This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa
File:                     3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (raw, json)
Hash identifier:          bZP5ER+h+ra7MAKCwfQrRp9/leZ9/TEA5OHjfMmzFrA=
Subject key identifier:   C5:98:60:3C:63:D1:57:7A:39:AB:0A:9F:42:2E:21:66:F5:51:D5:2B
Certificate issuer:       /CN=B52A0D870CC703D8D9FE35123E1890C611011310
Certificate serial:       48C51398B27630DEB20DBA03DF2F79EE6D5D2AA7
Authority key identifier: B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa
Signing time:             Sun 14 Dec 2025 22:21:31 +0000
ROA not before:           Sun 14 Dec 2025 22:16:31 +0000
ROA not after:            Sun 13 Dec 2026 22:21:31 +0000
asID:                     264448
IP address blocks:        131.255.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl
                          rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 18:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c5:13:98:b2:76:30:de:b2:0d:ba:03:df:2f:79:ee:6d:5d:2a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52A0D870CC703D8D9FE35123E1890C611011310
        Validity
            Not Before: Dec 14 22:16:31 2025 GMT
            Not After : Dec 13 22:21:31 2026 GMT
        Subject: CN=C598603C63D1577A39AB0A9F422E2166F551D52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:aa:24:28:af:22:fd:33:57:ec:6c:98:f8:
                    a6:93:1b:d1:32:d4:58:00:c4:cd:45:5f:8c:9b:53:
                    64:b0:7d:ae:0f:e3:64:36:f9:74:5d:b5:01:b9:ec:
                    8a:89:41:8f:c5:80:c7:32:b8:77:6c:0d:16:1a:cd:
                    6e:8e:90:76:ae:6f:13:bc:4e:19:03:4f:1d:62:b9:
                    f0:73:af:80:a8:b8:ca:28:54:e1:09:00:db:27:48:
                    f0:da:7f:40:fa:b9:1c:c7:48:91:a9:73:9c:39:fd:
                    54:c7:14:7d:b7:c0:be:2c:33:27:fa:51:0f:48:22:
                    ee:0d:49:bb:8f:b5:d2:98:76:fd:b2:3b:79:61:6e:
                    aa:60:f9:23:0e:06:8a:a2:51:10:32:c2:63:4a:71:
                    de:b3:75:37:7d:09:d7:c5:3f:5d:a8:42:43:e5:4b:
                    d3:3e:05:06:09:da:0e:30:2a:5a:1a:b6:15:9a:48:
                    1a:26:04:30:78:a1:26:03:16:7c:39:85:88:93:b9:
                    3d:a8:1e:50:ec:31:7e:22:d7:8d:4a:d8:c8:d1:7b:
                    59:c7:e4:ac:94:89:47:48:dd:83:ca:40:cd:d2:7b:
                    e5:00:2b:b1:71:be:b6:1b:bd:0f:d5:5c:01:7a:77:
                    ea:31:7f:8e:82:b9:bf:6f:77:6a:b5:9c:b9:26:72:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:98:60:3C:63:D1:57:7A:39:AB:0A:9F:42:2E:21:66:F5:51:D5:2B
            X509v3 Authority Key Identifier:
                keyid:B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:0a:d4:43:93:1b:22:1b:03:7f:e0:58:1b:41:a6:91:e6:
         08:10:95:fb:d6:29:de:04:aa:ac:e6:b5:7b:34:33:f2:7c:3f:
         86:ee:16:67:4b:d5:ff:60:21:87:1e:31:24:fd:65:ed:c9:86:
         08:ce:de:f8:95:00:d1:c2:88:33:06:c6:f9:62:51:f1:de:47:
         3e:2e:29:42:f6:0c:ce:a9:31:3b:b6:40:b7:44:50:34:a5:79:
         4d:b9:70:88:28:d4:2a:53:d5:6e:86:23:a8:21:98:1b:68:9f:
         a3:04:95:8d:04:63:a0:00:9e:75:c7:65:77:2f:7c:f0:10:ea:
         38:22:8f:44:b2:c4:18:ae:9b:f8:26:68:01:34:18:7f:9f:53:
         f7:78:eb:4c:d7:de:50:b9:3e:fa:ae:c2:a7:38:f8:91:e3:1a:
         83:b0:84:63:b2:d2:ab:2c:45:f8:c1:94:d3:52:fa:09:27:f5:
         35:b7:f7:42:75:99:e8:97:e2:ec:dc:f4:7f:75:da:d5:e4:f1:
         fa:65:18:17:89:2d:d5:49:f7:1e:8c:fc:f0:ce:8c:ba:cf:7f:
         23:85:25:06:d3:4c:8a:04:57:66:b5:4f:2d:98:7f:1b:3f:9c:
         34:34:20:a4:b8:ea:b6:a5:c3:a8:ca:29:21:ba:85:ef:ac:d7:
         54:2e:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:05:30 2025 by rpki-client