This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          hDzG6mUvRaR5eBE7IP0a1EOFrYfUEDlvH3FygqOpPqA=
Subject key identifier:   A6:EF:9C:C2:09:AF:5F:A5:D1:1D:25:13:D7:DF:56:29:D9:D3:7B:3D
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       06DAA45D3AF96265B0B86FB00A798FE9DD9D24C1
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
Signing time:             Fri 12 Dec 2025 15:27:43 +0000
ROA not before:           Fri 12 Dec 2025 15:22:43 +0000
ROA not after:            Fri 11 Dec 2026 15:27:43 +0000
asID:                     265300
IP address blocks:        168.121.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 02:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:da:a4:5d:3a:f9:62:65:b0:b8:6f:b0:0a:79:8f:e9:dd:9d:24:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Dec 12 15:22:43 2025 GMT
            Not After : Dec 11 15:27:43 2026 GMT
        Subject: CN=A6EF9CC209AF5FA5D11D2513D7DF5629D9D37B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:e0:ba:77:fa:53:b8:25:11:26:5c:f4:2c:
                    82:b7:8d:7c:a2:b6:b6:1d:58:9c:57:6f:49:43:49:
                    16:ef:cb:b9:f8:6d:73:1d:cf:99:3f:b8:c6:9f:91:
                    bd:93:69:4d:85:95:a2:db:cd:27:2a:1a:aa:85:ef:
                    dd:9b:fc:e1:e4:2a:a6:16:2e:9d:68:e2:b6:9e:ff:
                    19:88:00:6e:33:3a:df:79:b1:3f:50:7f:2a:8b:5e:
                    24:f7:34:49:bf:78:73:c0:bc:9d:bc:01:33:b0:02:
                    10:cd:c8:7c:c7:55:41:b5:a3:f1:56:a1:5e:c1:b4:
                    4f:2c:e0:91:59:2f:84:3f:df:68:c3:49:4b:8c:27:
                    22:2d:74:c1:6b:de:3d:39:71:35:64:bb:da:68:f1:
                    db:bd:4c:1c:8f:6c:73:8f:31:d3:82:3f:4c:1f:e7:
                    a7:07:7f:cd:7c:4b:45:15:70:ea:12:43:7e:d5:d7:
                    bf:06:b2:92:94:0b:82:28:37:86:04:76:c1:24:d7:
                    82:46:9d:40:50:2f:40:1e:11:fd:d5:57:9e:18:ac:
                    46:27:70:a1:27:e4:70:93:cf:5f:c1:fd:c2:65:d1:
                    d8:99:8c:99:1b:ec:0b:02:b2:b6:0a:d2:8a:04:97:
                    c1:56:26:6e:ef:04:79:f5:5c:f5:94:45:fb:4c:1e:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:9C:C2:09:AF:5F:A5:D1:1D:25:13:D7:DF:56:29:D9:D3:7B:3D
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:e0:a0:4e:ee:c2:c9:47:24:7d:bc:39:d9:04:cf:93:73:
         a0:20:ae:0b:52:bd:61:fa:f7:c2:52:8d:b5:f3:92:2e:73:1e:
         4b:52:6d:1b:79:ba:5f:91:eb:4a:2a:b5:44:aa:ea:cb:c0:db:
         84:68:34:4e:cd:30:7d:d5:fb:70:dc:7b:67:b8:cd:24:8d:ed:
         9a:82:31:3c:5f:86:9c:87:63:8c:4c:a8:f8:35:c4:9b:88:0a:
         56:3a:cf:06:ea:3f:29:12:69:78:d2:bd:6a:92:d0:94:f7:e6:
         81:d2:74:d8:f4:01:bb:f4:9d:bf:8b:e1:43:92:24:f2:7f:dc:
         ba:d8:d9:3c:26:33:79:8c:b7:e8:c2:d8:6c:84:df:7f:20:0f:
         b1:9e:8d:15:91:dd:fa:f4:f8:56:78:dd:1c:4d:e8:e8:1b:64:
         c4:11:df:5a:22:3f:b7:7e:e4:a6:5a:ea:9f:c5:5a:25:f6:60:
         a6:34:fb:46:20:12:ba:f0:9f:97:0a:bc:b5:7a:cf:5e:18:ed:
         c2:69:c0:8c:5e:db:a2:48:92:71:68:21:9e:07:f6:40:0e:52:
         e0:22:78:14:59:b5:d6:b0:00:99:78:f9:e5:42:26:eb:14:08:
         68:be:70:c4:78:f0:7e:19:9c:64:46:62:38:1d:89:7e:7f:01:
         eb:f3:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:39:37 2025 by rpki-client