This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
File:                     3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          5S+9Dtx7UpKxI0mcJvWZyDbsXvrlqoMhaB5vMfATcRU=
Subject key identifier:   41:7F:72:39:66:9A:4C:B5:05:C2:14:40:4A:6F:72:E9:28:81:42:FE
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       47B70ECD707D8EAF8A9B163EE6B4ABA45B971CE5
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
Signing time:             Thu 18 Dec 2025 12:33:09 +0000
ROA not before:           Thu 18 Dec 2025 12:28:09 +0000
ROA not after:            Thu 17 Dec 2026 12:33:09 +0000
asID:                     263980
IP address blocks:        138.255.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b7:0e:cd:70:7d:8e:af:8a:9b:16:3e:e6:b4:ab:a4:5b:97:1c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Dec 18 12:28:09 2025 GMT
            Not After : Dec 17 12:33:09 2026 GMT
        Subject: CN=417F7239669A4CB505C214404A6F72E9288142FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:a7:67:89:24:ce:09:f4:ac:18:a9:7a:5f:
                    fa:0c:3d:0a:3f:09:fe:97:80:c4:60:ce:17:e9:57:
                    9f:f3:ed:33:bf:b5:3e:2b:d3:2f:8c:70:20:85:35:
                    e1:78:c4:a8:33:4f:78:fa:ab:fc:7f:78:dc:e3:fc:
                    86:51:d2:7c:b2:f5:36:10:e3:45:28:c3:28:a7:be:
                    7b:1f:38:94:00:3f:9f:7e:b7:04:7d:1f:5b:a2:9d:
                    b4:29:07:10:f5:08:e5:5d:b5:e2:21:6c:db:3e:3f:
                    7d:e4:d4:d0:ff:33:d2:93:ce:8e:ab:12:9a:a5:73:
                    76:c9:9f:93:05:58:62:2b:47:ed:72:fc:95:1d:27:
                    fc:66:70:12:ea:6d:c5:7e:d8:7c:bd:71:8b:5b:bf:
                    eb:a9:de:5e:ee:70:65:db:b5:d1:de:f9:8a:01:3c:
                    1d:4d:2f:6f:13:db:bb:61:60:54:87:e0:1e:90:76:
                    f5:3a:cb:41:2c:30:73:bd:cf:d7:33:c8:5a:21:24:
                    93:6d:87:f2:69:1c:b8:a9:c9:71:dd:28:ca:44:c7:
                    e2:d2:89:a7:ad:1b:09:2e:c5:40:e6:35:e7:cc:11:
                    63:50:d1:e1:23:7d:5b:77:36:7e:1f:be:c8:b7:ce:
                    01:18:5c:35:a2:df:77:ee:47:71:87:eb:5a:6a:f2:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7F:72:39:66:9A:4C:B5:05:C2:14:40:4A:6F:72:E9:28:81:42:FE
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:74:82:f2:e1:5a:05:92:04:2e:de:8e:d0:b5:e7:00:e5:86:
         9f:39:73:d1:0f:8e:df:7c:24:4e:f1:ea:60:47:37:87:fe:59:
         6b:e4:55:53:1d:1f:f5:b8:02:be:f8:3a:ee:5b:24:d6:dd:46:
         6c:af:39:4d:e1:4f:4a:97:75:87:f7:63:0f:8b:41:a3:7a:8b:
         ff:09:85:f0:0c:f5:f9:e6:fe:9b:db:d1:01:ea:58:ba:07:9b:
         f8:56:fc:b1:1e:1b:81:28:e8:56:b3:5e:eb:3c:ae:0f:5b:76:
         8e:3d:3b:8f:4f:4d:1e:8b:ae:fe:ab:1d:b5:ec:2b:d7:27:b3:
         08:0b:6b:92:cd:fc:77:48:6d:eb:c0:d6:3e:01:e0:1b:11:01:
         83:a8:ac:90:c2:ce:19:43:9f:e2:60:bb:03:10:e2:27:44:6a:
         27:31:e6:ac:09:0d:5f:53:76:e7:4d:bd:69:54:3c:df:b8:17:
         e7:c8:5f:49:e5:14:fb:6d:51:14:86:0e:86:b9:52:05:89:d5:
         dc:ef:d3:8b:3c:56:29:73:a2:70:bc:40:76:02:62:b8:9e:5f:
         ea:1e:c9:6a:82:35:fd:e9:f4:95:dd:7d:3f:35:bd:d5:fa:2e:
         e1:c4:00:57:16:c4:47:1f:35:39:ed:ea:2f:2c:c6:07:b9:2d:
         03:f9:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:14:03 2025 by rpki-client