This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa
File:                     3133312e302e3139342e302f32332d3233203d3e203631373139.roa (raw, json)
Hash identifier:          xdViVKMxPhfsKQ4gYhMDyQnJ0PkhdTyC0d9OW5EGJ2s=
Subject key identifier:   8B:F3:59:AD:6D:22:C2:09:72:BB:D2:FD:38:44:9C:0D:0A:76:43:33
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       4359B93263426F4DFACF630918C1CB23D9A13431
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa
Signing time:             Wed 12 Nov 2025 12:00:40 +0000
ROA not before:           Wed 12 Nov 2025 11:55:40 +0000
ROA not after:            Wed 11 Nov 2026 12:00:40 +0000
asID:                     61719
IP address blocks:        131.0.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:59:b9:32:63:42:6f:4d:fa:cf:63:09:18:c1:cb:23:d9:a1:34:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Nov 12 11:55:40 2025 GMT
            Not After : Nov 11 12:00:40 2026 GMT
        Subject: CN=8BF359AD6D22C20972BBD2FD38449C0D0A764333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:b4:fd:66:87:7f:bc:01:50:e9:bf:1d:6d:
                    83:67:08:0d:60:65:e2:aa:b2:9d:b3:1a:01:a1:68:
                    74:76:e2:a8:52:10:63:df:11:a7:70:ea:b7:28:0a:
                    69:52:c7:93:4f:5e:5e:99:44:fb:4c:09:9d:c3:a2:
                    58:57:57:78:be:ea:98:2c:b5:86:47:6e:98:99:fb:
                    61:b3:de:19:25:5d:f1:98:f8:2d:7f:bd:a2:68:5b:
                    47:b5:9e:32:11:e9:4d:cc:3f:f3:e2:d0:6c:b6:a7:
                    4f:10:47:d8:d7:59:d2:a8:21:33:dd:e0:a5:39:dd:
                    e8:f7:ce:f6:7d:97:91:eb:38:dc:40:e2:e5:e5:99:
                    c8:ae:15:54:07:04:09:c8:ac:f6:2b:90:58:90:57:
                    77:76:fb:47:bf:29:6e:26:0b:32:94:cd:48:b0:c0:
                    b9:a5:71:a9:8f:73:0b:93:af:b2:7f:7c:29:a5:cf:
                    32:d1:3e:59:24:98:f9:f8:59:94:a3:e9:2e:e0:1a:
                    87:ac:d9:96:de:2d:4c:24:9d:3d:fe:7d:59:21:10:
                    82:7f:c8:4f:42:36:eb:da:ef:cf:d2:d8:9e:a7:50:
                    57:b7:c3:18:3a:cf:8f:d6:84:ef:05:e4:56:f2:6b:
                    5b:59:87:21:73:4b:47:26:bd:23:23:b0:1e:36:0f:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:59:AD:6D:22:C2:09:72:BB:D2:FD:38:44:9C:0D:0A:76:43:33
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:06:fe:f1:3a:22:80:7b:a9:eb:f5:88:19:e8:7d:38:81:3b:
         2b:64:cb:9a:08:5a:56:9f:c0:d1:8e:0f:2d:6f:6b:8a:f0:18:
         56:08:c6:6e:2e:a4:39:cf:35:f8:03:46:97:f7:71:ca:20:87:
         53:bb:22:f7:a4:66:d5:17:fe:b1:ff:df:32:b5:fd:32:dd:89:
         b3:4a:6e:d1:93:fb:a9:ea:e4:1a:bb:80:ab:bf:ba:dc:73:8f:
         81:15:e6:ea:57:21:cb:aa:3a:6d:12:d9:b6:f6:06:2b:ab:df:
         bb:72:f7:43:72:84:2d:90:ea:ff:ff:7b:7a:01:56:33:23:dc:
         39:63:d7:24:74:18:d7:53:b9:5a:58:ef:1e:73:72:e4:97:f6:
         d7:3f:2f:f1:98:39:3c:a1:bb:c6:f5:a4:27:5e:d7:46:78:8b:
         8c:f5:c2:97:d0:9a:3b:0b:39:0a:19:a9:4a:5d:85:d3:c3:13:
         30:05:c1:38:1b:9c:df:45:4f:05:8f:98:f2:c5:76:c0:00:16:
         68:08:16:40:9c:99:70:ca:63:54:ee:f9:dd:06:a8:8e:65:1b:
         19:cd:d2:7b:28:8c:72:a2:6e:41:64:27:14:e8:a5:48:5c:ca:
         63:32:89:62:ad:21:59:96:ef:30:5c:da:12:10:eb:d1:00:ec:
         a4:08:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:20:17 2025 by rpki-client