This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa
File:                     3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (raw, json)
Hash identifier:          0aFXlJkY7vY6nHQ13emZkyqJtImkUYXm8oiHUaeQtmM=
Subject key identifier:   B4:27:B3:E2:4C:01:60:5D:5D:4D:F0:B5:69:95:D1:30:1C:30:B2:A0
Certificate issuer:       /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial:       162970982D7507CC7A9B9917498DB69E5A0C7B2B
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa
Signing time:             Wed 10 Dec 2025 18:08:07 +0000
ROA not before:           Wed 10 Dec 2025 18:03:07 +0000
ROA not after:            Wed 09 Dec 2026 18:08:07 +0000
asID:                     262953
IP address blocks:        186.235.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
                          rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 03:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:29:70:98:2d:75:07:cc:7a:9b:99:17:49:8d:b6:9e:5a:0c:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Validity
            Not Before: Dec 10 18:03:07 2025 GMT
            Not After : Dec  9 18:08:07 2026 GMT
        Subject: CN=B427B3E24C01605D5D4DF0B56995D1301C30B2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:49:d1:15:ff:3e:99:1d:2c:4d:b5:47:a0:1f:
                    ec:78:1b:1a:87:3c:ff:7e:03:74:d7:2d:27:de:ae:
                    85:57:29:42:68:32:2a:ef:f1:43:a7:ad:1b:4c:cd:
                    98:83:96:54:eb:a4:22:29:68:98:13:40:0e:ca:43:
                    17:3b:2c:c3:e7:ee:b6:7a:68:6e:d4:5c:2b:28:8e:
                    4e:42:ff:d7:ff:4f:c3:66:29:fb:b7:46:05:2d:61:
                    ab:0b:fe:e9:d8:06:ab:e1:a8:b4:e8:c1:96:f8:87:
                    87:b5:aa:11:f8:48:61:dd:01:04:20:56:f2:7c:67:
                    b5:e5:2b:05:0c:79:8b:65:49:fb:f3:cd:e4:c5:4a:
                    ff:49:d3:69:79:b8:47:b8:a2:21:b1:33:c0:29:79:
                    be:83:0c:2e:42:af:e2:77:9d:b9:3f:05:c3:6a:a9:
                    32:06:49:cc:61:89:30:7d:15:38:b5:e1:2d:2d:e9:
                    39:ea:fe:eb:2f:b5:6b:c8:7b:4d:69:f0:11:b1:68:
                    40:9c:8a:a9:bf:12:03:15:03:de:cb:bc:7c:ad:fe:
                    ea:69:9b:9e:cf:6a:71:1f:af:55:9b:41:cc:75:08:
                    e1:ae:f6:cf:11:0f:97:ca:1c:c2:af:94:e8:eb:73:
                    17:5e:0d:05:6e:48:17:a3:48:71:ed:fc:f7:ed:5f:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:27:B3:E2:4C:01:60:5D:5D:4D:F0:B5:69:95:D1:30:1C:30:B2:A0
            X509v3 Authority Key Identifier:
                keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:50:c3:1a:a0:5a:80:5b:b1:ce:6e:da:8f:65:83:40:4a:
         78:8e:b5:dd:f1:82:97:90:96:29:7c:3e:3f:b7:7f:55:c0:fa:
         c2:ad:4b:df:c5:50:10:82:5c:f3:05:a8:9c:96:c1:d5:04:9d:
         97:d9:97:49:82:af:fa:ee:1e:85:00:2b:1a:9a:ff:8f:4b:c7:
         f4:d3:e0:e3:e5:fa:ef:a8:87:97:2d:27:05:2c:90:b5:36:74:
         7f:a4:0d:dd:67:09:0a:75:70:0c:2b:43:78:a9:c9:c0:20:8c:
         b4:80:f3:85:ff:f6:0f:29:d8:f6:cb:fa:dd:e2:6f:e7:8b:07:
         b1:7f:cd:c8:b2:70:02:fb:fa:de:3f:32:29:c6:8a:d6:6d:4d:
         17:ab:fd:93:41:1f:2d:36:e3:90:fa:e1:b1:6a:a7:6e:c6:d3:
         c7:24:66:b0:db:07:4f:3c:ba:62:41:fa:b8:39:0a:39:c9:e6:
         ca:96:97:1a:b4:41:36:70:15:8e:05:5c:89:52:8a:d4:64:0c:
         f2:03:1d:a0:97:b7:3f:fe:54:74:c2:76:13:6f:fd:8a:15:0d:
         c7:8b:82:1b:3f:c6:bb:28:51:fa:ec:33:c8:bf:80:0a:8b:68:
         8a:75:94:46:a5:ef:fc:64:62:4e:e1:49:22:12:92:00:b2:36:
         b8:a1:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:34:30 2025 by rpki-client