This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa
File:                     3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa (raw, json)
Hash identifier:          u4rHraTWPIq7rQu3UdgSzY7SNqoqVAGqizj7e5slg3o=
Subject key identifier:   8C:58:9B:A9:22:67:FE:92:01:B3:BC:D8:6D:5B:92:81:15:C0:C2:3F
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       6FB96C87B9A6924814C3124E7284325EBA3041E1
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa
Signing time:             Tue 23 Dec 2025 17:48:02 +0000
ROA not before:           Tue 23 Dec 2025 17:43:02 +0000
ROA not after:            Tue 22 Dec 2026 17:48:02 +0000
asID:                     61876
IP address blocks:        201.150.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 23:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b9:6c:87:b9:a6:92:48:14:c3:12:4e:72:84:32:5e:ba:30:41:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Dec 23 17:43:02 2025 GMT
            Not After : Dec 22 17:48:02 2026 GMT
        Subject: CN=8C589BA92267FE9201B3BCD86D5B928115C0C23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:7d:07:22:0c:0a:b3:41:97:f5:d0:a7:e3:
                    8b:cf:56:22:7b:54:42:fe:c9:da:79:05:95:96:88:
                    bd:44:03:d9:4f:e0:e7:7c:7d:99:13:99:5f:73:67:
                    91:70:d4:e9:36:ea:cf:f3:1e:56:92:c3:0b:c2:d8:
                    01:58:67:f9:99:84:66:36:e7:dc:d2:cf:9b:3a:51:
                    45:ae:49:95:c8:b1:72:fd:d1:3d:d9:33:ef:b8:f8:
                    86:60:1e:d1:9c:dc:bf:c9:e3:34:8e:b7:eb:c4:8b:
                    50:23:88:84:c4:51:77:a2:fd:58:4b:bf:0c:86:df:
                    c9:c2:15:03:18:14:05:84:30:fb:00:39:a7:a5:91:
                    f0:e6:b9:55:01:02:0f:86:b4:0f:e1:53:31:fd:77:
                    ed:03:80:25:54:e3:d3:e0:af:c1:17:c5:05:d0:3f:
                    7d:9e:0c:f2:00:6b:b6:12:5a:99:b3:01:ac:53:f3:
                    cb:2e:00:7c:f0:cd:50:45:17:b9:30:19:06:16:b4:
                    f9:5a:43:0f:08:19:52:a6:67:f7:d2:62:8a:e9:a4:
                    b6:78:c1:7c:67:39:fb:50:9c:00:7b:74:1e:fd:bd:
                    df:6d:25:b6:fe:e5:2e:65:6c:a5:8a:2a:d3:0e:c4:
                    be:24:9c:18:86:28:11:bc:c2:f2:82:9f:82:14:22:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:9B:A9:22:67:FE:92:01:B3:BC:D8:6D:5B:92:81:15:C0:C2:3F
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:69:75:9e:d5:b7:06:65:4b:69:cc:71:d4:25:ae:dd:d8:d1:
         7c:4f:94:00:3b:d6:f6:cb:5f:34:c1:75:d7:b4:da:8d:60:14:
         cc:9f:bd:04:93:b7:7a:f9:0b:6b:e0:16:48:77:8f:31:ce:b1:
         b1:91:de:cf:09:9f:b6:3d:4f:26:7d:d3:35:1d:6a:8a:e6:d7:
         7e:e2:4b:09:3a:02:40:a7:40:2d:64:b4:51:f7:e7:99:8a:d4:
         d7:ab:bd:e1:92:d6:21:39:97:1d:ba:f5:b9:c2:d9:4a:02:bb:
         5c:68:5a:0a:e2:9e:f0:71:48:d4:5d:59:19:7a:d4:d8:67:a6:
         28:64:04:ef:8b:47:be:5a:9c:1b:8a:8b:8c:c4:db:ac:18:28:
         37:c8:45:d2:0c:6b:d0:01:7a:84:ab:4e:52:55:5e:56:8f:27:
         c3:eb:81:2d:8b:29:84:a6:b5:ca:49:8a:f0:a8:79:ec:d5:92:
         86:9a:5a:78:2b:f3:8b:1d:a9:25:53:bd:38:23:f1:7e:c2:91:
         d1:72:c7:10:cd:e6:1c:27:d8:22:98:c1:9e:11:51:ae:2d:a9:
         55:7f:d5:f4:19:63:92:46:96:99:e8:32:27:78:c0:95:62:07:
         ec:d0:32:a9:2c:fe:20:63:bd:13:02:7f:48:b4:b9:66:49:f7:
         0a:d0:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:19:32 2026 by rpki-client