This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3332203d3e20323733333039.roa
File:                     3136382e3232382e32342e302f32322d3332203d3e20323733333039.roa (raw, json)
Hash identifier:          UrdiJnFndjBWOtKoHDvmyTG45TnieOEfE62736rB4Uo=
Subject key identifier:   3B:F7:81:DB:75:84:46:77:B5:03:5E:84:24:9E:B8:90:31:95:31:E2
Certificate issuer:       /CN=6F76316D459A632F20568D07312B32CAA4AA9152
Certificate serial:       473C052BC01485FF55CF2EEBE15391CCA31A53BD
Authority key identifier: 6F:76:31:6D:45:9A:63:2F:20:56:8D:07:31:2B:32:CA:A4:AA:91:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F76316D459A632F20568D07312B32CAA4AA9152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3332203d3e20323733333039.roa
Signing time:             Wed 17 Dec 2025 12:57:54 +0000
ROA not before:           Wed 17 Dec 2025 12:52:54 +0000
ROA not after:            Wed 16 Dec 2026 12:57:54 +0000
asID:                     273309
IP address blocks:        168.228.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/6F76316D459A632F20568D07312B32CAA4AA9152.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/6F76316D459A632F20568D07312B32CAA4AA9152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F76316D459A632F20568D07312B32CAA4AA9152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3c:05:2b:c0:14:85:ff:55:cf:2e:eb:e1:53:91:cc:a3:1a:53:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F76316D459A632F20568D07312B32CAA4AA9152
        Validity
            Not Before: Dec 17 12:52:54 2025 GMT
            Not After : Dec 16 12:57:54 2026 GMT
        Subject: CN=3BF781DB75844677B5035E84249EB890319531E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:37:71:f5:9b:a3:fa:ce:f1:03:49:d0:bb:
                    32:f9:0c:ff:eb:64:a0:35:e6:aa:b6:a4:74:73:e3:
                    70:2b:a7:b0:4e:ab:4d:8e:19:71:1e:35:8a:08:c0:
                    b3:95:bf:f9:f2:20:ba:96:4e:a3:a1:bf:33:45:ce:
                    64:bf:6d:1a:59:3c:2d:ce:13:72:a3:2d:18:79:7a:
                    7b:c3:aa:64:2a:22:5d:c6:f4:4d:88:07:e4:63:53:
                    46:f8:72:50:1f:f8:d3:52:02:bf:62:7d:f3:ad:3e:
                    10:91:c1:37:d6:b4:14:da:12:66:af:03:e7:04:c9:
                    f5:2f:af:bf:94:28:36:ed:e4:b6:ad:aa:04:33:6a:
                    3b:5b:1c:ea:6e:83:94:cf:6c:77:45:2b:cc:6a:65:
                    77:2a:66:5f:df:f6:b1:ca:d3:35:7e:dd:58:c5:84:
                    2c:b1:28:a8:b5:85:47:f8:b0:30:17:54:9a:96:06:
                    db:47:62:22:7e:ba:93:ee:87:72:c5:3b:7a:71:df:
                    0e:c5:98:d3:68:69:a0:7c:0d:51:5c:04:71:36:f8:
                    01:f6:37:d3:08:a9:31:87:cb:79:08:cf:38:36:94:
                    38:cb:d7:51:5d:f2:5e:27:b2:00:a7:b0:92:7d:31:
                    aa:a5:d4:6e:2b:21:e9:11:21:b0:e2:b1:c5:25:93:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F7:81:DB:75:84:46:77:B5:03:5E:84:24:9E:B8:90:31:95:31:E2
            X509v3 Authority Key Identifier:
                keyid:6F:76:31:6D:45:9A:63:2F:20:56:8D:07:31:2B:32:CA:A4:AA:91:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/6F76316D459A632F20568D07312B32CAA4AA9152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F76316D459A632F20568D07312B32CAA4AA9152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3332203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:c8:65:8a:62:5b:4e:25:a5:e3:04:d7:8f:10:fd:45:91:b9:
         5c:27:68:57:cc:c6:88:72:17:05:b3:cd:c4:d0:d3:b6:8c:8c:
         46:b0:29:8d:b0:67:8e:69:de:4a:08:bc:3c:7f:a4:ca:b3:38:
         ab:1c:df:ea:b7:c8:94:65:cd:82:16:d1:72:76:f3:98:10:ea:
         6e:cb:d7:e7:ee:29:53:41:8f:f9:27:f5:97:85:57:de:99:82:
         74:48:fc:73:c8:03:fc:18:7c:48:a3:b4:7c:24:a6:54:3d:6c:
         fb:43:cd:c1:31:7e:a8:e7:0d:3c:67:ee:9c:4e:dd:97:69:20:
         d2:31:1d:96:11:db:f2:bb:c6:b5:06:16:45:12:a5:70:24:37:
         2f:c4:be:bd:1b:47:9e:58:ad:72:2f:14:63:46:53:94:20:ff:
         84:d0:6c:6e:3a:7c:11:97:02:a0:d5:bb:91:95:f7:c6:60:5b:
         e9:1f:b9:95:f8:88:c3:0e:a7:52:16:fc:99:88:06:c6:76:72:
         e4:5b:b9:fa:71:2a:90:ca:d7:4c:24:f4:ca:f8:aa:48:3e:a9:
         bc:12:a1:59:5b:97:d1:23:e1:ed:b7:24:9e:a7:ac:9e:ba:3b:
         b5:1d:69:42:78:a0:63:72:0b:5a:25:83:98:78:12:ec:f7:f2:
         a2:cf:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:46:31 2025 by rpki-client