This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa
File:                     3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa (raw, json)
Hash identifier:          ImHbsMvj0UToI7npV77eElHH/zhoRkqO3ncGice9uG4=
Subject key identifier:   C9:FE:D7:65:D5:D7:B2:87:B2:9F:B4:C7:9E:EB:E3:8A:0B:65:78:C1
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       11F0A1F79D89CC14D99E3B505F0D6FAD63AE43B2
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa
Signing time:             Tue 23 Dec 2025 17:47:59 +0000
ROA not before:           Tue 23 Dec 2025 17:42:59 +0000
ROA not after:            Tue 22 Dec 2026 17:47:59 +0000
asID:                     61876
IP address blocks:        201.150.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 06:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f0:a1:f7:9d:89:cc:14:d9:9e:3b:50:5f:0d:6f:ad:63:ae:43:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Dec 23 17:42:59 2025 GMT
            Not After : Dec 22 17:47:59 2026 GMT
        Subject: CN=C9FED765D5D7B287B29FB4C79EEBE38A0B6578C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:6c:f7:83:ff:0c:d0:09:56:aa:ed:15:7c:
                    f4:48:dc:04:18:0a:ad:31:59:10:2e:78:62:bf:ae:
                    a4:f1:2d:57:5d:fe:6b:a3:a8:22:b0:2f:13:ad:32:
                    27:ac:3f:4f:c1:ed:27:7b:6f:f8:c3:64:71:6b:40:
                    9d:87:1c:8a:f6:c6:80:09:cd:92:71:37:5f:ee:b1:
                    49:56:b0:b2:fb:0d:80:04:92:f7:62:32:3e:24:de:
                    c3:df:d9:da:be:c9:9c:ab:0d:e1:02:c7:2d:44:13:
                    a9:1c:ab:2c:66:30:3d:64:61:16:53:fd:0d:58:b2:
                    2e:7a:a8:17:62:75:38:ee:96:2d:84:18:11:bf:e0:
                    d4:e6:9e:23:d4:97:da:f3:5b:8f:9e:fa:17:32:70:
                    e6:63:0d:cf:b9:79:e7:d5:2f:48:32:d0:61:ca:5c:
                    94:cf:46:fd:fe:03:d9:ad:a4:7f:73:ab:7f:e4:54:
                    09:10:fb:5c:ce:b5:62:78:e9:38:21:5d:20:8e:db:
                    61:5d:ab:83:f5:0a:e9:25:39:62:99:b8:77:19:83:
                    e0:51:d2:e6:8e:35:c7:51:67:2d:fc:88:01:72:44:
                    6d:67:2e:e6:91:9f:cc:01:eb:27:e9:05:f2:24:a2:
                    5e:c1:ce:aa:eb:2e:e9:4b:c4:73:af:b9:b3:b0:43:
                    ba:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:D7:65:D5:D7:B2:87:B2:9F:B4:C7:9E:EB:E3:8A:0B:65:78:C1
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:57:90:65:ed:c4:da:f2:de:7e:11:93:2c:77:d5:13:00:49:
         5d:2c:bf:24:36:60:c8:ca:b1:00:9c:3c:23:e3:53:50:8d:f0:
