This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa (raw, json)
Hash identifier:          oUZXNFb2GR6UUeRTfeQToLXwsS/pEsCqQogh7JXARIY=
Subject key identifier:   AC:01:07:DD:D3:90:A5:D1:72:29:FD:07:E8:A1:47:13:64:79:2A:80
Certificate issuer:       /CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4
Certificate serial:       41BF6F3153A4FD50510EFD5290A7313457F0D50C
Authority key identifier: BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa
Signing time:             Mon 22 Dec 2025 11:40:23 +0000
ROA not before:           Mon 22 Dec 2025 11:35:23 +0000
ROA not after:            Mon 21 Dec 2026 11:40:23 +0000
asID:                     28191
IP address blocks:        186.193.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 06:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bf:6f:31:53:a4:fd:50:51:0e:fd:52:90:a7:31:34:57:f0:d5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4
        Validity
            Not Before: Dec 22 11:35:23 2025 GMT
            Not After : Dec 21 11:40:23 2026 GMT
        Subject: CN=AC0107DDD390A5D17229FD07E8A1471364792A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:86:8d:e9:ba:41:f2:19:db:e6:69:b5:01:
                    b4:8d:fd:a5:f7:05:ba:04:e8:6f:63:1e:79:d4:5a:
                    ec:2a:5a:ea:2d:38:dd:8b:6f:99:0d:8e:f5:2d:85:
                    a9:7b:65:77:3f:c7:cf:9d:da:ab:6a:1c:e3:c6:93:
                    bf:c8:01:df:15:2f:42:27:b2:9e:81:2a:63:40:c5:
                    75:18:e0:85:3d:2c:6d:0d:0c:a7:78:7d:d8:f8:46:
                    fe:5c:3b:4a:8d:d6:56:31:12:0e:f2:b7:9b:a8:31:
                    45:2a:a1:c7:24:9b:be:0e:de:61:d0:9e:5a:6c:0d:
                    8d:c3:63:90:3c:01:ff:09:07:c9:fd:18:25:6c:95:
                    74:23:8d:61:fd:e9:5d:07:b9:d6:14:f7:68:af:df:
                    b6:29:96:eb:f9:65:a1:15:fc:d4:8f:66:88:17:5a:
                    69:63:be:51:c8:fb:4e:3c:83:18:84:63:8a:4f:82:
                    96:5a:f8:25:83:8e:3a:de:a2:f9:c8:c3:ab:4d:1d:
                    6e:5f:32:c2:2a:c2:1a:e8:c3:76:48:fd:fb:fc:d2:
                    26:1f:65:71:51:5b:c5:bf:73:bf:71:53:f7:8d:3c:
                    5f:82:7e:40:77:80:fc:9f:31:1f:0a:ae:65:9e:83:
                    08:b3:03:df:69:65:fb:ee:18:d1:88:b3:a2:b6:bb:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:01:07:DD:D3:90:A5:D1:72:29:FD:07:E8:A1:47:13:64:79:2A:80
            X509v3 Authority Key Identifier:
                keyid:BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:69:65:ce:b1:e3:df:59:8a:34:f8:1f:59:96:94:81:11:
         bf:33:d0:63:d6:c8:c5:14:93:57:14:b3:55:fb:06:84:b1:89:
         ae:67:61:93:09:b1:50:0a:89:7f:24:8b:51:37:bf:f8:c1:88:
         65:1b:a7:ce:39:e7:57:1d:5f:60:33:66:e5:0f:99:83:b8:5a:
         7e:23:6b:86:96:b1:26:c9:dd:ef:e1:ed:11:e2:97:56:44:4d:
         d1:c0:d4:95:37:03:1b:54:6a:b1:63:68:f8:ae:25:2d:70:49:
         6e:96:72:4e:7c:bb:ea:f3:27:f3:55:dc:e5:7c:ca:cf:ee:06:
         55:7a:f9:1f:4a:06:67:5a:89:e0:28:df:59:c3:b6:dc:77:15:
         ba:5b:cd:21:ad:0f:f2:4e:b4:40:ec:dd:53:f6:f4:6a:c4:59:
         60:ec:15:c1:69:c3:f1:1d:ff:2c:1d:23:1e:dc:5a:06:55:27:
         28:81:a7:4a:e3:c5:9e:40:30:24:32:5b:58:9d:f4:53:06:b1:
         67:a6:99:40:fd:a3:f9:48:f8:07:cb:b4:1a:59:30:89:20:01:
         d9:56:99:b1:84:d1:9d:70:e3:5b:11:45:48:45:ae:1a:bd:8d:
         c2:5a:88:a5:cb:d9:c3:14:9e:00:2a:f3:7c:60:a0:4e:3e:49:
         ee:da:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:13:56 2025 by rpki-client