This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133312e3235352e3132302e302f32322d3232203d3e20323634343739.roa
File:                     3133312e3235352e3132302e302f32322d3232203d3e20323634343739.roa (raw, json)
Hash identifier:          fXE0xPpD8l/zKup0en9NQeCSK0FFSYJxKuKtPzj23Ic=
Subject key identifier:   6E:4B:53:A3:2F:62:35:3C:C6:95:23:68:DE:74:21:CC:92:E9:8E:A7
Certificate issuer:       /CN=B314917F1BC8CD321336C2D44EF8E783D4576716
Certificate serial:       4777160C6B6D98915F703A7C97C2BE74961F5298
Authority key identifier: B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133312e3235352e3132302e302f32322d3232203d3e20323634343739.roa
Signing time:             Fri 12 Dec 2025 18:08:09 +0000
ROA not before:           Fri 12 Dec 2025 18:03:09 +0000
ROA not after:            Fri 11 Dec 2026 18:08:09 +0000
asID:                     264479
IP address blocks:        131.255.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:77:16:0c:6b:6d:98:91:5f:70:3a:7c:97:c2:be:74:96:1f:52:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B314917F1BC8CD321336C2D44EF8E783D4576716
        Validity
            Not Before: Dec 12 18:03:09 2025 GMT
            Not After : Dec 11 18:08:09 2026 GMT
        Subject: CN=6E4B53A32F62353CC6952368DE7421CC92E98EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e6:fd:b0:e4:7c:b3:26:66:51:05:8a:b2:61:
                    02:7c:40:1b:39:9c:47:fe:34:10:bf:ce:75:86:4a:
                    77:5b:89:04:ae:53:a6:71:f4:5e:e1:41:38:55:99:
                    a5:35:25:54:7c:b1:23:76:80:fb:a0:ff:07:91:1e:
                    7c:1f:3a:88:f2:2a:0c:7a:4d:eb:57:f6:9f:93:a9:
                    c7:24:fa:fc:64:46:d4:8a:b6:09:3f:5b:c0:c1:f4:
                    f2:23:85:50:a4:c3:b1:36:4e:ba:8b:1a:ac:f5:b1:
                    16:d6:3d:97:6e:d6:04:3e:e4:ac:d5:6e:bd:1b:82:
                    35:be:92:ca:51:7e:2f:32:01:a9:bb:c6:d0:00:90:
                    bd:bc:21:27:7c:68:99:d1:16:f0:7f:84:c1:7d:6f:
                    d4:fd:f2:a9:f0:b0:64:ba:8c:f0:74:e9:70:f6:83:
                    39:f8:a0:82:38:da:75:78:b4:19:cc:da:f1:b1:40:
                    57:e8:52:ff:95:e7:84:fa:e8:5a:90:33:dc:57:70:
                    d6:eb:89:cc:6a:e1:c9:3c:e9:e2:9e:74:ea:77:0d:
                    21:c7:a5:c2:fb:6b:fc:b9:71:c8:f2:75:b8:21:b0:
                    1a:af:2f:f2:b9:19:bd:d5:7e:2e:4d:91:cb:c2:f6:
                    72:d6:6a:17:77:17:bf:77:ba:f1:b9:e7:7d:52:ab:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:53:A3:2F:62:35:3C:C6:95:23:68:DE:74:21:CC:92:E9:8E:A7
            X509v3 Authority Key Identifier:
