This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa
File:                     3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa (raw, json)
Hash identifier:          6P9Vtoct7sk/VxFqNCuCS0hvi4MXr1QRoBeUB7AVq8A=
Subject key identifier:   DC:DB:32:81:01:5E:C0:D1:C1:DE:0F:B5:94:36:9E:BD:B2:B0:93:5B
Certificate issuer:       /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial:       241C27BE2998DA60E2164977C272DC11BAB3249B
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa
Signing time:             Wed 17 Dec 2025 18:11:31 +0000
ROA not before:           Wed 17 Dec 2025 18:06:31 +0000
ROA not after:            Wed 16 Dec 2026 18:11:31 +0000
asID:                     264425
IP address blocks:        131.221.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1c:27:be:29:98:da:60:e2:16:49:77:c2:72:dc:11:ba:b3:24:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
        Validity
            Not Before: Dec 17 18:06:31 2025 GMT
            Not After : Dec 16 18:11:31 2026 GMT
        Subject: CN=DCDB3281015EC0D1C1DE0FB594369EBDB2B0935B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:0c:8e:cc:69:b5:8c:2d:fc:3b:67:10:38:
                    e9:77:a1:fa:6f:f1:d3:29:8f:71:6d:8a:7e:8e:00:
                    5a:4d:25:0a:51:e1:a5:86:99:b7:76:37:fb:d6:31:
                    1b:8c:3f:48:43:23:97:98:0d:3a:75:28:6b:59:67:
                    43:a3:97:4b:ab:96:df:f0:0f:75:16:6c:06:c6:fc:
                    ac:ff:68:75:39:a5:19:37:c4:ff:f7:bb:c3:93:51:
                    38:68:02:29:43:ea:2b:04:20:b3:3f:28:2c:bc:e2:
                    43:03:fc:a4:05:32:86:24:7c:20:22:e4:65:f6:02:
                    7b:8c:f3:63:50:01:b7:95:87:79:d5:93:93:26:cc:
                    d6:b0:4a:79:f6:95:5f:d1:89:08:7b:8f:c8:22:aa:
                    5d:e7:58:dc:d8:80:e0:cc:65:30:f3:6c:85:46:cf:
                    8e:b8:2c:cd:52:43:46:e8:6d:7a:47:35:03:d7:f4:
                    b1:d3:3c:68:03:7c:b7:7c:5c:de:df:ec:cb:2c:4d:
                    dc:c0:47:a9:89:a6:d2:2f:1e:bf:c4:da:c9:40:86:
                    dc:62:10:b9:a7:9e:29:a4:48:b9:38:a3:30:85:5e:
                    4a:be:8e:93:36:23:36:bb:6c:e1:29:fc:32:18:d9:
                    36:e0:6d:6d:bf:48:60:c4:20:9b:0d:11:53:32:3f:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DB:32:81:01:5E:C0:D1:C1:DE:0F:B5:94:36:9E:BD:B2:B0:93:5B
            X509v3 Authority Key Identifier:
                keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138352e302f32342d3234203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:c8:11:3b:75:d8:9f:02:3c:8d:2e:3c:48:00:20:f0:14:df:
         3b:d8:f5:a7:48:bb:a0:07:0e:8b:d4:09:97:2b:58:b2:7f:83:
         fa:3a:8a:96:29:c4:2d:3c:8c:61:f3:14:94:90:06:15:39:26:
         fc:66:af:42:f0:8d:ab:eb:ad:9e:2e:e7:79:78:85:a4:fa:fb:
         a0:ff:5a:f3:9b:13:9c:f0:ff:1f:be:51:91:1b:db:50:ad:61:
         14:12:9b:ca:a8:2a:db:84:ba:1c:a4:d7:3d:f2:c4:2f:e0:94:
         a4:cc:f1:39:40:3b:e9:04:91:b1:17:09:1f:d4:9e:fc:2c:bb:
         49:08:6f:5c:be:b4:31:ae:83:53:31:c7:69:7b:d3:1a:8b:f5:
         01:5d:8f:59:8e:63:e6:d0:28:d7:35:c3:3e:e5:14:0a:8b:9d:
         c2:df:5c:ac:a2:7f:dc:0c:ed:e3:b0:40:3e:96:c6:6c:86:41:
         8b:b0:de:7c:a6:93:db:e3:00:c4:d5:8f:ed:64:89:d4:01:40:
         78:20:21:b1:c2:bc:c3:4b:7d:ab:c6:9c:5d:ec:8d:4d:6e:39:
         85:f6:d9:93:79:6f:84:76:07:18:9e:7b:db:57:76:91:81:21:
         46:a7:f0:37:4d:b3:24:c0:35:86:50:b6:76:7f:89:2b:24:10:
         49:1e:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:52:47 2025 by rpki-client