This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231362e302f32322d3332203d3e203238313430.roa
File:                     3138372e3130332e3231362e302f32322d3332203d3e203238313430.roa (raw, json)
Hash identifier:          BkVQw7LkrcepPENRI1cx+6RucIGxmDzNzHF+ypUS9SQ=
Subject key identifier:   94:C8:6F:D8:E6:FD:63:BA:E0:4E:A3:82:14:E9:30:79:68:C6:A6:63
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       32B767C635DE177FA7D839D37F45D75B3E610BFC
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231362e302f32322d3332203d3e203238313430.roa
Signing time:             Mon 17 Nov 2025 20:39:55 +0000
ROA not before:           Mon 17 Nov 2025 20:34:55 +0000
ROA not after:            Mon 16 Nov 2026 20:39:55 +0000
asID:                     28140
IP address blocks:        187.103.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 14:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b7:67:c6:35:de:17:7f:a7:d8:39:d3:7f:45:d7:5b:3e:61:0b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Nov 17 20:34:55 2025 GMT
            Not After : Nov 16 20:39:55 2026 GMT
        Subject: CN=94C86FD8E6FD63BAE04EA38214E9307968C6A663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:2d:d5:ea:53:b2:45:39:c0:11:6d:b2:c0:
                    04:63:a0:b0:cf:f4:ec:5d:4b:bf:c9:87:a7:79:7b:
                    1e:a4:6a:ad:00:c2:55:81:7e:b8:f0:ad:c7:c2:3c:
                    4a:d3:ca:3f:23:5d:c1:34:68:4f:8e:6d:f5:be:e9:
                    2f:78:cd:a5:af:cb:b8:81:91:db:c8:90:b9:48:27:
                    ff:95:93:f6:89:99:78:7e:13:85:a4:c6:fe:75:c1:
                    38:aa:e5:8c:46:4b:27:42:24:af:03:9d:11:2e:9e:
                    e6:6a:51:0a:9f:44:b0:23:5f:97:7c:96:0c:4d:4d:
                    0b:17:0e:b9:36:8e:61:d6:3b:6d:e9:36:cd:f9:61:
                    49:7d:0f:d5:30:4a:43:98:55:8b:e5:ba:ae:c1:17:
                    07:5c:11:1a:62:5f:1c:f3:d1:30:7f:8d:a7:d9:d9:
                    5b:85:85:cc:da:53:6c:35:b1:6a:d2:3e:f9:f3:fb:
                    50:b6:93:0e:23:c3:48:fd:20:a6:2e:6f:8b:12:fc:
                    16:3b:c0:8f:b3:9d:21:b8:5d:1a:cc:02:91:05:21:
                    73:48:4e:a6:b7:13:ad:f1:e4:57:e4:ea:7a:b2:9b:
                    88:b6:b2:b8:7b:f4:b7:95:4f:ad:e9:ca:65:d3:36:
                    01:61:33:d8:5d:07:16:bb:ee:56:b3:a3:ae:ed:3d:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C8:6F:D8:E6:FD:63:BA:E0:4E:A3:82:14:E9:30:79:68:C6:A6:63
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231362e302f32322d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d5:00:24:65:fc:06:da:28:71:15:1f:6c:48:73:d8:bc:ca:
         74:0b:ef:e1:5e:7e:b7:39:a3:bc:39:9e:cc:aa:8a:7e:55:0f:
         81:d5:da:c3:c1:7f:3a:48:f7:26:34:c9:38:0f:c7:fc:01:19:
         ba:77:39:54:38:eb:5c:ef:c1:84:31:f8:bb:90:8c:4c:4b:09:
         5f:e3:be:db:ba:70:9a:6d:2d:ce:77:37:a0:60:bb:bc:2c:e9:
         d1:48:11:b0:60:2b:17:7e:7e:76:44:6a:61:79:71:94:ad:4e:
         22:d9:49:bc:52:b1:40:79:cc:12:ef:e1:52:9f:9b:9d:01:96:
         cc:8a:55:30:9e:45:3c:e6:77:19:d2:6e:2e:12:55:85:e2:dc:
         2f:47:7f:94:73:3c:d2:fa:2d:55:8c:36:11:28:ff:64:89:4b:
         d8:26:e2:dc:3d:3f:5e:ed:5a:30:63:0d:50:94:e2:d4:57:06:
         07:9a:9f:4e:ba:c9:da:ee:ae:49:6d:7b:f9:74:91:ba:93:ff:
         ee:13:aa:94:14:b2:c4:4e:db:45:2a:29:40:b8:e3:32:10:e3:
         ab:c9:ac:e7:f5:72:dd:da:f7:52:d1:b2:49:c0:2a:ba:69:7d:
         60:54:e5:b1:54:e9:95:3e:04:08:57:d0:9a:21:35:b9:db:7f:
         62:0a:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:33:03 2025 by rpki-client