                keyid:B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133312e3235352e3132302e302f32322d3232203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:48:de:18:ec:fd:af:0a:95:99:fc:80:94:71:44:8e:c1:
         95:1d:d6:64:5a:4c:8b:9e:e9:8e:d5:e6:0e:5a:d0:f6:74:f3:
         88:90:23:d2:e8:11:1e:83:c4:13:96:93:5c:71:ff:7c:05:5b:
         2e:82:4a:25:e6:90:d0:a2:ff:12:53:0f:5b:51:9e:74:4f:85:
         90:a2:35:cf:1f:37:6d:07:3a:13:d6:bf:9c:e0:31:c1:d0:6a:
         ef:78:08:f1:9c:a8:47:c0:3f:d7:f4:74:62:2c:94:02:66:47:
         30:f4:3b:d0:f4:09:92:4a:5b:da:08:1d:db:30:06:27:30:a2:
         0e:d3:49:32:57:f1:25:b7:42:ca:c5:2c:e5:ca:df:d8:64:99:
         c7:90:f9:7a:b8:82:5a:bd:17:ac:43:48:d2:87:bf:fb:fd:40:
         73:63:90:f2:54:b1:a9:c2:cc:63:21:68:14:b1:a9:40:be:aa:
         f0:5d:4f:3d:3a:e8:03:63:d9:09:35:d2:aa:c5:83:4c:b0:fd:
         85:95:84:1c:51:59:45:e0:2e:cd:50:19:d7:5e:c6:d0:5c:0e:
         0b:77:df:95:00:e7:a4:77:c9:aa:78:61:6c:03:be:f3:0f:9f:
         16:9d:1a:23:dd:92:83:68:5d:56:f0:e4:00:e8:f2:52:2f:60:
         df:ae:08:46
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR3cWDGttmJFfcDp8l8K+dJYfUpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMxNDkxN0YxQkM4Q0QzMjEzMzZDMkQ0NEVGOEU3ODNE
NDU3NjcxNjAeFw0yNTEyMTIxODAzMDlaFw0yNjEyMTExODA4MDlaMDMxMTAvBgNV
BAMTKDZFNEI1M0EzMkY2MjM1M0NDNjk1MjM2OERFNzQyMUNDOTJFOThFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5v2w5HyzJmZRBYqyYQJ8QBs5
nEf+NBC/znWGSndbiQSuU6Zx9F7hQThVmaU1JVR8sSN2gPug/weRHnwfOojyKgx6
TetX9p+Tqcck+vxkRtSKtgk/W8DB9PIjhVCkw7E2TrqLGqz1sRbWPZdu1gQ+5KzV
br0bgjW+kspRfi8yAam7xtAAkL28ISd8aJnRFvB/hMF9b9T98qnwsGS6jPB06XD2
gzn4oII42nV4tBnM2vGxQFfoUv+V54T66FqQM9xXcNbricxq4ck86eKedOp3DSHH
pcL7a/y5ccjydbghsBqvL/K5Gb3Vfi5NkcvC9nLWahd3F793uvG5531Sq2EFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbktToy9iNTzGlSNo3nQhzJLpjqcwHwYDVR0j
BBgwFoAUsxSRfxvIzTITNsLUTvjng9RXZxYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMC9CMzE0OTE3RjFCQzhDRDMyMTMzNkMyRDQ0RUY4RTc4M0Q0NTc2NzE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzMTQ5MTdGMUJDOENEMzIx
MzM2QzJENDRFRjhFNzgzRDQ1NzY3MTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM0MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP/eDANBgkqhkiG9w0BAQsFAAOCAQEATmBI
3hjs/a8KlZn8gJRxRI7BlR3WZFpMi57pjtXmDlrQ9nTziJAj0ugRHoPEE5aTXHH/
fAVbLoJKJeaQ0KL/ElMPW1GedE+FkKI1zx83bQc6E9a/nOAxwdBq73gI8ZyoR8A/
1/R0YiyUAmZHMPQ70PQJkkpb2ggd2zAGJzCiDtNJMlfxJbdCysUs5crf2GSZx5D5
eriCWr0XrENI0oe/+/1Ac2OQ8lSxqcLMYyFoFLGpQL6q8F1PPTroA2PZCTXSqsWD
TLD9hZWEHFFZReAuzVAZ117G0FwOC3fflQDnpHfJqnhhbAO+8w+fFp0aI92Sg2hd
VvDkAOjyUi9g364IRg==
-----END CERTIFICATE-----
Generated at Tue Dec 16 16:03:35 2025 by rpki-client