This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3230312e3138322e3230382e302f32322d3332203d3e203532363034.roa
File:                     3230312e3138322e3230382e302f32322d3332203d3e203532363034.roa (raw, json)
Hash identifier:          reEH/wMlRvPuI4uCUGczp+QBsi9u3UlWgcg7vODUx0c=
Subject key identifier:   3E:34:1F:D7:A4:F8:D3:84:E2:40:49:46:B0:8F:7B:FD:9B:81:70:6A
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       555B5537E7E6DEF1646A2805D5580635F5BE049F
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3230312e3138322e3230382e302f32322d3332203d3e203532363034.roa
Signing time:             Tue 09 Dec 2025 19:29:09 +0000
ROA not before:           Tue 09 Dec 2025 19:24:09 +0000
ROA not after:            Tue 08 Dec 2026 19:29:09 +0000
asID:                     52604
IP address blocks:        201.182.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 11:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5b:55:37:e7:e6:de:f1:64:6a:28:05:d5:58:06:35:f5:be:04:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Dec  9 19:24:09 2025 GMT
            Not After : Dec  8 19:29:09 2026 GMT
        Subject: CN=3E341FD7A4F8D384E2404946B08F7BFD9B81706A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:21:ff:d0:a9:ee:2f:71:bd:44:b9:79:49:
                    8c:8e:7c:33:20:02:15:02:54:52:7d:77:58:5e:fe:
                    30:26:5a:dc:f0:f0:ba:1b:47:08:b7:5b:9a:b4:56:
                    b9:4e:c3:a2:f0:86:e1:7f:3a:2b:12:c9:43:a1:fb:
                    c8:d8:77:eb:14:a3:94:2b:bb:63:f4:79:7e:be:0a:
                    7c:d6:ac:51:73:c7:aa:1c:cb:cb:c5:5b:5f:73:09:
                    a5:88:7a:f9:09:82:08:1e:37:ba:1b:11:26:38:39:
                    61:98:42:2e:b8:ac:a5:82:03:f1:92:0c:4f:74:fb:
                    21:e8:5f:6a:95:a9:1c:23:66:fb:41:1f:ec:a9:42:
                    a7:3b:3a:86:4e:a0:ba:15:0f:a9:8d:ee:a0:bf:4f:
                    17:ff:b3:13:9a:b0:61:53:62:8c:8e:df:f0:21:fc:
                    9b:bd:b9:a5:b5:38:94:f1:8b:b0:7c:18:b9:c6:fe:
                    e1:81:68:b9:96:d7:48:a4:69:99:4a:b0:40:cb:11:
                    e2:45:6d:8e:e8:64:9a:28:ad:dd:bc:1c:42:61:9c:
                    56:cc:01:aa:4a:12:08:22:cf:23:67:ad:f3:41:81:
                    e2:91:fa:c9:e8:40:8d:f9:db:4a:9c:e7:a7:a1:13:
                    c6:f3:70:02:7e:24:d2:6e:fe:b9:7a:18:01:14:e7:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:34:1F:D7:A4:F8:D3:84:E2:40:49:46:B0:8F:7B:FD:9B:81:70:6A
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3230312e3138322e3230382e302f32322d3332203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:ad:41:04:03:de:19:49:c6:03:72:ab:fc:26:8b:e5:df:
