This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa
File:                     3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (raw, json)
Hash identifier:          QawziW7BRZxS3bCc4G2utog3YctmoyEiN7kAknKKgAo=
Subject key identifier:   68:B9:6B:E5:BE:18:5E:54:C7:60:B3:E6:82:60:FF:C4:E6:3C:63:AA
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       0A49A2EABFA3DAB78597CC8FCFC8579138F4DA04
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa
Signing time:             Sat 27 Dec 2025 14:56:33 +0000
ROA not before:           Sat 27 Dec 2025 14:51:33 +0000
ROA not after:            Sat 26 Dec 2026 14:56:33 +0000
asID:                     270551
IP address blocks:        189.50.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 17:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:49:a2:ea:bf:a3:da:b7:85:97:cc:8f:cf:c8:57:91:38:f4:da:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Dec 27 14:51:33 2025 GMT
            Not After : Dec 26 14:56:33 2026 GMT
        Subject: CN=68B96BE5BE185E54C760B3E68260FFC4E63C63AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:ad:91:2d:33:3c:a8:e3:93:d6:3f:22:7c:
                    e1:b1:4a:2a:ff:76:09:16:24:de:7a:95:f4:93:b4:
                    0c:11:c6:cf:7e:d7:74:19:33:03:66:ad:e0:1e:3f:
                    70:d7:f2:2b:fe:c9:4b:17:8f:5e:29:6b:25:5b:66:
                    33:b3:2e:a1:ce:04:0a:2c:80:fb:1f:a4:a9:a4:17:
                    c3:1a:35:6b:5e:74:e2:f9:f2:db:0f:e6:53:c5:5e:
                    7e:87:bd:20:8a:da:8c:84:e0:fc:4a:cb:96:fa:0a:
                    9e:05:98:dc:e8:c4:88:28:c9:bd:35:3e:15:6d:c6:
                    06:ad:3c:4e:d1:62:2c:52:cf:e3:b7:13:5f:95:81:
                    ba:c7:d1:a7:e7:df:54:24:69:66:22:9a:2c:d8:ff:
                    3a:29:e0:54:6f:f9:b8:b8:cf:24:f3:e4:03:a7:3e:
                    be:0e:88:cf:cc:99:d0:ad:cc:db:fb:fe:3c:54:ed:
                    c1:a2:39:5c:dd:8e:a3:a0:81:e6:7a:4c:96:9e:0e:
                    78:a0:39:47:6e:66:a6:b6:8a:81:6a:a9:d0:14:bc:
                    3e:f6:7b:38:33:29:e7:24:61:f1:5b:c8:3c:a4:28:
                    35:d2:1c:67:1b:e3:f5:dd:3d:8c:25:42:15:52:31:
                    f4:02:ba:35:47:93:05:c0:12:55:4b:e7:8a:c0:63:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B9:6B:E5:BE:18:5E:54:C7:60:B3:E6:82:60:FF:C4:E6:3C:63:AA
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:b9:52:05:86:a6:d9:e9:8c:0a:b5:af:3e:bb:fa:52:dd:
         fb:e6:7f:ab:ad:56:b3:aa:1b:d5:93:bf:d6:b8:55:95:9c:9b:
         12:b5:68:29:91:61:a6:53:a0:61:3c:66:45:b0:df:7c:45:d7:
         3a:88:60:84:12:fd:a6:37:dd:47:b2:90:58:8d:85:92:5e:b7:
         1f:ce:50:33:82:e1:6e:07:34:0b:a9:65:eb:61:4f:51:cf:c4:
         db:ce:76:95:ba:d2:0e:03:97:64:7c:2b:d5:c8:e6:3a:07:2d:
         47:73:a7:0e:97:15:09:19:53:80:22:cf:0c:7f:55:75:e4:97:
         ff:74:32:54:48:f4:04:fb:26:bc:3a:9f:80:c7:63:18:ce:ec:
         aa:db:9d:25:c5:b4:54:ba:cd:51:b7:b6:12:9d:37:d8:db:05:
         90:e8:e2:38:14:95:ea:9a:7e:a1:8e:39:9e:ec:36:12:76:04:
         99:ac:e2:43:96:42:34:df:65:9a:21:93:93:dd:20:b7:75:06:
         ac:c3:17:16:8f:a7:67:d1:33:bb:ac:5e:8a:af:4f:93:6b:f0:
         8b:c9:bd:86:be:bf:91:02:d4:ac:83:93:77:37:11:9b:47:e0:
         87:ea:05:72:f9:95:e4:13:74:60:76:ee:a4:1e:ba:18:d2:3d:
         8a:76:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 21:05:46 2025 by rpki-client