This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32332d3233203d3e203631373139.roa
File:                     3133312e302e3139322e302f32332d3233203d3e203631373139.roa (raw, json)
Hash identifier:          vG3ot6XwVMX9beiWJuzDu1mFYzOPs2vj6m8E7hD4MWk=
Subject key identifier:   8F:1F:F4:70:70:8E:10:8F:40:F7:41:93:E4:7A:F8:99:ED:9C:F3:EC
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       6BE3FB1DAE9BA10A80818192CB47435619635E5E
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32332d3233203d3e203631373139.roa
Signing time:             Wed 12 Nov 2025 12:00:40 +0000
ROA not before:           Wed 12 Nov 2025 11:55:40 +0000
ROA not after:            Wed 11 Nov 2026 12:00:40 +0000
asID:                     61719
IP address blocks:        131.0.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:fb:1d:ae:9b:a1:0a:80:81:81:92:cb:47:43:56:19:63:5e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Nov 12 11:55:40 2025 GMT
            Not After : Nov 11 12:00:40 2026 GMT
        Subject: CN=8F1FF470708E108F40F74193E47AF899ED9CF3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:d6:c5:69:a2:eb:83:df:15:69:da:78:ad:
                    60:a8:87:b4:ca:c4:aa:8f:05:eb:c0:9f:e2:c6:5e:
                    4a:6f:86:fe:44:90:4c:ba:19:43:a3:42:eb:0a:a4:
                    36:c8:f9:21:a8:7c:07:dc:d9:1d:13:c2:fa:f9:6c:
                    c9:7f:eb:08:23:36:cd:07:f5:ee:01:11:05:ff:0d:
                    bd:80:85:2e:3b:d0:c4:4f:90:7b:cc:c2:75:b1:a2:
                    d5:6d:6f:2c:9b:d6:52:16:f0:a9:03:7f:cc:c9:7a:
                    d2:18:47:0f:1e:03:f3:61:0e:59:08:fe:a5:f4:b8:
                    6a:53:b5:95:2b:85:03:47:e0:15:0a:43:57:a6:54:
                    3a:51:e5:e1:07:b2:5c:23:2e:a0:eb:1b:e5:a6:43:
                    fb:b7:1f:e4:ca:b6:34:28:8c:c4:63:0e:d3:ff:3e:
                    12:68:76:0d:0d:81:8a:ff:0f:86:34:d0:b9:cc:de:
                    ad:41:89:6b:1a:2c:41:05:a8:18:9f:00:2f:b3:7d:
                    5e:7b:19:85:f0:0b:85:c2:74:d8:7d:8b:66:00:c9:
                    be:eb:a5:14:9a:a0:09:20:9a:11:f4:af:15:6c:15:
                    30:eb:de:ce:f6:93:76:37:f2:f7:6f:f9:9f:be:76:
                    12:d1:92:79:72:4c:5e:51:f7:96:27:47:21:5e:17:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:F4:70:70:8E:10:8F:40:F7:41:93:E4:7A:F8:99:ED:9C:F3:EC
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32332d3233203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:26:9c:4d:dc:b3:7f:cd:cb:32:d7:1e:81:49:a3:0c:78:61:
         ab:96:85:2c:92:29:3e:d0:36:9b:14:e4:49:9f:05:b4:0c:20:
         c8:a0:50:6c:df:61:b7:54:76:06:80:de:61:a2:c6:c8:ab:c6:
         0e:e7:a0:df:27:09:9c:ce:81:1b:b1:12:18:b1:c5:f3:ad:71:
         b4:82:65:5d:90:f1:ba:14:89:98:f5:f4:0b:1f:c4:77:35:3f:
         ea:b2:11:d2:49:7e:d2:ce:e5:65:6f:27:9e:7a:fb:85:3c:94:
         b7:d0:2a:b7:38:c3:19:b9:70:e5:66:4f:40:83:92:2f:f8:c0:
         e5:66:13:4f:a5:61:18:94:66:ba:af:10:30:86:4c:87:9e:a6:
         69:2b:e8:2d:3e:a2:72:c4:6d:45:de:b4:d6:66:e8:a3:b9:ef:
         59:64:93:d3:a0:8b:0b:c6:d9:d1:24:ca:94:41:81:4a:a9:7a:
         18:5a:e7:e4:ea:34:47:ba:7d:93:bf:27:b2:3e:29:30:7a:2b:
         38:fe:d2:af:e5:cb:bb:e2:10:6a:c0:24:5f:e4:1d:6d:59:e5:
         92:c3:2e:9a:83:df:0c:a0:a8:28:d0:60:4d:33:13:a1:83:5c:
         f5:63:3d:e4:9b:3e:27:c5:66:4c:16:76:a7:47:2b:cf:4b:15:
         19:75:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:21:44 2025 by rpki-client