This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa
File:                     3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          XDinHZnCJvzlW8VEE/huoFbpOykF7wx5jrIZ64PtZ2s=
Subject key identifier:   28:44:77:5E:14:AD:6E:7A:DA:FA:F7:24:F8:CE:CF:1B:23:8B:51:58
Certificate issuer:       /CN=FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772
Certificate serial:       114DCC3F453F231BD07DE16CDAD8926016516523
Authority key identifier: FE:5F:4F:A6:B8:8A:1C:2C:36:12:16:A2:D7:C5:0C:8D:96:9A:27:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa
Signing time:             Tue 09 Dec 2025 19:33:45 +0000
ROA not before:           Tue 09 Dec 2025 19:28:45 +0000
ROA not after:            Tue 08 Dec 2026 19:33:45 +0000
asID:                     262494
IP address blocks:        179.125.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4d:cc:3f:45:3f:23:1b:d0:7d:e1:6c:da:d8:92:60:16:51:65:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772
        Validity
            Not Before: Dec  9 19:28:45 2025 GMT
            Not After : Dec  8 19:33:45 2026 GMT
        Subject: CN=2844775E14AD6E7ADAFAF724F8CECF1B238B5158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:7e:28:51:59:11:b8:93:da:3f:bd:5b:65:
                    c6:2b:ba:d9:65:13:03:16:28:b3:c7:6c:00:fa:d3:
                    77:76:25:c7:c8:1c:f1:10:28:32:f4:13:cb:48:6b:
                    98:3a:d5:ae:fc:b5:69:ef:6e:34:e8:6e:9a:7c:50:
                    d7:f1:b1:41:6b:a6:30:39:5f:e0:66:1d:7c:60:f6:
                    8c:cc:67:65:71:3f:7a:6a:14:e9:4b:9a:27:ce:12:
                    60:17:b1:86:03:c2:ca:92:b1:31:c6:0e:b3:55:a8:
                    22:d0:47:3c:ea:b4:9b:9b:c3:ac:2c:9b:4a:1b:3f:
                    ce:7a:be:c8:41:85:ee:ae:a4:7d:6c:a1:92:b2:51:
                    cb:8a:d9:10:8b:15:fd:cd:0f:e5:6c:bc:a7:43:9b:
                    63:e3:fe:83:20:01:ca:75:20:b2:43:d1:7d:c5:94:
                    56:b1:5d:71:64:32:9c:14:d2:63:d0:35:9c:05:79:
                    ce:52:07:45:82:b8:a0:5f:e2:06:02:12:c7:5b:e6:
                    57:f3:28:cd:5e:25:ff:b3:5f:8d:25:6f:bd:ab:85:
                    fe:2d:b9:47:8d:33:c8:da:14:33:79:e9:93:81:d3:
                    00:c4:a6:a7:0c:a6:e6:8b:9d:16:1a:01:c6:be:c1:
                    83:8b:19:49:da:fd:58:87:67:1c:a6:10:db:36:89:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:44:77:5E:14:AD:6E:7A:DA:FA:F7:24:F8:CE:CF:1B:23:8B:51:58
            X509v3 Authority Key Identifier:
                keyid:FE:5F:4F:A6:B8:8A:1C:2C:36:12:16:A2:D7:C5:0C:8D:96:9A:27:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:82:55:06:87:8e:ca:0a:d3:59:54:ae:2a:f4:22:85:56:d1:
         b8:57:04:91:e0:4b:8b:6b:7d:50:30:69:cf:d1:c7:b8:16:2e:
         06:aa:de:ce:6e:1d:6d:db:5b:7b:e0:08:2e:da:7f:de:06:b2:
         e9:0d:f5:7b:bf:b1:fc:09:ec:35:40:91:54:cc:f8:a3:38:07:
         94:b8:48:aa:a1:11:07:68:8d:39:92:8e:bc:f1:94:60:88:e8:
         be:3b:be:50:6f:11:83:36:cd:d5:2e:8d:b3:08:fe:bb:45:d1:
         4d:f7:95:38:3a:e2:61:47:7d:9c:93:ea:f9:98:1b:21:40:86:
         fd:c7:65:79:62:fa:d0:4c:fa:e2:1f:bb:4f:c0:92:79:e9:55:
         1c:f4:dc:c2:0f:35:7c:d0:b2:dc:8c:4d:c9:e3:8f:d7:25:10:
         a4:11:0c:e5:a1:ac:69:38:ca:80:79:8e:ad:f5:a4:35:66:95:
         4e:67:47:8a:7a:72:92:a1:7f:62:dd:d9:b2:73:a7:c7:48:19:
         3c:db:fc:0a:61:cc:b2:94:a9:7b:89:52:f8:17:c7:83:7f:0a:
         d2:de:b9:bf:ad:00:32:f9:e6:0d:7f:22:0c:7b:7d:1e:f9:44:
         83:ca:70:01:23:22:10:71:71:cb:3d:6c:3c:e5:2f:fd:76:3a:
         e4:89:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:19:52 2025 by rpki-client