This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa
File:                     3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa (raw, json)
Hash identifier:          5XP8kL2Qw7I9iHSeA6acIWKh32L7aRj+2Nid6poM7mY=
Subject key identifier:   0F:20:68:39:9D:17:F7:86:82:C9:28:6F:4A:C7:1F:C2:D5:73:AD:56
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       2CCC326683062D13F71F62095245475557D9C8BD
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa
Signing time:             Mon 15 Dec 2025 16:59:25 +0000
ROA not before:           Mon 15 Dec 2025 16:54:25 +0000
ROA not after:            Mon 14 Dec 2026 16:59:25 +0000
asID:                     271095
IP address blocks:        179.48.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cc:32:66:83:06:2d:13:f7:1f:62:09:52:45:47:55:57:d9:c8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Dec 15 16:54:25 2025 GMT
            Not After : Dec 14 16:59:25 2026 GMT
        Subject: CN=0F2068399D17F78682C9286F4AC71FC2D573AD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:1d:a2:21:86:95:39:99:5f:41:b1:84:96:
                    95:5a:9c:7f:bc:c1:18:e1:f2:73:d4:f7:af:c7:a8:
                    17:1e:90:f4:33:d5:5f:84:af:a7:ec:5c:23:98:f7:
                    f6:98:d1:c6:e3:82:32:97:51:8f:70:28:97:11:13:
                    d4:bc:d9:0f:c2:b4:96:6e:17:40:57:0e:42:b9:fd:
                    b0:30:a4:66:a2:65:7e:fe:c2:81:44:a2:aa:bc:23:
                    69:cf:6b:7e:c1:f0:eb:7c:c2:b3:d4:ec:81:fa:7b:
                    b9:a7:9e:19:4f:4f:77:6d:89:f5:a1:3e:81:2d:79:
                    a0:b8:79:40:eb:a4:02:06:00:9c:30:42:90:cf:9b:
                    92:c6:1d:0f:79:f1:2a:c5:4e:92:64:ce:59:82:9a:
                    d8:a6:84:7a:2e:d6:d3:e1:95:16:ec:72:da:f9:f3:
                    5f:b9:a9:2b:46:2f:45:be:aa:db:d5:a5:df:5b:d5:
                    a1:1d:27:b7:04:5f:d1:0b:72:f0:d1:ea:15:1b:cf:
                    21:dd:6b:0b:bf:8a:58:62:c9:16:9e:db:5c:da:af:
                    f7:b0:67:1f:a5:3c:26:73:e2:23:6e:af:be:ed:39:
                    81:77:aa:ba:77:60:95:9f:a5:9d:73:5b:52:6f:5e:
                    16:fb:5e:0f:93:3f:31:42:4c:b5:6f:8c:e2:ee:a8:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:20:68:39:9D:17:F7:86:82:C9:28:6F:4A:C7:1F:C2:D5:73:AD:56
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:92:59:2e:c6:0d:0d:c4:12:ba:ca:32:0a:9e:e3:19:8a:
         58:0a:4a:42:bd:00:f8:68:04:14:a3:bc:fc:ca:d4:0b:4b:7c:
         10:51:23:15:7c:b9:c9:a8:2c:ef:d8:ff:88:ae:94:55:7f:4d:
         fb:1d:6c:20:61:eb:53:61:d1:fe:ac:0a:75:68:f1:a3:2e:dc:
         13:85:08:44:dd:55:a3:84:5f:b0:51:f7:17:eb:d3:ad:42:f0:
         07:b5:b8:cc:be:f3:2f:5b:73:fe:0a:39:c2:ff:9a:09:f2:99:
         9f:46:c3:16:11:1a:62:56:be:0b:96:c6:3b:c7:c3:78:38:d9:
         56:6b:87:af:25:1b:41:e7:b7:32:b3:a0:4e:01:e5:7e:e1:09:
         01:44:89:bd:c7:8c:5b:d1:85:59:5d:42:18:91:25:b9:25:fa:
         54:51:70:ce:12:1f:9a:b6:cc:a9:12:e8:ad:ff:15:f8:06:d4:
         22:19:ac:40:7e:19:46:11:66:f6:68:b7:38:b6:65:76:17:23:
         5b:4d:63:ad:57:5e:3b:69:a6:75:d3:a6:3c:fd:60:61:98:ac:
         49:61:d5:fb:59:10:e1:6c:82:0c:c8:d1:fa:d8:14:0a:45:e0:
         d2:3b:6b:f7:3a:2f:47:45:9d:27:c8:9b:a2:97:44:2c:68:b4:
         9a:66:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:26:21 2025 by rpki-client