This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa
File:                     3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa (raw, json)
Hash identifier:          0RG5eiUjfUxVLETFSggQekCXyT+fcEtZJLCsA8stW70=
Subject key identifier:   87:3E:C6:ED:E5:D1:8E:16:22:AA:21:E6:A8:9A:C7:07:D3:6E:C2:53
Certificate issuer:       /CN=D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F
Certificate serial:       21BEBDC314A1FBB3A931700A165F56BD66D5E3B5
Authority key identifier: D8:1F:02:E2:B6:85:54:1F:B8:BD:2F:B5:B6:52:E0:C2:BF:DB:02:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa
Signing time:             Mon 15 Dec 2025 17:58:15 +0000
ROA not before:           Mon 15 Dec 2025 17:53:15 +0000
ROA not after:            Mon 14 Dec 2026 17:58:15 +0000
asID:                     264442
IP address blocks:        131.221.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.crl
                          rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 18:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:be:bd:c3:14:a1:fb:b3:a9:31:70:0a:16:5f:56:bd:66:d5:e3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F
        Validity
            Not Before: Dec 15 17:53:15 2025 GMT
            Not After : Dec 14 17:58:15 2026 GMT
        Subject: CN=873EC6EDE5D18E1622AA21E6A89AC707D36EC253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:ed:af:8f:c2:21:4a:b6:d8:e1:5e:8f:7a:
                    e4:82:4c:95:3a:4c:e9:c7:e8:a1:cb:28:84:e2:d1:
                    f4:97:09:16:f6:45:97:33:e8:a7:d0:65:f8:a0:30:
                    0c:93:1f:65:47:d6:ce:cb:cd:14:c7:5b:8d:20:de:
                    b0:8b:3d:d6:79:a6:da:f5:c5:72:c9:41:63:c5:45:
                    2d:cd:d6:f7:d0:26:74:88:2f:87:89:d0:dd:d7:d8:
                    38:9a:6c:d3:30:d7:f6:6a:e4:cc:b8:24:fc:10:25:
                    4a:fa:39:4f:dc:fd:f4:c4:6c:f4:e8:39:9b:0d:34:
                    d7:06:29:b3:2a:8a:65:6d:62:15:46:49:3e:90:fd:
                    d8:e4:69:72:5a:d5:f8:56:5c:03:df:d0:c4:08:59:
                    f7:27:b0:de:16:1f:b2:92:32:f6:2e:84:c7:06:61:
                    5f:da:27:7f:27:d8:bc:04:61:81:4f:83:4e:41:bd:
                    b7:3c:c6:10:2d:bf:0f:8c:0d:96:92:b6:6d:ab:48:
                    50:94:07:6f:c2:f7:a5:6f:d6:d6:0c:76:66:0e:72:
                    47:f2:f3:98:53:8c:5d:31:c8:e4:24:28:df:be:76:
                    bd:b7:af:aa:16:cc:45:c2:83:64:54:74:76:8b:f5:
                    0e:96:d2:5d:ae:d9:57:52:5c:5d:b9:11:55:24:da:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3E:C6:ED:E5:D1:8E:16:22:AA:21:E6:A8:9A:C7:07:D3:6E:C2:53
            X509v3 Authority Key Identifier:
                keyid:D8:1F:02:E2:B6:85:54:1F:B8:BD:2F:B5:B6:52:E0:C2:BF:DB:02:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:f0:05:d6:75:c3:c6:26:e6:ea:fe:9f:64:14:f7:12:be:01:
         7e:46:c7:ea:9f:65:75:e6:f9:2c:96:0e:03:0c:52:cb:c5:3b:
         53:23:66:e9:90:5c:ff:26:5a:14:0f:ca:2f:25:71:33:bc:da:
         b0:30:0a:42:51:2c:ce:78:41:f2:a7:95:fa:1a:e3:b2:df:03:
         86:3f:7d:ed:48:63:26:88:69:9e:f6:c6:b7:b7:92:c8:e7:ff:
         09:ea:b4:b6:c2:9c:fe:aa:2b:fb:38:84:c4:23:34:03:a4:7b:
         da:76:a3:32:57:1f:66:f8:8f:96:92:2c:71:65:35:14:51:26:
         9d:d8:2b:82:24:ac:96:60:69:6a:67:76:b8:cc:d6:94:58:25:
         45:56:b3:01:fd:11:91:a5:e9:3d:c6:e6:d4:ca:fa:86:c0:5a:
         dd:20:2a:eb:36:26:26:8d:fb:58:3c:99:da:14:c5:0c:1c:01:
         8b:4d:4c:37:52:35:66:7c:e7:32:8e:ab:60:ea:3d:69:36:58:
         e8:23:38:ae:8a:32:d3:45:ed:45:00:f8:d8:d2:14:a6:e7:f0:
         ab:2d:e2:d0:aa:b7:8f:fc:e0:63:47:da:a8:ac:8f:ee:f5:e5:
         02:48:0b:26:f9:1f:ee:aa:d8:87:5f:70:12:eb:65:dd:6a:47:
         aa:0e:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:17:45 2025 by rpki-client