This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32342d3234203d3e203631373139.roa
File:                     3133312e302e3139342e302f32342d3234203d3e203631373139.roa (raw, json)
Hash identifier:          1w6AqyeLc7mY5JDexYoHByQ3nVFlmwPx5yO2U0wllDo=
Subject key identifier:   0A:49:00:BD:15:74:47:9E:7C:FA:8D:58:C8:36:E9:43:97:ED:3A:00
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       25B50B9DAC929F08E0F244D2F5CC373B03F7057B
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32342d3234203d3e203631373139.roa
Signing time:             Thu 27 Nov 2025 14:21:09 +0000
ROA not before:           Thu 27 Nov 2025 14:16:09 +0000
ROA not after:            Thu 26 Nov 2026 14:21:09 +0000
asID:                     61719
IP address blocks:        131.0.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b5:0b:9d:ac:92:9f:08:e0:f2:44:d2:f5:cc:37:3b:03:f7:05:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Nov 27 14:16:09 2025 GMT
            Not After : Nov 26 14:21:09 2026 GMT
        Subject: CN=0A4900BD1574479E7CFA8D58C836E94397ED3A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:f5:d6:12:45:2a:51:74:e3:b9:29:17:8e:
                    62:65:b7:aa:73:1e:8b:56:fe:27:33:98:5b:48:60:
                    d6:9c:3f:8d:96:df:60:c2:c3:78:1b:96:13:3a:6a:
                    ed:2d:7e:1c:1e:b0:4a:65:92:d5:ad:14:18:06:72:
                    15:b4:e7:03:2e:41:e8:ad:e9:79:72:11:82:7c:84:
                    b1:d5:39:c2:d2:42:d4:af:3a:4d:03:7e:62:7a:7e:
                    bb:08:0c:31:0c:05:1a:f3:10:4d:d5:07:48:33:9f:
                    81:23:ac:77:e1:e7:ef:c7:cc:0a:7c:6f:5c:be:2e:
                    3f:c7:6d:a7:cb:f1:83:02:55:d4:85:96:ce:fb:2c:
                    41:2f:58:35:06:19:80:a8:7d:9a:f2:36:52:c8:3f:
                    18:31:fe:52:4a:ff:b8:de:8c:a6:65:6a:30:49:62:
                    87:de:e4:d5:18:4b:60:88:a0:b9:3e:4d:d3:30:24:
                    7e:3b:b4:82:d5:b1:83:f0:31:83:b6:69:ff:7e:3d:
                    80:fc:2d:df:4c:96:5b:5c:a4:5d:1c:3c:63:7b:53:
                    7e:22:27:c5:fe:f2:9c:79:72:30:28:f1:fe:78:98:
                    da:a1:4f:35:e5:6e:b5:76:68:8c:d0:9a:fa:0b:64:
                    46:99:ce:a6:d4:ba:39:a7:a9:b1:28:1f:a6:67:49:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:00:BD:15:74:47:9E:7C:FA:8D:58:C8:36:E9:43:97:ED:3A:00
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32342d3234203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:75:0b:33:11:6d:c5:63:3a:31:e2:de:f7:e9:43:59:43:
         0f:eb:6a:01:a0:65:87:81:e4:2f:bb:c6:9d:10:5e:8b:47:ab:
         65:6f:e2:da:09:17:18:bd:df:17:9a:9d:b0:8a:ee:a9:8b:cd:
         df:31:59:35:9e:8c:ed:38:6c:1e:8c:d1:2c:3c:1b:c6:37:ce:
         85:66:53:e9:2e:40:67:3b:66:dd:de:98:3d:ca:29:e0:b5:2c:
         b7:2c:b4:5d:2e:c0:28:90:f6:7a:76:02:0d:7b:a1:ce:76:65:
         7f:ac:cb:9f:76:05:23:48:35:0c:27:2a:fb:26:e4:3c:97:2b:
         98:53:17:69:5e:d5:72:88:ab:e2:ec:10:32:4a:25:5f:c6:83:
         a4:66:a5:06:c0:33:41:bd:b6:69:8c:c5:81:4a:0a:42:91:73:
         f3:10:8f:3e:5b:f0:18:b5:d0:31:98:ac:d5:28:04:5d:d4:fb:
         18:2d:2a:90:47:47:91:8c:1e:c7:2d:2c:b3:a9:41:51:34:05:
         f1:b0:44:06:74:7d:1a:f6:e5:e1:02:c4:70:03:e3:57:85:8c:
         3a:2a:86:f7:5f:3f:7a:e3:a9:e4:8b:16:e1:30:4a:37:65:74:
         94:6c:a5:b3:bb:97:6e:8b:cc:98:43:78:02:43:20:f8:99:97:
         73:fe:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:21:56 2025 by rpki-client