This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139342e302f32342d3234203d3e20323637343735.roa
File:                     3139322e3134312e3139342e302f32342d3234203d3e20323637343735.roa (raw, json)
Hash identifier:          JbSqx87Lho4K4NbJz5lkB4zxSv07jsVFn9fWH14eXOE=
Subject key identifier:   BC:19:CC:A2:BF:4B:37:3D:68:FB:20:DB:F7:3B:38:F8:59:00:F7:91
Certificate issuer:       /CN=27431F298D6DFE8179639FE397D34A2A47E96D15
Certificate serial:       19A994695BC31CD34FBDF7829F718A9FB952DA11
Authority key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139342e302f32342d3234203d3e20323637343735.roa
Signing time:             Fri 19 Dec 2025 20:01:55 +0000
ROA not before:           Fri 19 Dec 2025 19:56:55 +0000
ROA not after:            Fri 18 Dec 2026 20:01:55 +0000
asID:                     267475
IP address blocks:        192.141.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl
                          rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 13:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a9:94:69:5b:c3:1c:d3:4f:bd:f7:82:9f:71:8a:9f:b9:52:da:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27431F298D6DFE8179639FE397D34A2A47E96D15
        Validity
            Not Before: Dec 19 19:56:55 2025 GMT
            Not After : Dec 18 20:01:55 2026 GMT
        Subject: CN=BC19CCA2BF4B373D68FB20DBF73B38F85900F791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:f4:c1:cc:69:4a:0e:4b:50:14:32:3f:ab:
                    2b:77:5b:de:09:b0:a0:70:a8:cc:06:81:c8:67:5b:
                    a8:1d:38:f5:73:5e:b4:cb:86:45:49:c1:53:19:04:
                    20:87:b6:2c:b0:7b:08:75:61:4c:0b:75:24:55:fa:
                    6a:21:67:4b:70:1f:dc:a0:68:a4:d4:ea:63:06:53:
                    0b:94:e8:87:20:be:7e:b0:28:80:09:22:1a:d7:14:
                    fc:72:81:ab:53:30:9b:5f:54:fb:b3:f3:63:e7:fe:
                    cc:cc:09:c4:29:c4:fa:b1:db:39:33:86:0f:23:50:
                    48:51:f1:c9:7b:f3:66:af:a3:99:fa:1f:fd:9b:ff:
                    74:e2:1d:fd:09:7e:26:e7:b5:fa:8b:28:96:a4:1b:
                    3a:d9:09:da:0a:57:cb:6e:d9:a9:ac:90:c4:3e:3f:
                    29:b5:97:72:ec:d8:41:a1:88:c5:10:03:82:43:f3:
                    8b:87:75:cb:01:ad:2f:2e:c2:ed:e1:d3:76:17:34:
                    bf:15:b6:8d:c5:bb:6c:54:97:0a:49:49:65:8a:da:
                    ff:75:72:79:10:a8:f8:38:cf:f2:07:18:32:72:69:
                    8d:7f:1d:a2:28:89:74:78:9c:73:f7:93:03:6b:c6:
                    7b:9e:ff:35:44:6e:c7:37:44:6c:db:6d:57:85:76:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:CC:A2:BF:4B:37:3D:68:FB:20:DB:F7:3B:38:F8:59:00:F7:91
            X509v3 Authority Key Identifier:
