:28:45:33:
         47:21:d0:35:c4:de:25:37:52:81:7d:1e:bf:30:8d:81:79:73:
         fb:d5:92:9f:69:4b:08:3b:97:2b:bf:0a:b4:c6:5a:b4:a2:c5:
         f8:b9:f8:47:9c:38:b6:67:3d:02:da:84:4d:d1:6d:69:92:d7:
         c4:2a:56:68:37:39:22:79:16:bf:51:a3:3a:9e:a7:47:a2:fc:
         10:01:ad:76:ef:36:f5:31:11:d4:43:5f:af:96:8d:2a:29:c7:
         68:69:b9:07:ca:36:a4:66:82:fc:63:c7:eb:97:7d:ac:30:37:
         1a:32:d9:f2:1a:7c:c4:8b:86:9e:cc:52:b5:db:1f:2f:27:86:
         1e:98:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:16:17 2025 by rpki-client