This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa
File:                     3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa (raw, json)
Hash identifier:          nOnij1G09KINUah84ThvrdQyrQ1ge49V1aOn1Uaz9Yg=
Subject key identifier:   6D:23:E0:0B:90:DF:59:CF:3A:33:D9:4F:7C:E4:D7:B2:39:A5:47:70
Certificate issuer:       /CN=0F72F9CFDA53B5506CE548E017FBD16AF5772457
Certificate serial:       537B0EB3B212668256C8665C24F3494591413F4C
Authority key identifier: 0F:72:F9:CF:DA:53:B5:50:6C:E5:48:E0:17:FB:D1:6A:F5:77:24:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F72F9CFDA53B5506CE548E017FBD16AF5772457.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa
Signing time:             Thu 06 Nov 2025 16:23:04 +0000
ROA not before:           Thu 06 Nov 2025 16:18:04 +0000
ROA not after:            Thu 05 Nov 2026 16:23:04 +0000
asID:                     7361
IP address blocks:        200.160.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/0F72F9CFDA53B5506CE548E017FBD16AF5772457.crl
                          rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/0F72F9CFDA53B5506CE548E017FBD16AF5772457.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F72F9CFDA53B5506CE548E017FBD16AF5772457.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 17:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7b:0e:b3:b2:12:66:82:56:c8:66:5c:24:f3:49:45:91:41:3f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F72F9CFDA53B5506CE548E017FBD16AF5772457
        Validity
            Not Before: Nov  6 16:18:04 2025 GMT
            Not After : Nov  5 16:23:04 2026 GMT
        Subject: CN=6D23E00B90DF59CF3A33D94F7CE4D7B239A54770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:46:5c:fe:c8:e8:97:31:69:f7:db:ff:bb:
                    8a:23:7a:c3:87:96:f4:d6:b0:57:3c:ed:5a:cc:be:
                    96:1a:01:4e:7d:6c:fd:c0:72:9a:92:ce:56:16:0b:
                    77:73:16:37:e0:7f:3f:92:5d:c4:10:e8:e9:c4:17:
                    d1:33:6a:b2:6e:94:f0:72:06:e3:98:75:dc:8e:1c:
                    62:03:75:96:d6:fd:64:05:10:66:83:98:a1:60:03:
                    d9:b8:ed:79:5c:59:c1:49:59:8c:4a:28:d8:0d:ba:
                    ea:d0:d8:82:25:68:55:31:f0:ce:43:88:e9:88:2f:
                    96:14:91:ab:7e:65:8a:ed:2e:32:ef:d9:11:76:3f:
                    7a:26:da:0f:de:a4:f0:c5:fa:e4:c1:66:61:19:15:
                    00:91:39:b5:cf:de:b4:79:6c:0f:f7:c3:dd:50:f6:
                    06:81:fd:ec:37:a1:48:ef:ee:c7:1b:96:c4:6a:bc:
                    17:05:fc:6e:df:a1:e6:69:28:7c:d1:7f:a5:9c:5b:
                    62:c1:70:fd:42:fc:01:df:67:81:22:28:27:5d:df:
                    75:ca:b1:6c:a4:6f:84:7d:a3:e8:7a:dc:23:61:dc:
                    0d:b5:58:a7:41:b9:27:c0:2e:e5:79:e0:59:7c:54:
                    94:fc:f4:ff:89:4d:8e:59:5f:4d:3b:ee:f8:10:97:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:E0:0B:90:DF:59:CF:3A:33:D9:4F:7C:E4:D7:B2:39:A5:47:70
            X509v3 Authority Key Identifier:
                keyid:0F:72:F9:CF:DA:53:B5:50:6C:E5:48:E0:17:FB:D1:6A:F5:77:24:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/0F72F9CFDA53B5506CE548E017FBD16AF5772457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F72F9CFDA53B5506CE548E017FBD16AF5772457.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:72:ad:37:41:d6:51:09:88:5a:c8:b9:ab:a8:df:07:4f:
         c0:ec:07:9a:b8:f1:75:1d:32:4e:41:5d:bc:9f:94:5e:ef:4f:
         ce:97:52:4f:ab:44:8e:90:80:89:a6:63:ee:c0:f0:7f:c6:6d:
         8b:f4:2f:75:59:7e:28:62:dc:e7:aa:31:37:e2:fa:ac:08:50:
         92:69:f1:81:39:b7:19:56:41:31:ad:ae:fb:2d:4b:1d:11:15:
         b0:95:c6:f5:2e:72:9f:80:78:2e:29:0b:80:6a:d2:39:71:d0:
         87:82:37:8e:a3:ff:78:e3:54:dd:ea:08:00:5c:d0:be:22:d5:
         7a:07:97:52:04:c5:e1:6f:8e:6a:15:ab:81:c6:70:04:e1:11:
         08:13:ad:a5:7f:92:79:5f:8f:12:a7:7e:3f:0b:c8:5b:37:8e:
         ab:46:58:4c:a2:12:7a:3b:a6:79:40:08:12:a6:21:4b:7e:bb:
         86:30:c7:47:f0:a4:4e:13:e8:7c:fa:26:4d:5a:5d:b4:25:07:
         1f:37:6c:3c:cc:2f:28:92:14:18:38:fc:12:31:9d:c0:31:64:
         67:b1:5d:ef:9f:10:02:0b:a9:54:5e:1d:b7:56:31:dd:e1:9d:
         9c:62:0d:33:b1:f9:6b:f7:54:94:ff:81:ea:13:fb:2b:4f:1d:
         b7:8e:61:5e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU3sOs7ISZoJWyGZcJPNJRZFBP0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3MkY5Q0ZEQTUzQjU1MDZDRTU0OEUwMTdGQkQxNkFG
NTc3MjQ1NzAeFw0yNTExMDYxNjE4MDRaFw0yNjExMDUxNjIzMDRaMDMxMTAvBgNV
BAMTKDZEMjNFMDBCOTBERjU5Q0YzQTMzRDk0RjdDRTREN0IyMzlBNTQ3NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbSkZc/sjolzFp99v/u4ojesOH
lvTWsFc87VrMvpYaAU59bP3AcpqSzlYWC3dzFjfgfz+SXcQQ6OnEF9EzarJulPBy
BuOYddyOHGIDdZbW/WQFEGaDmKFgA9m47XlcWcFJWYxKKNgNuurQ2IIlaFUx8M5D
iOmIL5YUkat+ZYrtLjLv2RF2P3om2g/epPDF+uTBZmEZFQCRObXP3rR5bA/3w91Q
9gaB/ew3oUjv7scblsRqvBcF/G7foeZpKHzRf6WcW2LBcP1C/AHfZ4EiKCdd33XK
sWykb4R9o+h63CNh3A21WKdBuSfALuV54Fl8VJT89P+JTY5ZX0077vgQl9uzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbSPgC5DfWc86M9lPfOTXsjmlR3AwHwYDVR0j
BBgwFoAUD3L5z9pTtVBs5UjgF/vRavV3JFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2I0eEExQThwemUxSDl0WVBOOFpwajVHNUtCaW45REZXRkxSUnQ4ZDVL
NmMvMC8wRjcyRjlDRkRBNTNCNTUwNkNFNTQ4RTAxN0ZCRDE2QUY1NzcyNDU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzJGOUNGREE1M0I1NTA2
Q0U1NDhFMDE3RkJEMTZBRjU3NzI0NTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiNHhBMUE4cHplMUg5dFlQTjhacGo1RzVLQmluOURGV0ZMUlJ0OGQ1SzZjLzAv
MzIzMDMwMmUzMTM2MzAyZTMyMzAzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM3
MzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyKDQMA0GCSqGSIb3DQEBCwUAA4IBAQChIHKtN0HW
UQmIWsi5q6jfB0/A7AeauPF1HTJOQV28n5Re70/Ol1JPq0SOkICJpmPuwPB/xm2L
9C91WX4oYtznqjE34vqsCFCSafGBObcZVkExra77LUsdERWwlcb1LnKfgHguKQuA
atI5cdCHgjeOo/9441Td6ggAXNC+ItV6B5dSBMXhb45qFauBxnAE4REIE62lf5J5
X48Sp34/C8hbN46rRlhMohJ6O6Z5QAgSpiFLfruGMMdH8KROE+h8+iZNWl20JQcf
N2w8zC8okhQYOPwSMZ3AMWRnsV3vnxACC6lUXh23VjHd4Z2cYg0zsflr91SU/4Hq
E/srTx23jmFe
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:30:47 2025 by rpki-client