This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          HrlxDuWTV2UcVI2V488A7PUY8BvCFIpsDQM4S8IPmRs=
Subject key identifier:   98:B4:18:67:DD:CD:4F:C2:2C:E8:E9:0F:63:6B:F6:A7:16:CE:CD:93
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       75308A1579BC455B8D3AF2E2576D0F3A98E7A32F
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa
Signing time:             Fri 12 Dec 2025 15:27:42 +0000
ROA not before:           Fri 12 Dec 2025 15:22:42 +0000
ROA not after:            Fri 11 Dec 2026 15:27:42 +0000
asID:                     265300
IP address blocks:        168.121.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 02:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:30:8a:15:79:bc:45:5b:8d:3a:f2:e2:57:6d:0f:3a:98:e7:a3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Dec 12 15:22:42 2025 GMT
            Not After : Dec 11 15:27:42 2026 GMT
        Subject: CN=98B41867DDCD4FC22CE8E90F636BF6A716CECD93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:b2:98:c2:77:31:3e:a7:6d:58:04:bc:98:
                    68:2c:bf:e3:43:6c:6a:45:cf:07:b3:73:8d:df:ab:
                    ab:44:cf:ba:f2:bd:a2:44:2f:d2:0d:62:0e:3b:65:
                    0d:d1:97:8c:0c:6f:60:b8:dc:1d:57:84:3d:52:b9:
                    18:5c:5c:81:89:c5:73:11:c4:f2:e4:9d:08:72:b6:
                    a2:e5:d3:94:ee:a4:d6:c4:66:70:85:ad:1a:b5:a1:
                    ad:d5:15:db:99:6e:9b:6a:6f:05:88:85:6b:1e:fb:
                    28:7c:4b:7d:0d:33:e4:90:00:d6:76:66:e2:e8:f0:
                    58:86:09:b2:10:f0:81:d8:7a:2b:91:6f:f7:eb:13:
                    17:47:17:ec:80:09:de:cc:eb:6a:07:84:99:23:47:
                    05:98:bb:85:bb:f8:12:75:9b:e5:9d:b3:b7:2d:48:
                    87:db:5f:f6:d9:a5:53:ed:bc:b4:d9:04:43:3f:d2:
                    f6:93:a8:5a:bf:b2:c4:a1:e6:69:6c:69:36:ce:53:
                    0f:f6:65:c9:cf:48:ef:45:da:33:13:54:dd:c8:4f:
                    b2:b0:78:71:dd:35:93:2f:57:8e:4b:d9:2d:aa:39:
                    75:52:6b:25:af:fb:8a:fe:f2:b8:47:26:37:45:97:
                    eb:a1:46:63:38:e1:6d:74:ed:d3:58:eb:ed:de:22:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B4:18:67:DD:CD:4F:C2:2C:E8:E9:0F:63:6B:F6:A7:16:CE:CD:93
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:71:63:9b:64:77:25:20:a3:cc:09:2d:ba:64:78:79:b1:2a:
         6a:2b:65:40:d5:cf:89:9b:93:a0:61:37:3f:3f:4b:1f:7c:1f:
         24:8f:52:9c:66:df:1b:da:f2:39:32:24:36:6e:b0:c8:5d:83:
         9c:7f:a7:58:d8:df:04:b9:b6:4d:bd:6e:55:3a:92:9a:97:00:
         66:21:76:79:03:70:c7:0b:af:94:3f:80:fa:ca:50:2f:e7:4b:
         f2:03:ba:dd:0f:d7:af:1f:e8:3d:dd:fa:7d:84:b0:a4:75:81:
         5f:08:6e:9e:e5:c0:5e:a0:2c:eb:10:33:33:00:d6:18:b3:f5:
         d4:d5:58:d4:d2:f5:e8:b8:0b:85:ae:0f:05:47:1f:a9:2b:21:
         1f:cb:01:db:b7:ec:cd:8c:f9:dc:f7:e2:4d:5a:00:91:54:0e:
         fd:f9:6c:6e:fe:5b:0d:4a:d7:cd:71:0d:a2:07:0f:d4:28:e5:
         29:ea:77:5b:a3:55:a2:e4:88:5c:fb:83:eb:64:33:8f:fe:1f:
         20:f4:df:15:ff:43:e2:9e:dd:fa:9a:a6:63:dc:28:4b:ee:b9:
         a2:bc:a7:85:7f:76:69:95:de:2d:cf:01:13:e8:42:8e:c1:27:
         7d:25:bf:56:ad:50:f5:85:e4:1c:c8:73:b9:4c:8d:4d:fe:cb:
         40:b0:5b:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdTCKFXm8RVuNOvLiV20POpjnoy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThGQjAxNzk2M0I4NkE5MjVGNzIxRjIwRUQ1Njg1MzQz
MDVCQkJCRjAeFw0yNTEyMTIxNTIyNDJaFw0yNjEyMTExNTI3NDJaMDMxMTAvBgNV
BAMTKDk4QjQxODY3RERDRDRGQzIyQ0U4RTkwRjYzNkJGNkE3MTZDRUNEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzg7KYwncxPqdtWAS8mGgsv+ND
bGpFzwezc43fq6tEz7ryvaJEL9INYg47ZQ3Rl4wMb2C43B1XhD1SuRhcXIGJxXMR
xPLknQhytqLl05TupNbEZnCFrRq1oa3VFduZbptqbwWIhWse+yh8S30NM+SQANZ2
ZuLo8FiGCbIQ8IHYeiuRb/frExdHF+yACd7M62oHhJkjRwWYu4W7+BJ1m+Wds7ct
SIfbX/bZpVPtvLTZBEM/0vaTqFq/ssSh5mlsaTbOUw/2ZcnPSO9F2jMTVN3IT7Kw
eHHdNZMvV45L2S2qOXVSayWv+4r+8rhHJjdFl+uhRmM44W107dNY6+3eIgHdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmLQYZ93NT8Is6OkPY2v2pxbOzZMwHwYDVR0j
BBgwFoAUmPsBeWO4apJfch8g7VaFNDBbu78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC85OEZCMDE3OTYzQjg2QTkyNUY3MjFGMjBFRDU2ODUzNDMwNUJCQkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RkIwMTc5NjNCODZBOTI1
RjcyMUYyMEVENTY4NTM0MzA1QkJCQkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzEzNjM4MmUzMTMyMzEyZTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoeUYwDQYJKoZIhvcNAQELBQADggEBADRxY5tk
dyUgo8wJLbpkeHmxKmorZUDVz4mbk6BhNz8/Sx98HySPUpxm3xva8jkyJDZusMhd
g5x/p1jY3wS5tk29blU6kpqXAGYhdnkDcMcLr5Q/gPrKUC/nS/IDut0P168f6D3d
+n2EsKR1gV8Ibp7lwF6gLOsQMzMA1hiz9dTVWNTS9ei4C4WuDwVHH6krIR/LAdu3
7M2M+dz34k1aAJFUDv35bG7+Ww1K181xDaIHD9Qo5Snqd1ujVaLkiFz7g+tkM4/+
HyD03xX/Q+Ke3fqapmPcKEvuuaK8p4V/dmmV3i3PARPoQo7BJ30lv1atUPWF5BzI
c7lMjU3+y0CwW98=
-----END CERTIFICATE-----
Generated at Sun Dec 14 08:41:24 2025 by rpki-client