This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130362e302f32352d3235203d3e203631363730.roa
File:                     3133312e3130302e3130362e302f32352d3235203d3e203631363730.roa (raw, json)
Hash identifier:          YdqYN9PJt3+J0pllnDuHrXC5DMyrwV0v4qLlqqrzRYg=
Subject key identifier:   0E:26:BF:6C:66:5E:B6:3B:9B:C6:B0:DE:B6:79:32:74:7D:2C:04:EA
Certificate issuer:       /CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59
Certificate serial:       3AE3306FCCF2953D1ED564784B7D5EB6A6360415
Authority key identifier: B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130362e302f32352d3235203d3e203631363730.roa
Signing time:             Tue 09 Dec 2025 19:08:24 +0000
ROA not before:           Tue 09 Dec 2025 19:03:24 +0000
ROA not after:            Tue 08 Dec 2026 19:08:24 +0000
asID:                     61670
IP address blocks:        131.100.106.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl
                          rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 12:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e3:30:6f:cc:f2:95:3d:1e:d5:64:78:4b:7d:5e:b6:a6:36:04:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59
        Validity
            Not Before: Dec  9 19:03:24 2025 GMT
            Not After : Dec  8 19:08:24 2026 GMT
        Subject: CN=0E26BF6C665EB63B9BC6B0DEB67932747D2C04EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:9f:f2:aa:07:04:93:b4:54:41:e9:84:22:
                    69:2d:53:cb:f4:29:38:4e:42:f7:f0:78:9f:0e:9b:
                    2c:72:0f:5a:31:ca:e6:69:92:c9:55:a2:65:57:e1:
                    68:64:2e:52:f5:02:ca:45:02:65:4e:5d:f6:27:7c:
                    fe:db:b6:5d:38:99:b9:23:3c:fd:f0:7f:cf:fb:14:
                    3b:b8:3a:92:47:2e:71:d6:e2:fe:e8:33:1d:3e:28:
                    f4:ba:59:90:7d:55:74:43:a1:e3:93:36:bb:58:57:
                    f8:e8:32:df:d9:c6:a0:2a:40:d6:f7:91:13:6e:6a:
                    66:40:11:a4:bf:5f:5b:41:32:d8:82:7b:f6:ed:9f:
                    92:28:39:f2:f9:6b:b8:ae:3e:17:e9:fe:07:24:23:
                    ee:76:41:e0:03:52:64:79:45:ed:e1:0a:ce:31:3b:
                    e8:da:03:c8:4e:f8:fb:37:13:61:49:d0:d2:ab:50:
                    ae:f8:57:28:22:cb:dc:39:82:66:93:4f:ba:a9:a4:
                    24:22:11:f5:87:53:77:a6:dd:b8:a6:a2:88:db:d6:
                    e4:0e:1e:a7:5a:4b:95:ec:59:36:e0:e8:1f:ba:e1:
                    e4:74:a8:70:85:06:a0:03:13:79:88:39:e8:20:72:
                    ae:cd:65:c4:eb:db:35:83:77:3a:68:f4:53:87:26:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:26:BF:6C:66:5E:B6:3B:9B:C6:B0:DE:B6:79:32:74:7D:2C:04:EA
            X509v3 Authority Key Identifier:
                keyid:B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130362e302f32352d3235203d3e203631363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.106.0/25

    Signature Algorithm: sha256WithRSAEncryption
         98:d1:fb:21:a0:0c:81:99:2c:fb:46:ff:fb:02:c9:6a:fa:78:
         dc:1f:d3:55:16:38:d3:05:f8:bf:2b:78:da:65:57:1f:8c:45:
         9c:8d:72:c4:2e:da:59:5c:0f:b8:ad:91:2f:fe:6b:ea:63:d8:
         ea:c2:0d:d9:d1:e9:cb:8a:2b:67:dd:6c:0c:17:40:78:b1:f9:
         91:47:c0:f7:db:71:4d:42:2b:eb:2e:00:d9:1d:54:84:e9:c8:
         89:eb:c2:1b:08:55:88:d6:83:e7:3c:60:c6:e1:04:58:2d:23:
         aa:5e:99:b4:4b:13:3c:4d:a9:a3:ba:be:c4:49:d5:11:c1:09:
         c1:fd:54:6f:35:75:3b:5f:76:9c:f5:4d:bc:78:56:56:a7:7c:
         fb:57:48:46:70:ae:9a:6a:63:3a:9e:1f:74:8b:fe:dc:09:0a:
         11:3f:3d:28:3d:62:75:cd:ab:b7:0a:ab:63:e9:94:47:9b:c2:
         8b:07:79:57:46:af:cd:7c:33:d5:73:aa:bd:88:58:2b:5b:7a:
         a3:46:b5:ea:2f:74:20:52:43:0b:e0:4b:e3:1f:02:a8:ef:24:
         4c:58:20:45:a2:5e:63:14:da:89:49:04:c2:ad:8a:ea:26:4d:
         58:13:2b:b2:bf:01:e0:6a:02:1f:eb:c3:a5:c6:ec:94:20:92:
         66:18:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:53:12 2025 by rpki-client