This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231352e302f32342d3234203d3e203631363937.roa
File:                     3230312e372e3231352e302f32342d3234203d3e203631363937.roa (raw, json)
Hash identifier:          yoBiemtv75+UFIwxWsrn5+uJnrOypZWYa4nHenn2ZTA=
Subject key identifier:   8F:45:30:2A:F8:A6:4E:A3:1C:53:16:55:CE:58:DA:98:90:43:FB:80
Certificate issuer:       /CN=8528771E1676E945AC313E0774A23D878A92C3DD
Certificate serial:       19519C98C9F5241B2FC109E0B3F6C1C478712D50
Authority key identifier: 85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231352e302f32342d3234203d3e203631363937.roa
Signing time:             Sat 15 Nov 2025 14:42:18 +0000
ROA not before:           Sat 15 Nov 2025 14:37:18 +0000
ROA not after:            Sat 14 Nov 2026 14:42:18 +0000
asID:                     61697
IP address blocks:        201.7.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl
                          rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 12:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:51:9c:98:c9:f5:24:1b:2f:c1:09:e0:b3:f6:c1:c4:78:71:2d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8528771E1676E945AC313E0774A23D878A92C3DD
        Validity
            Not Before: Nov 15 14:37:18 2025 GMT
            Not After : Nov 14 14:42:18 2026 GMT
        Subject: CN=8F45302AF8A64EA31C531655CE58DA989043FB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:0d:fe:3e:f8:c1:e7:74:f3:9f:bb:c4:05:
                    bc:10:e6:b4:12:3b:e8:08:a4:67:39:98:1e:40:fa:
                    c7:49:71:49:e2:6e:72:89:64:5a:92:c1:38:6a:45:
                    53:7d:db:7d:6d:fd:4b:43:76:cc:ac:ae:05:48:94:
                    0b:51:b9:96:62:bf:0b:e2:57:34:ab:8d:ad:72:68:
                    7f:aa:ec:f4:d4:19:cf:f4:34:6c:2b:df:2e:cd:87:
                    31:f0:b1:43:3f:13:94:fd:dd:bb:d5:5d:51:5c:9a:
                    d0:53:80:bd:30:08:96:b2:1b:8a:7e:42:05:9e:5a:
                    cc:e2:c6:bb:3d:9a:e3:3b:d8:7b:26:f1:1d:bd:db:
                    7e:24:31:99:7d:d9:74:21:da:20:0c:b7:9e:59:44:
                    66:47:e1:57:7b:67:4c:59:fa:24:73:15:0c:79:d3:
                    39:a8:b1:54:f4:40:2b:e9:3d:4f:e0:23:69:7a:10:
                    a1:48:e2:93:a8:d3:a2:b3:3f:22:b4:57:56:c1:35:
                    f8:d3:c8:ff:86:6c:c7:ab:17:0c:32:ee:bc:16:56:
                    8a:1a:a3:0c:54:72:67:8c:c8:2a:8f:cf:c6:8f:ce:
                    3d:94:df:8b:16:c6:b0:53:fd:ee:6c:24:34:32:9c:
                    14:90:37:1e:30:d1:b5:2a:17:3c:b8:76:a9:be:dc:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:45:30:2A:F8:A6:4E:A3:1C:53:16:55:CE:58:DA:98:90:43:FB:80
            X509v3 Authority Key Identifier:
