This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa
File:                     3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa (raw, json)
Hash identifier:          gJgV4yUXgG14U7CZGJVXGtp8wH7thICtVFWRoJTUaWo=
Subject key identifier:   86:4F:91:01:00:32:4F:8E:95:C0:CD:69:4A:40:88:23:D4:44:BB:08
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       0B39D4427AC0DD50C357077411186AB618543DA4
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa
Signing time:             Tue 23 Dec 2025 17:48:00 +0000
ROA not before:           Tue 23 Dec 2025 17:43:00 +0000
ROA not after:            Tue 22 Dec 2026 17:48:00 +0000
asID:                     61876
IP address blocks:        201.150.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 14:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:39:d4:42:7a:c0:dd:50:c3:57:07:74:11:18:6a:b6:18:54:3d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Dec 23 17:43:00 2025 GMT
            Not After : Dec 22 17:48:00 2026 GMT
        Subject: CN=864F910100324F8E95C0CD694A408823D444BB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:73:cc:75:e3:ed:1b:76:60:28:65:c8:aa:
                    83:e6:b4:fd:3e:c8:86:46:dc:40:c9:62:f4:f6:93:
                    4d:20:8b:98:04:ac:fe:0a:c9:5b:21:24:04:0a:ae:
                    a2:43:73:62:fc:33:8f:46:1e:ec:e4:31:1a:69:d5:
                    13:df:d3:d0:5a:76:1f:00:a6:c0:75:d0:6c:fe:9d:
                    1d:ea:68:d8:5f:66:04:31:d7:a1:f1:27:df:18:37:
                    f3:49:62:f6:6e:06:cd:8c:3c:db:6d:68:ec:39:d6:
                    87:1d:13:eb:e9:29:7b:52:f1:50:22:81:5a:9d:e8:
                    30:63:82:a1:ab:f8:a7:30:27:35:ee:33:83:f0:6f:
                    1f:ef:ce:49:07:88:4b:fb:33:44:24:c9:b3:11:63:
                    c3:01:77:95:fc:a5:a0:67:30:ca:dc:64:3f:34:e0:
                    2f:04:76:8b:35:d3:14:e3:17:ab:52:86:13:06:0e:
                    20:1d:2f:4b:a4:dd:a6:22:76:af:7c:c5:db:f5:1a:
                    a1:11:3c:76:e3:e4:ef:be:12:29:44:c9:5f:05:c3:
                    df:41:0b:b1:d8:73:24:f8:73:11:02:43:d1:d2:1c:
                    a4:95:7b:08:de:9e:58:f2:cb:5e:ec:b4:19:ba:71:
                    1d:b4:59:e0:0d:66:21:0b:80:52:14:92:c5:ea:e8:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:91:01:00:32:4F:8E:95:C0:CD:69:4A:40:88:23:D4:44:BB:08
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:56:39:f9:82:f4:73:b7:bd:ea:19:8b:c4:76:99:36:d0:54:
         95:44:1c:e5:e3:36:c7:13:35:29:2c:57:44:9d:8e:5b:74:39:
         a9:eb:a9:c9:14:27:f2:0f:4a:3f:96:75:88:76:24:71:f0:bf:
         56:9f:e3:b7:c7:01:a7:1e:24:47:ab:3a:21:17:66:3d:4c:7d:
         fa:d0:90:44:07:4e:17:dc:86:ea:46:a2:3e:ee:33:85:38:b4:
         eb:39:bd:55:41:91:67:db:21:0c:f3:98:94:1b:b2:9f:7d:22:
         7b:ee:cb:40:34:ca:bc:82:c2:dd:e3:e4:f7:23:53:01:24:0f:
         41:20:26:cb:95:b9:86:96:4c:78:c0:11:16:69:3a:c7:68:35:
         23:80:70:cd:39:92:80:04:e9:39:19:c9:62:9a:1e:49:3c:0f:
         7a:69:d7:46:60:6f:05:ac:cf:7d:9a:30:b2:88:38:87:12:82:
         1f:73:44:26:30:bf:7d:14:e3:8d:8c:06:fb:91:5b:71:a2:a7:
         c5:ac:d0:c9:80:a3:50:17:25:70:95:5d:ab:4b:af:01:f0:c3:
         a5:81:b4:36:b0:be:1b:cc:3a:b6:c0:fd:28:cd:be:c1:26:62:
         98:c9:b6:91:51:34:74:9b:3c:c1:ca:94:5b:05:e2:2e:ac:7c:
         65:3e:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:52:31 2026 by rpki-client