                keyid:27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139342e302f32342d3234203d3e20323637343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:d5:a5:37:de:91:b5:eb:f9:17:6c:e3:1d:e4:53:7e:d8:
         9e:52:a0:6f:d0:e3:b7:b3:52:bf:bf:03:a4:b9:85:80:d1:24:
         22:f9:38:bc:15:ef:3f:8d:80:ae:e4:13:76:4c:c5:26:40:01:
         3b:a1:c7:af:99:f9:ed:a2:e0:d1:78:77:1c:b7:7c:92:9f:06:
         45:c3:28:35:79:b3:ae:40:c2:c4:c6:ed:a4:4e:8c:74:97:5e:
         ef:fd:d8:3c:a9:9c:63:ba:6d:d8:10:bf:c5:70:5b:d7:57:98:
         8b:2c:69:7f:5b:f0:78:97:88:26:75:1d:ab:b5:08:86:47:36:
         c6:51:aa:4e:e8:8d:7f:94:d3:e2:e5:4c:9d:ec:dc:92:cd:c9:
         9d:6e:26:7b:90:7a:7d:6b:67:d0:47:df:d1:c5:7f:ba:e6:5d:
         20:03:02:d9:54:56:81:e3:90:ff:30:3f:0b:5a:06:12:b5:85:
         0c:cd:fa:92:5e:57:33:98:18:d1:d0:6a:1a:74:53:f0:47:a8:
         0f:4f:d9:60:b0:1a:d8:42:33:f7:a7:8d:47:dd:3d:77:72:21:
         cf:3c:e9:f8:a5:80:35:bb:db:41:f0:26:b1:45:0a:fd:2f:41:
         51:f9:5e:95:3b:ce:a5:33:4c:4a:26:4b:6d:55:b1:8c:1c:57:
         6c:14:b0:df
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGamUaVvDHNNPvfeCn3GKn7lS2hEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0MzFGMjk4RDZERkU4MTc5NjM5RkUzOTdEMzRBMkE0
N0U5NkQxNTAeFw0yNTEyMTkxOTU2NTVaFw0yNjEyMTgyMDAxNTVaMDMxMTAvBgNV
BAMTKEJDMTlDQ0EyQkY0QjM3M0Q2OEZCMjBEQkY3M0IzOEY4NTkwMEY3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcivTBzGlKDktQFDI/qyt3W94J
sKBwqMwGgchnW6gdOPVzXrTLhkVJwVMZBCCHtiywewh1YUwLdSRV+mohZ0twH9yg
aKTU6mMGUwuU6Icgvn6wKIAJIhrXFPxygatTMJtfVPuz82Pn/szMCcQpxPqx2zkz
hg8jUEhR8cl782avo5n6H/2b/3TiHf0JfibntfqLKJakGzrZCdoKV8tu2amskMQ+
Pym1l3Ls2EGhiMUQA4JD84uHdcsBrS8uwu3h03YXNL8Vto3Fu2xUlwpJSWWK2v91
cnkQqPg4z/IHGDJyaY1/HaIoiXR4nHP3kwNrxnue/zVEbsc3RGzbbVeFdozjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvBnMor9LNz1o+yDb9zs4+FkA95EwHwYDVR0j
BBgwFoAUJ0MfKY1t/oF5Y5/jl9NKKkfpbRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0JkVVkxN01wTkFuWjlZZ1JGNmtFdVR1Skx3RjdRYlpvckZqNFhzZVpR
VjcvMC8yNzQzMUYyOThENkRGRTgxNzk2MzlGRTM5N0QzNEEyQTQ3RTk2RDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NDMxRjI5OEQ2REZFODE3
OTYzOUZFMzk3RDM0QTJBNDdFOTZEMTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCZFVZMTdNcE5Bblo5WWdSRjZrRXVUdUpMd0Y3UWJab3JGajRYc2VaUVY3LzAv
MzEzOTMyMmUzMTM0MzEyZTMxMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCNwjANBgkqhkiG9w0BAQsFAAOCAQEAj+nV
pTfekbXr+Rds4x3kU37YnlKgb9Djt7NSv78DpLmFgNEkIvk4vBXvP42AruQTdkzF
JkABO6HHr5n57aLg0Xh3HLd8kp8GRcMoNXmzrkDCxMbtpE6MdJde7/3YPKmcY7pt
2BC/xXBb11eYiyxpf1vweJeIJnUdq7UIhkc2xlGqTuiNf5TT4uVMnezcks3JnW4m
e5B6fWtn0Eff0cV/uuZdIAMC2VRWgeOQ/zA/C1oGErWFDM36kl5XM5gY0dBqGnRT
8EeoD0/ZYLAa2EIz96eNR909d3Ihzzzp+KWANbvbQfAmsUUK/S9BUflelTvOpTNM
SiZLbVWxjBxXbBSw3w==
-----END CERTIFICATE-----
Generated at Mon Dec 22 03:49:19 2025 by rpki-client