This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa
File:                     3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa (raw, json)
Hash identifier:          8OJOKWjAfRhhiBdvdMwbSjW5k0rLkwZ+kcWKdnkPDyY=
Subject key identifier:   95:53:83:D6:9D:03:F7:16:BB:CD:23:FC:D0:64:EF:EE:A1:D9:DF:01
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       4BDDFC387B34112D44731A8CC9FC4CBFEA96229D
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa
Signing time:             Tue 23 Dec 2025 17:48:10 +0000
ROA not before:           Tue 23 Dec 2025 17:43:10 +0000
ROA not after:            Tue 22 Dec 2026 17:48:10 +0000
asID:                     61876
IP address blocks:        201.150.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 06:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:fc:38:7b:34:11:2d:44:73:1a:8c:c9:fc:4c:bf:ea:96:22:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Dec 23 17:43:10 2025 GMT
            Not After : Dec 22 17:48:10 2026 GMT
        Subject: CN=955383D69D03F716BBCD23FCD064EFEEA1D9DF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:25:24:3a:b9:10:59:b9:a9:be:aa:bd:31:
                    60:c5:c4:e5:5d:cb:41:ae:7c:ff:a7:8f:94:bc:e3:
                    f0:dd:64:ac:ed:f5:9b:9e:a6:b9:46:bd:f1:8c:d3:
                    52:9b:76:f9:99:66:34:8d:a5:ec:ee:74:92:28:05:
                    d7:ec:0e:08:a6:20:eb:07:69:10:b0:d7:68:d7:21:
                    67:25:b6:73:b4:22:82:b5:51:9b:bc:13:63:35:3f:
                    6f:7c:3d:fa:fd:97:1d:4e:ef:88:ed:ff:4e:51:3e:
                    ef:f7:16:ec:12:2c:70:05:ba:f9:97:8b:50:c6:25:
                    55:ab:d5:af:fa:e7:a4:2d:b9:88:bc:05:65:00:a7:
                    bc:05:bb:c0:40:ce:e0:e6:b3:82:46:c5:2e:ae:99:
                    5c:99:80:3a:b4:b7:34:43:dd:50:24:ef:2b:13:4d:
                    b9:26:d3:ba:98:1f:d8:8f:2f:34:91:48:3f:71:63:
                    f6:38:9c:e7:ad:a4:6e:9d:f6:71:37:d8:62:fd:75:
                    04:8a:d2:30:0d:a9:48:09:4c:1a:f8:d4:8d:91:4a:
                    0e:89:66:75:9a:2e:d3:e4:82:d3:45:98:c5:07:49:
                    a3:f0:92:8e:cc:20:a2:5a:59:db:fc:13:65:f4:8a:
                    6e:f0:a6:00:94:be:d9:a5:a5:87:a1:b6:13:94:82:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:53:83:D6:9D:03:F7:16:BB:CD:23:FC:D0:64:EF:EE:A1:D9:DF:01
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:93:68:c5:78:c8:35:0e:3f:a9:4d:31:13:42:dc:2b:5a:
         0f:d6:d3:da:ca:39:04:4c:61:53:85:42:57:bf:a5:69:e2:50:
         c7:0c:d5:f4:ea:1e:22:4c:a7:25:71:48:b5:50:35:eb:4f:94:
         61:02:71:62:9e:df:ee:de:b1:63:93:23:65:8f:0d:97:eb:a9:
         ff:e4:0e:a7:0c:84:40:f5:48:e6:ac:87:e2:d5:c6:6b:e8:58:
         94:c1:4b:20:95:e2:98:52:3b:2c:a2:ed:9e:13:9b:8c:83:aa:
         31:a0:9d:18:ae:4c:b2:8e:0c:30:5c:53:75:34:36:3b:55:95:
         3b:ac:ab:6c:17:29:bb:30:d8:0e:22:66:6c:ce:de:6d:aa:f4:
         0a:52:80:47:d5:55:0c:c1:16:39:fd:3b:2c:1d:64:59:ee:d8:
         16:da:f8:4e:bc:66:89:35:8d:28:7d:95:da:3b:37:2e:e7:9f:
         ff:92:f9:6d:54:8d:96:91:77:2f:25:be:30:ed:af:86:d1:eb:
         b1:ff:e3:be:79:dc:81:5b:a5:04:58:62:50:f0:27:08:41:76:
         dd:09:cb:0e:5b:c2:ee:0e:13:43:6d:c6:85:08:cb:25:3f:81:
         52:7d:f9:94:1c:9c:fd:b2:a7:a8:bb:bd:a4:43:01:e4:5b:14:
         f0:40:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:46:39 2026 by rpki-client