This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/3133312e3139362e3132392e302f32342d3234203d3e20323635393233.roa
File:                     3133312e3139362e3132392e302f32342d3234203d3e20323635393233.roa (raw, json)
Hash identifier:          gDMwmzu9ECA03CKFl/CCKqFvHmZSAfbfv4ybhFMmhbA=
Subject key identifier:   A3:F6:51:D9:5C:2D:04:67:CD:C1:EA:30:4F:D4:16:31:63:24:E1:6D
Certificate issuer:       /CN=56FA1262F260972F129A8C634E9B1017D011C283
Certificate serial:       21625D31D6619805A8B8202E064F82D3A7807CF2
Authority key identifier: 56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/3133312e3139362e3132392e302f32342d3234203d3e20323635393233.roa
Signing time:             Fri 12 Dec 2025 19:30:26 +0000
ROA not before:           Fri 12 Dec 2025 19:25:26 +0000
ROA not after:            Fri 11 Dec 2026 19:30:26 +0000
asID:                     265923
IP address blocks:        131.196.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl
                          rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 08:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:62:5d:31:d6:61:98:05:a8:b8:20:2e:06:4f:82:d3:a7:80:7c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56FA1262F260972F129A8C634E9B1017D011C283
        Validity
            Not Before: Dec 12 19:25:26 2025 GMT
            Not After : Dec 11 19:30:26 2026 GMT
        Subject: CN=A3F651D95C2D0467CDC1EA304FD416316324E16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:b6:19:2f:87:3e:55:c3:ce:a7:f2:11:71:
                    56:37:0a:00:65:6a:93:cc:e7:e1:9b:49:18:ef:de:
                    6b:8d:e1:44:11:5e:50:df:d0:04:0b:3f:4a:07:d8:
                    94:24:96:0d:f9:9f:fa:10:fb:0b:fd:a8:2e:f1:f3:
                    d7:4f:ed:ef:db:90:37:5b:f5:a3:38:0c:e2:e3:18:
                    79:03:a2:41:e4:0f:11:2f:a2:06:93:8d:c8:56:03:
                    c4:ee:7d:51:7f:a7:f0:80:88:af:e3:a3:80:95:a2:
                    69:67:fc:c1:e6:2f:74:26:af:8d:23:2e:2e:15:6a:
                    94:cc:d2:02:cc:6e:43:98:96:d3:9f:f5:5f:b1:0f:
                    95:95:ad:c9:ee:78:5d:71:fb:b7:b0:98:55:ea:f9:
                    04:ff:ba:4f:d2:43:73:6b:3c:7b:b4:74:09:9f:64:
                    71:9c:30:15:c1:3f:41:30:c1:53:de:8f:4f:39:5a:
                    f5:84:fa:18:c9:f3:ed:b6:ef:6e:39:f7:93:b9:b7:
                    d4:03:a1:d9:c3:f3:33:bc:7b:7a:eb:02:36:b1:9c:
                    74:a3:7a:97:22:d8:1a:54:13:b1:21:61:76:3c:77:
                    71:d9:04:4f:75:9c:2d:78:cc:5f:40:61:40:c5:11:
                    b8:3f:90:0b:d5:57:75:c1:0f:ee:78:c4:43:1a:9b:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F6:51:D9:5C:2D:04:67:CD:C1:EA:30:4F:D4:16:31:63:24:E1:6D
            X509v3 Authority Key Identifier:
                keyid:56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/3133312e3139362e3132392e302f32342d3234203d3e20323635393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:2e:a4:4b:ad:fb:69:64:b9:6e:b8:2d:97:72:9b:65:6a:
         16:5a:22:21:4b:20:ae:d1:c2:02:93:fd:24:9a:6b:bd:ac:e5:
         fd:10:d1:f7:a2:b4:83:80:bf:79:4c:36:b6:44:57:fc:0b:1a:
         c4:a1:45:33:b3:64:79:b6:4f:6c:89:7a:1e:e2:8a:3b:ae:0b:
         4e:b3:21:07:7b:6b:de:dd:32:07:9e:dc:93:67:04:17:2d:cc:
         c7:f2:13:ab:91:73:55:49:c7:dc:25:4d:c5:8c:5a:11:1b:b1:
         a8:94:0c:db:e3:4a:76:c3:92:75:69:f7:98:43:fa:6e:d1:63:
         fd:e0:4a:5c:71:e4:be:86:96:b1:ed:a8:c0:7d:53:5e:f6:c9:
         92:88:ed:f1:5b:41:43:fe:de:f6:99:a8:d8:cf:99:a6:16:81:
         4b:49:66:28:0b:76:93:08:81:d1:35:65:81:5d:fb:1b:8d:8f:
         d6:12:4b:53:7e:cc:20:40:6a:46:cb:ca:bc:88:22:6c:51:c9:
         a1:c3:3b:51:bf:89:c0:97:17:7e:9a:05:b4:b4:e4:c8:5a:d1:
         58:bf:5e:5f:6f:c9:85:c2:97:d7:f6:69:26:f8:e2:84:c9:22:
         e9:58:3b:cf:1b:92:20:be:57:a3:4a:7b:e0:3e:61:87:37:dc:
         4c:25:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:54:26 2025 by rpki-client