This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/3138312e3232342e3231382e302f32342d3234203d3e20323639363334.roa
File:                     3138312e3232342e3231382e302f32342d3234203d3e20323639363334.roa (raw, json)
Hash identifier:          H1qka8gy8JE4JRAT6t1AeE0ZDRCNhhsTzho7nQaB+EY=
Subject key identifier:   FB:7D:CA:4C:0F:41:F2:21:B3:35:EF:26:D6:E2:07:18:C7:4D:BF:4A
Certificate issuer:       /CN=50C2292B12049D6ACB2039DB2D8BD765B7EE5F50
Certificate serial:       698454CABAC291F9CCB3F2B893550D0D9BFCC6EF
Authority key identifier: 50:C2:29:2B:12:04:9D:6A:CB:20:39:DB:2D:8B:D7:65:B7:EE:5F:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/3138312e3232342e3231382e302f32342d3234203d3e20323639363334.roa
Signing time:             Thu 11 Dec 2025 17:18:05 +0000
ROA not before:           Thu 11 Dec 2025 17:13:05 +0000
ROA not after:            Thu 10 Dec 2026 17:18:05 +0000
asID:                     269634
IP address blocks:        181.224.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.crl
                          rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:84:54:ca:ba:c2:91:f9:cc:b3:f2:b8:93:55:0d:0d:9b:fc:c6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C2292B12049D6ACB2039DB2D8BD765B7EE5F50
        Validity
            Not Before: Dec 11 17:13:05 2025 GMT
            Not After : Dec 10 17:18:05 2026 GMT
        Subject: CN=FB7DCA4C0F41F221B335EF26D6E20718C74DBF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:a7:58:08:8f:0a:c3:53:a4:a3:4f:59:6f:
                    80:f7:0b:23:4a:47:bd:fd:a0:9e:73:0d:08:78:2b:
                    be:4d:12:c5:64:8d:6c:9f:22:ab:ca:b0:fe:84:d3:
                    a3:59:56:ba:fe:2f:c2:7b:22:a0:32:7d:e4:52:02:
                    68:5b:dd:d9:1f:4f:d4:82:86:93:4f:b2:58:29:00:
                    21:7b:c6:9b:c2:66:7d:0f:45:9c:60:cf:28:1a:11:
                    52:a3:88:a3:5a:63:93:e6:04:b9:70:a3:88:74:3a:
                    01:8e:67:e5:83:a3:75:f4:7b:74:5e:fa:21:31:c3:
                    65:bf:26:68:b5:ae:37:bd:00:24:7e:3a:06:96:9d:
                    6b:f8:bb:01:2f:2a:96:8e:c6:c9:9e:97:20:74:1f:
                    38:d0:ba:57:79:4f:2d:08:16:18:2e:2c:e0:1e:fa:
                    4f:f7:d0:c6:05:a8:f4:e5:d0:f2:8d:ad:c8:0f:c5:
                    ef:ec:e7:9b:7a:05:54:f3:70:7d:0c:6e:ef:99:47:
                    a1:50:f5:99:45:6a:02:9f:db:09:40:97:0e:18:64:
                    0f:de:c2:c7:8b:e1:bf:6c:ff:c6:eb:80:29:c4:35:
                    58:63:9d:2b:f6:4f:41:c7:38:ec:b5:da:36:b4:bf:
                    1a:9d:91:3f:e6:d4:a8:90:a0:03:85:29:0e:87:03:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:CA:4C:0F:41:F2:21:B3:35:EF:26:D6:E2:07:18:C7:4D:BF:4A
            X509v3 Authority Key Identifier:
                keyid:50:C2:29:2B:12:04:9D:6A:CB:20:39:DB:2D:8B:D7:65:B7:EE:5F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/3138312e3232342e3231382e302f32342d3234203d3e20323639363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:4c:ac:38:35:15:54:00:68:c4:6c:e1:04:84:bd:a0:c1:
         87:d6:c4:69:e8:15:d1:4e:69:89:ee:06:95:1b:68:15:54:d4:
         72:82:0b:21:0c:d8:55:78:8a:f9:6d:56:e1:fe:60:fd:55:a2:
         9f:dd:dd:f6:2d:00:9b:c3:36:2a:1d:9e:68:6a:98:4b:ad:c5:
         bc:7d:64:99:27:f1:c4:93:5d:c0:70:ae:1f:e7:26:c9:a9:82:
         f2:01:f2:ee:68:41:9e:7c:f2:23:3c:c1:b0:38:87:26:d7:b2:
         d9:85:08:2c:6c:d6:72:13:6f:35:3f:cd:6d:98:99:0c:18:03:
         5f:26:34:85:2b:f1:7d:7d:bd:bc:26:71:86:2a:0d:af:48:64:
         53:1e:6d:eb:49:42:1e:81:a1:5b:f3:9f:b7:12:e0:91:8e:a7:
         1d:07:54:25:d9:07:f2:8d:ac:c5:c3:b8:6a:37:a6:87:5c:2b:
         24:7f:22:c2:d3:87:bf:84:6d:85:84:47:33:31:70:7a:86:06:
         d2:3f:35:cf:d9:81:a1:30:f6:ab:ad:d3:b1:11:88:35:cb:b7:
         46:ab:2a:56:48:31:e8:64:4c:c5:dc:81:e3:3a:f2:62:0e:da:
         8b:45:c7:5e:9d:9a:98:68:0e:e3:e8:ce:87:e3:e4:99:e5:32:
         eb:d4:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:47 2025 by rpki-client