         69:0d:f1:ce:0a:0a:df:a5:a6:7f:bf:42:bb:ff:83:c7:61:8e:
         a8:af:0e:c8:e5:07:ae:30:9c:ba:d7:6d:7e:c3:e6:13:1d:99:
         eb:68:a8:1b:75:ea:27:c7:52:dc:08:c0:bf:91:2f:10:68:c6:
         20:68:0d:2a:97:6b:d4:12:1b:5b:81:59:4f:79:0b:d9:e3:a0:
         9d:14:09:49:fd:bd:b0:0b:97:20:38:65:37:8a:a1:c3:47:a7:
         49:40:b2:40:9f:1d:87:ca:1c:0f:e3:80:be:47:11:71:83:7b:
         8a:31:34:4d:92:de:59:86:e9:5a:82:88:bf:02:3f:8a:17:70:
         8b:db:29:be:32:7c:e7:18:7c:66:00:c3:87:a3:ff:43:de:73:
         33:c3:91:c9:4a:56:bc:df:81:81:3a:1f:eb:d2:fa:e3:26:6f:
         42:38:80:d5:0c:47:75:36:b2:d2:99:ac:19:3a:10:f8:93:07:
         f7:8a:72:44:16:ed:38:b6:c4:63:94:ae:ba:69:09:6a:1d:67:
         9a:7d:0f:c8:a5:43:40:2d:87:68:d5:32:a9:59:67:ce:89:4c:
         7e:bd:2b:4b:b1:85:f9:ff:15:02:32:29:e5:6c:f4:9e:ec:ae:
         f1:a0:c8:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVVtVN+fm3vFkaigF1VgGNfW+BJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M4MUIxRjYwQjEwNERERTIxQzUzQURCNEVFREIxQ0Yz
N0Q5RTNFNTAeFw0yNTEyMDkxOTI0MDlaFw0yNjEyMDgxOTI5MDlaMDMxMTAvBgNV
BAMTKDNFMzQxRkQ3QTRGOEQzODRFMjQwNDk0NkIwOEY3QkZEOUI4MTcwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2SH/0KnuL3G9RLl5SYyOfDMg
AhUCVFJ9d1he/jAmWtzw8LobRwi3W5q0VrlOw6LwhuF/OisSyUOh+8jYd+sUo5Qr
u2P0eX6+CnzWrFFzx6ocy8vFW19zCaWIevkJgggeN7obESY4OWGYQi64rKWCA/GS
DE90+yHoX2qVqRwjZvtBH+ypQqc7OoZOoLoVD6mN7qC/Txf/sxOasGFTYoyO3/Ah
/Ju9uaW1OJTxi7B8GLnG/uGBaLmW10ikaZlKsEDLEeJFbY7oZJoord28HEJhnFbM
AapKEggizyNnrfNBgeKR+snoQI3520qc56ehE8bzcAJ+JNJu/rl6GAEU52ahAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPjQf16T404TiQElGsI97/ZuBcGowHwYDVR0j
BBgwFoAUfIGx9gsQTd4hxTrbTu2xzzfZ4+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtEWVRFNk5UWnFKVFhFWGVkaXZMc0ZmZnVRa2g4M1luNWR0Ynh5bUto
SjgvMS83QzgxQjFGNjBCMTA0RERFMjFDNTNBREI0RUVEQjFDRjM3RDlFM0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDODFCMUY2MEIxMDREREUy
MUM1M0FEQjRFRURCMUNGMzdEOUUzRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VLRFlURTZOVFpxSlRYRVhlZGl2THNGZmZ1UWtoODNZbjVkdGJ4eW1LaEo4LzEv
MzIzMDMxMmUzMTM4MzIyZTMyMzAzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzNjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJttAwDQYJKoZIhvcNAQELBQADggEBAH0ErUEE
A94ZScYDcqv8Jovl32kN8c4KCt+lpn+/Qrv/g8dhjqivDsjlB64wnLrXbX7D5hMd
metoqBt16ifHUtwIwL+RLxBoxiBoDSqXa9QSG1uBWU95C9njoJ0UCUn9vbALlyA4
ZTeKocNHp0lAskCfHYfKHA/jgL5HEXGDe4oxNE2S3lmG6VqCiL8CP4oXcIvbKb4y
fOcYfGYAw4ej/0PeczPDkclKVrzfgYE6H+vS+uMmb0I4gNUMR3U2stKZrBk6EPiT
B/eKckQW7Ti2xGOUrrppCWodZ5p9D8ilQ0Ath2jVMqlZZ86JTH69K0uxhfn/FQIy
KeVs9J7srvGgyP4=
-----END CERTIFICATE-----
Generated at Sun Dec 21 21:27:19 2025 by rpki-client