This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa
File:                     3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          ybV8rIgGqlfIiXuP1NGMeREicYgC7Fo3IOMSTLfoHdw=
Subject key identifier:   8F:90:C2:8A:F6:77:9A:EF:89:F0:BC:0F:0D:46:FF:29:E3:7F:38:09
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       57F417401FBF5F76EBFA824269D728CB3DD65132
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 11 Dec 2025 15:43:47 +0000
ROA not before:           Thu 11 Dec 2025 15:38:47 +0000
ROA not after:            Thu 10 Dec 2026 15:43:47 +0000
asID:                     263444
IP address blocks:        138.36.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f4:17:40:1f:bf:5f:76:eb:fa:82:42:69:d7:28:cb:3d:d6:51:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Dec 11 15:38:47 2025 GMT
            Not After : Dec 10 15:43:47 2026 GMT
        Subject: CN=8F90C28AF6779AEF89F0BC0F0D46FF29E37F3809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:a3:0b:bb:7a:46:9c:31:eb:fb:11:bc:5c:
                    77:36:3b:09:58:a9:e9:bf:b8:ff:ba:40:97:97:12:
                    a0:95:a9:d3:9a:7b:44:cd:86:43:49:b2:45:ce:44:
                    f7:8a:d5:f2:f7:8d:6a:de:6d:8a:46:c7:43:ad:52:
                    22:e2:79:37:d9:1d:ba:65:c2:b4:d5:98:7f:de:ee:
                    a8:82:0c:37:6b:67:af:48:80:83:d0:43:ac:bd:f7:
                    a4:de:1a:3c:f8:ad:82:fa:41:70:85:ac:c5:77:1e:
                    1a:9a:5c:f6:5b:e1:8a:40:34:6b:d4:64:2e:f5:40:
                    60:6b:8d:52:d5:83:4a:76:90:27:98:83:45:de:da:
                    d4:46:3f:59:ee:e1:e0:71:74:84:cb:6b:0a:de:ab:
                    42:f1:08:8b:9e:23:2c:14:af:61:69:da:64:41:a0:
                    1f:de:19:f0:17:1a:5a:74:d8:f6:7e:0f:c0:ae:7a:
                    fa:d7:9a:a5:d1:e1:89:8a:f8:b1:cb:8e:e6:93:75:
                    1b:48:bf:1c:77:ee:ae:cb:31:95:d0:89:a7:23:fa:
                    0d:b3:e5:63:d2:2a:c8:d7:88:c3:f8:db:a2:9e:2d:
                    71:29:b1:4e:30:4a:7b:e8:1f:56:c7:61:c3:69:4b:
                    51:64:d1:e3:c7:69:18:db:71:0f:4a:cc:42:8e:1c:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:C2:8A:F6:77:9A:EF:89:F0:BC:0F:0D:46:FF:29:E3:7F:38:09
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:64:f9:10:df:c9:00:74:91:c7:5e:af:44:3e:00:e8:29:21:
         ab:b4:1c:d6:29:01:d4:af:ad:1d:45:07:9e:2f:f7:82:81:7e:
         9d:a4:b5:50:65:71:51:f4:ec:c1:79:c8:4b:2c:ac:c9:93:04:
         16:03:31:6b:1f:10:cb:ce:e1:27:8a:bb:9e:b2:8f:f1:7e:a9:
         d2:9e:51:8c:d3:52:a1:83:37:d2:02:f5:b4:d0:52:25:0c:7c:
         56:ee:d7:dc:1b:54:c1:89:1a:1a:ae:95:59:15:6b:4b:96:f8:
         75:0c:09:f2:9f:e0:ce:74:7f:a0:b7:43:ea:54:0d:a4:50:4a:
         3d:f7:0a:5c:9b:df:68:fb:25:1c:cb:f5:38:8e:86:6e:22:6c:
         c5:2b:7d:b9:c1:82:51:79:02:9c:49:63:3c:2c:38:9b:48:61:
         6a:e2:a0:68:a9:7d:84:9f:f1:7b:ee:f7:d8:b5:81:cd:19:ff:
         65:90:ff:f5:4c:23:f6:fc:04:70:bd:2e:58:c6:5d:8c:58:84:
         c5:52:cd:35:62:3b:39:db:ff:fb:1e:91:59:11:11:43:38:21:
         21:69:0f:00:ae:a2:fe:f7:02:89:51:b5:02:5d:34:3e:c7:f1:
         c5:81:77:36:b0:96:e6:3b:81:b5:77:48:63:2b:44:bf:03:50:
         b1:e2:c8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:38:00 2025 by rpki-client