This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa
File:                     3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa (raw, json)
Hash identifier:          XTL2XQ+LL2NXKxD24aEhuEN0ClcRPgcmfzGvRgXpCw8=
Subject key identifier:   F0:86:8B:89:4E:5D:44:26:53:99:B4:3D:E8:B1:D1:BE:7E:12:05:2C
Certificate issuer:       /CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59
Certificate serial:       0C150B2067451EA134BE02AF9915ADC675011BCC
Authority key identifier: B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa
Signing time:             Tue 09 Dec 2025 19:08:56 +0000
ROA not before:           Tue 09 Dec 2025 19:03:56 +0000
ROA not after:            Tue 08 Dec 2026 19:08:56 +0000
asID:                     61670
IP address blocks:        131.100.107.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl
                          rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 12:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:15:0b:20:67:45:1e:a1:34:be:02:af:99:15:ad:c6:75:01:1b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59
        Validity
            Not Before: Dec  9 19:03:56 2025 GMT
            Not After : Dec  8 19:08:56 2026 GMT
        Subject: CN=F0868B894E5D44265399B43DE8B1D1BE7E12052C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:6c:84:61:4b:6e:23:74:87:85:68:d7:8e:
                    55:a2:bb:7f:e2:76:ac:48:7e:e5:e8:09:e0:a5:d3:
                    dd:11:28:69:e0:63:11:91:ea:d0:0e:69:39:03:ee:
                    6f:9e:fb:2b:6f:d9:bd:3c:3f:a5:be:88:79:34:55:
                    f6:63:37:d0:d3:95:11:16:e8:41:ea:4b:5f:22:6b:
                    ae:31:9e:bb:32:01:af:ce:dd:9f:81:79:d2:c6:d0:
                    a1:f9:d4:33:a7:65:e3:5c:75:30:b0:64:b5:08:27:
                    99:63:06:fb:6f:16:f8:bf:77:ee:46:33:81:b0:61:
                    f7:11:97:9c:81:fb:34:d1:0b:5b:2a:b8:8a:d5:6a:
                    f1:8a:6a:c7:df:c5:0f:f3:e3:8e:15:3a:fe:e2:2e:
                    98:87:ff:03:07:80:83:52:a4:ef:8e:86:1d:6a:7c:
                    bb:3c:7e:66:68:a1:98:97:cb:81:14:f1:f0:0e:14:
                    de:7d:df:43:a6:2d:63:a3:42:70:5a:6a:60:ea:26:
                    18:70:4e:5e:22:1d:54:46:dc:1f:dc:dd:b6:5b:c7:
                    95:be:81:8a:79:53:1d:31:f3:84:a9:37:d8:23:67:
                    06:18:c2:ec:ce:6a:a2:ad:93:88:84:10:30:d8:46:
                    25:8d:ed:85:78:17:e4:23:58:7f:a1:cc:0d:81:c4:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:86:8B:89:4E:5D:44:26:53:99:B4:3D:E8:B1:D1:BE:7E:12:05:2C
            X509v3 Authority Key Identifier:
                keyid:B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e3132382f32352d3235203d3e203631363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.107.128/25

    Signature Algorithm: sha256WithRSAEncryption
         73:e9:ee:21:9a:c1:9a:8d:3f:76:a0:35:03:bf:4a:0d:7f:57:
         6d:c8:f0:2e:2e:0d:63:ae:fb:3c:14:f6:f8:78:6f:2b:10:a9:
         17:e0:71:bb:8c:f2:ad:cf:ba:c7:65:4f:33:71:27:2f:8f:fe:
         54:33:fc:74:d7:1f:d0:33:a1:6d:28:62:e5:fc:57:1d:29:f9:
         60:3c:77:ac:ed:75:0f:96:a3:ed:57:dc:de:8b:73:66:7e:00:
         1a:d1:14:d9:c7:6c:b0:50:4d:0c:87:d2:90:a8:3d:86:0e:b6:
         88:b1:0f:4a:e5:bc:31:2a:6e:71:22:6a:74:a4:7a:12:df:f3:
         7d:6b:52:d5:84:c0:bb:b5:40:3e:ac:46:2f:c3:f2:47:d9:d1:
         42:12:4d:33:c5:29:ed:c8:a3:3b:7f:7d:32:ec:ed:c4:3b:90:
         20:4d:ea:23:29:7d:f6:9d:0a:c0:b2:1a:72:13:c0:cf:22:e3:
         ad:df:47:c9:99:1e:22:76:91:0c:fd:0e:d4:f9:64:dc:01:5c:
         b7:2e:4e:e8:8f:52:de:65:86:cb:ee:c7:d5:a2:09:5a:69:7b:
         23:e6:6b:32:86:e7:94:23:84:a4:29:e6:0a:8f:38:a6:99:49:
         91:b0:05:12:df:ad:ea:42:ae:6e:cd:f9:7e:a7:62:34:8b:e3:
         e3:ea:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:53:12 2025 by rpki-client