                keyid:85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231352e302f32342d3234203d3e203631363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:56:1c:21:bb:d0:22:2c:60:96:59:3e:af:39:8b:3b:c2:42:
         45:d4:51:f0:6b:09:3a:41:ce:f1:ee:50:4b:4d:ca:6e:58:2e:
         b4:be:95:4d:79:8d:23:98:74:6c:3c:a6:d8:de:f5:69:3a:75:
         87:88:84:b4:46:50:74:c9:49:9e:b9:56:e3:3a:37:8f:ba:2f:
         a7:6e:c4:99:88:95:7a:71:7a:60:5b:c5:f1:5c:50:b7:32:63:
         45:d0:02:6e:0e:85:50:0e:d5:df:e5:ae:81:eb:d3:07:90:3d:
         31:6f:8a:31:94:9f:24:99:1c:9c:6e:dc:cf:51:16:b2:88:bd:
         b2:9c:d0:6c:94:6f:3f:1a:a5:12:0a:0e:b3:a3:e1:50:ee:3e:
         11:c5:3f:76:c9:44:5b:18:a7:de:95:ed:25:b5:bc:ce:a4:14:
         a6:72:42:09:9c:85:80:e1:c8:9f:c5:60:77:c6:4b:6b:d4:e7:
         75:c9:2b:e1:31:f2:a0:bf:45:b8:6d:66:ca:91:8f:a1:bf:36:
         cc:ab:08:59:ae:1d:a5:55:b4:a8:05:dc:35:a0:2c:f7:76:cb:
         be:0c:1e:88:68:ac:df:d9:a4:10:29:0e:a3:9d:45:62:0c:fc:
         d2:7c:26:6c:6f:9a:bd:c0:b3:0a:5b:d6:91:13:87:44:93:ee:
         5b:96:10:de
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGVGcmMn1JBsvwQngs/bBxHhxLVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyODc3MUUxNjc2RTk0NUFDMzEzRTA3NzRBMjNEODc4
QTkyQzNERDAeFw0yNTExMTUxNDM3MThaFw0yNjExMTQxNDQyMThaMDMxMTAvBgNV
BAMTKDhGNDUzMDJBRjhBNjRFQTMxQzUzMTY1NUNFNThEQTk4OTA0M0ZCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tw3+PvjB53Tzn7vEBbwQ5rQS
O+gIpGc5mB5A+sdJcUnibnKJZFqSwThqRVN9231t/UtDdsysrgVIlAtRuZZivwvi
VzSrja1yaH+q7PTUGc/0NGwr3y7NhzHwsUM/E5T93bvVXVFcmtBTgL0wCJayG4p+
QgWeWszixrs9muM72Hsm8R29234kMZl92XQh2iAMt55ZRGZH4Vd7Z0xZ+iRzFQx5
0zmosVT0QCvpPU/gI2l6EKFI4pOo06KzPyK0V1bBNfjTyP+GbMerFwwy7rwWVooa
owxUcmeMyCqPz8aPzj2U34sWxrBT/e5sJDQynBSQNx4w0bUqFzy4dqm+3Lw5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUj0UwKvimTqMcUxZVzljamJBD+4AwHwYDVR0j
BBgwFoAUhSh3HhZ26UWsMT4HdKI9h4qSw90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1NQTWZVUUFiTEVrczlBd0trajdURmZqZlIzUlVLTDQ1eWdtRnk5QUxk
RWgvMC84NTI4NzcxRTE2NzZFOTQ1QUMzMTNFMDc3NEEyM0Q4NzhBOTJDM0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1Mjg3NzFFMTY3NkU5NDVB
QzMxM0UwNzc0QTIzRDg3OEE5MkMzREQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dTUE1mVVFBYkxFa3M5QXdLa2o3VEZmamZSM1JVS0w0NXlnbUZ5OUFMZEVoLzAv
MzIzMDMxMmUzNzJlMzIzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM2
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkH1zANBgkqhkiG9w0BAQsFAAOCAQEANFYcIbvQIixg
llk+rzmLO8JCRdRR8GsJOkHO8e5QS03KblgutL6VTXmNI5h0bDym2N71aTp1h4iE
tEZQdMlJnrlW4zo3j7ovp27EmYiVenF6YFvF8VxQtzJjRdACbg6FUA7V3+WugevT
B5A9MW+KMZSfJJkcnG7cz1EWsoi9spzQbJRvPxqlEgoOs6PhUO4+EcU/dslEWxin
3pXtJbW8zqQUpnJCCZyFgOHIn8Vgd8ZLa9Tndckr4THyoL9FuG1mypGPob82zKsI
Wa4dpVW0qAXcNaAs93bLvgweiGis39mkECkOo51FYgz80nwmbG+avcCzClvWkROH
RJPuW5YQ3g==
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:54:53 2025 by rpki-client