         fc:49:93:e5:a1:af:a1:a8:4b:58:be:0c:bf:c9:83:ca:23:c3:
         22:8a:17:5b:8f:a9:a2:27:83:46:06:d6:a8:dd:b1:39:ee:0d:
         01:a2:f9:e6:0c:96:87:e9:cc:6d:f9:0c:79:97:2c:7a:88:fa:
         b4:a7:df:e4:3f:69:23:72:96:10:33:f9:65:73:69:30:05:ab:
         ad:cc:ed:df:7e:69:47:fb:b2:93:82:e9:71:3e:7b:e7:32:84:
         35:dc:bd:1c:88:f2:dc:fd:e9:bb:07:32:af:32:63:09:6f:57:
         78:98:92:3e:ee:36:5c:8b:37:50:86:33:d1:4d:d6:33:16:f2:
         98:c6:ce:b1:48:8c:c7:bf:92:43:77:ef:8b:f3:1b:02:7b:78:
         0b:3e:2b:74:8f:3c:2b:48:85:d9:7a:21:d3:cb:01:f3:2a:00:
         38:01:f8:cc:11:e6:51:65:81:61:89:5e:75:72:e5:86:71:e1:
         fa:02:6c:63:0f:33:80:ed:04:ba:08:18:6d:d9:4b:cf:08:80:
         45:79:97:75:84:e2:02:1d:c1:1a:d1:37:6f:46:40:67:00:03:
         7c:e6:80:70
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEfCh952JzBTZnjtQXw1vrWOuQ7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEMjI1NzY4OUVFODNEQjA5NDgzOUQyMDA1RkMzMzZD
QzkzODBBQzAeFw0yNTEyMjMxNzQyNTlaFw0yNjEyMjIxNzQ3NTlaMDMxMTAvBgNV
BAMTKEM5RkVENzY1RDVEN0IyODdCMjlGQjRDNzlFRUJFMzhBMEI2NTc4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmiWz3g/8M0AlWqu0VfPRI3AQY
Cq0xWRAueGK/rqTxLVdd/mujqCKwLxOtMiesP0/B7Sd7b/jDZHFrQJ2HHIr2xoAJ
zZJxN1/usUlWsLL7DYAEkvdiMj4k3sPf2dq+yZyrDeECxy1EE6kcqyxmMD1kYRZT
/Q1Ysi56qBdidTjuli2EGBG/4NTmniPUl9rzW4+e+hcycOZjDc+5eefVL0gy0GHK
XJTPRv3+A9mtpH9zq3/kVAkQ+1zOtWJ46TghXSCO22Fdq4P1CuklOWKZuHcZg+BR
0uaONcdRZy38iAFyRG1nLuaRn8wB6yfpBfIkol7BzqrrLulLxHOvubOwQ7oRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyf7XZdXXsoeyn7THnuvjigtleMEwHwYDVR0j
BBgwFoAUT9Ildonug9sJSDnSAF/DNsyTgKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnZQVlY4Q3V6MVhDN0hHclNrYlduanNRUTNWZzRrd2RxZGJqanVBcHhQ
c1YvMC80RkQyMjU3Njg5RUU4M0RCMDk0ODM5RDIwMDVGQzMzNkNDOTM4MEFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRDIyNTc2ODlFRTgzREIw
OTQ4MzlEMjAwNUZDMzM2Q0M5MzgwQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ2UFZWOEN1ejFYQzdIR3JTa2JXbmpzUVEzVmc0a3dkcWRiamp1QXB4UHNWLzAv
MzIzMDMxMmUzMTM1MzAyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlnwwDQYJKoZIhvcNAQELBQADggEBANNXkGXt
xNry3n4Rkyx31RMASV0svyQ2YMjKsQCcPCPjU1CN8PxJk+Whr6GoS1i+DL/Jg8oj
wyKKF1uPqaIng0YG1qjdsTnuDQGi+eYMlofpzG35DHmXLHqI+rSn3+Q/aSNylhAz
+WVzaTAFq63M7d9+aUf7spOC6XE+e+cyhDXcvRyI8tz96bsHMq8yYwlvV3iYkj7u
NlyLN1CGM9FN1jMW8pjGzrFIjMe/kkN374vzGwJ7eAs+K3SPPCtIhdl6IdPLAfMq
ADgB+MwR5lFlgWGJXnVy5YZx4foCbGMPM4DtBLoIGG3ZS88IgEV5l3WE4gIdwRrR
N29GQGcAA3zmgHA=
-----END CERTIFICATE-----
Generated at Sun Jan 11 11:29:32 2026 by rpki-client