This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32332d3233203d3e20323634343739.roa
File:                     3133382e3131372e33342e302f32332d3233203d3e20323634343739.roa (raw, json)
Hash identifier:          kZ2PC/BTmpqMsjX+uLhA831DG9nr81I4Zfyc52d9cRY=
Subject key identifier:   F1:79:BD:BA:E5:6F:1A:A8:DB:02:D8:02:EF:76:E7:62:F6:36:9D:3A
Certificate issuer:       /CN=B314917F1BC8CD321336C2D44EF8E783D4576716
Certificate serial:       701A812D674F1ADE59A5B3895A6EDCAAEC42447C
Authority key identifier: B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32332d3233203d3e20323634343739.roa
Signing time:             Fri 12 Dec 2025 18:08:17 +0000
ROA not before:           Fri 12 Dec 2025 18:03:17 +0000
ROA not after:            Fri 11 Dec 2026 18:08:17 +0000
asID:                     264479
IP address blocks:        138.117.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1a:81:2d:67:4f:1a:de:59:a5:b3:89:5a:6e:dc:aa:ec:42:44:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B314917F1BC8CD321336C2D44EF8E783D4576716
        Validity
            Not Before: Dec 12 18:03:17 2025 GMT
            Not After : Dec 11 18:08:17 2026 GMT
        Subject: CN=F179BDBAE56F1AA8DB02D802EF76E762F6369D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:d1:11:38:6a:37:60:b3:87:62:ae:cd:3f:
                    10:4c:68:0d:02:52:54:3c:5f:87:d9:73:af:91:cb:
                    aa:14:8d:c0:ab:3c:f5:4b:e1:f7:6d:5f:3b:19:80:
                    f4:2a:f4:57:bd:05:bd:66:93:31:b6:a6:3a:fe:03:
                    41:7b:45:56:a7:fe:d1:19:e8:a0:e2:56:48:a9:b7:
                    4c:c1:d1:fb:ef:ec:d3:15:66:73:74:12:54:fb:82:
                    cd:cd:2b:6b:69:f3:9f:38:6c:a1:a9:8f:46:3f:a3:
                    c6:81:5e:25:a6:06:f5:27:91:8e:9f:68:66:e5:a5:
                    94:78:00:fb:f4:5f:9c:7a:f2:44:f8:57:fc:c8:d4:
                    3c:e2:74:0f:cd:c7:99:c9:ad:d1:7b:20:ab:b2:fb:
                    f7:fa:9b:13:ff:5f:03:66:08:15:96:46:57:b2:76:
                    19:10:9b:f0:17:1c:d2:c7:f5:20:42:50:ca:9c:70:
                    a9:04:fc:59:60:75:6e:bc:23:e5:0c:45:1a:c6:2e:
                    cf:30:64:0f:65:08:aa:1c:73:58:42:48:cd:f5:0b:
                    80:c3:a3:c5:f3:82:63:d9:cd:3b:bf:2c:3e:a4:75:
                    52:66:83:8c:d0:83:98:55:b5:e3:47:6d:18:7b:9e:
                    3b:9f:df:2f:f9:3d:8e:de:d4:73:7c:1f:bf:e0:61:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:BD:BA:E5:6F:1A:A8:DB:02:D8:02:EF:76:E7:62:F6:36:9D:3A
            X509v3 Authority Key Identifier:
                keyid:B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32332d3233203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:d5:b1:25:ee:03:1b:b9:c9:ca:36:e2:13:84:51:48:23:
         50:33:8c:c1:0a:fc:11:60:a3:2b:79:c8:80:55:a9:82:7a:db:
         12:3c:cc:16:78:9f:f2:af:da:c3:8b:76:88:d8:9f:bf:21:d8:
         08:f6:db:a3:12:fd:bf:10:71:64:a2:c3:d5:d2:71:9b:57:f9:
         21:aa:09:b5:63:c1:4d:bd:4d:96:d9:a0:15:7b:6e:2a:0e:0f:
         3e:e7:ed:61:96:9a:d6:53:6b:82:f1:e4:d8:8a:2c:12:b6:8d:
         3e:21:2e:09:51:ed:24:90:3e:d3:b6:51:ab:bf:b6:23:1b:5b:
         9c:cf:e2:a6:e4:31:a1:76:43:f8:ba:a3:54:81:6a:08:f8:6d:
         28:43:69:fa:a7:a8:85:d0:6e:77:75:df:5d:79:ff:2e:87:d4:
         8a:06:a1:5c:d5:ec:d9:48:1c:d4:a7:8c:c6:92:e9:1c:71:12:
         c2:32:38:cd:cc:93:46:95:34:67:21:7a:55:8a:2c:ba:00:e0:
         ef:e6:a1:d4:47:c8:75:96:cb:f9:b3:9b:2f:d8:4f:db:5f:5a:
         af:de:c7:70:3a:bc:e6:50:7e:60:76:21:69:cd:06:52:d4:0e:
         83:38:a6:a8:5c:aa:bb:79:a8:59:75:95:ef:7b:02:f1:65:71:
         ff:32:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 16:03:34 2025 by rpki-client