This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32322d3234203d3e20323731303134.roa
File:                     3139312e372e3130342e302f32322d3234203d3e20323731303134.roa (raw, json)
Hash identifier:          7S6/HgXV/2O23Xl6WcBItnYBbvUFeFfgXMh2I/oKqVo=
Subject key identifier:   4B:B4:85:EC:80:6E:D7:3C:A6:64:60:45:C7:91:2E:DE:60:B9:90:BF
Certificate issuer:       /CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2
Certificate serial:       054DB7C17C4791352416A86451167F2AC5BFFAC8
Authority key identifier: 10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32322d3234203d3e20323731303134.roa
Signing time:             Fri 26 Dec 2025 16:00:00 +0000
ROA not before:           Fri 26 Dec 2025 15:55:00 +0000
ROA not after:            Fri 25 Dec 2026 16:00:00 +0000
asID:                     271014
IP address blocks:        191.7.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl
                          rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 16:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4d:b7:c1:7c:47:91:35:24:16:a8:64:51:16:7f:2a:c5:bf:fa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2
        Validity
            Not Before: Dec 26 15:55:00 2025 GMT
            Not After : Dec 25 16:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:95:85:49:78:7c:d0:8b:9a:c3:0a:3c:72:
                    26:f9:1c:c7:db:30:86:2d:25:eb:bc:7d:19:91:5f:
                    a6:42:d6:5e:ba:e4:2e:50:93:cb:29:e7:2c:95:6c:
                    7e:54:13:51:88:96:1e:ae:6b:e5:3c:e6:4f:90:a3:
                    d7:77:0b:87:8e:bd:e5:87:01:59:b5:ed:d2:d6:a1:
                    16:26:02:fd:0b:9c:04:b8:62:ab:59:a6:10:5b:4e:
                    92:64:64:cd:0b:99:9b:d2:da:60:3f:e2:4b:d6:d5:
                    1b:3d:d1:e6:16:0f:62:be:08:17:4c:c2:65:cd:65:
                    09:5f:0a:02:b1:95:95:9e:7c:fc:a2:45:2d:d0:3d:
                    24:9e:34:31:89:10:f1:19:d9:71:9e:7c:a1:08:83:
                    e3:8d:39:5a:b1:a7:bc:eb:22:fc:40:80:55:eb:48:
                    af:a9:99:1d:9d:55:b1:96:c9:ea:77:ac:af:6a:9a:
                    96:10:98:bd:31:ff:7b:c9:20:b5:d6:1f:a5:9c:5d:
                    f4:a6:0c:0e:a9:d2:a2:8a:95:ff:e7:08:16:59:5c:
                    20:39:7e:c6:ea:df:4a:89:45:55:d4:b4:5a:31:dc:
                    84:6a:6b:60:24:d7:c6:12:ca:76:af:fc:e9:17:47:
                    24:27:7e:0a:7d:04:4c:ef:09:6e:49:de:d9:c1:d3:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B4:85:EC:80:6E:D7:3C:A6:64:60:45:C7:91:2E:DE:60:B9:90:BF
            X509v3 Authority Key Identifier:
                keyid:10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32322d3234203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:95:13:2f:99:02:ff:2d:0e:b0:c8:a9:ea:c0:56:d3:f4:e5:
         60:6c:81:6d:63:e4:78:36:0b:31:ed:3e:ca:63:dd:a2:c6:1e:
         0d:83:34:fa:aa:04:b6:9f:64:b7:ef:e9:42:d9:d1:f8:90:a8:
         1c:92:5a:36:33:0c:88:4a:20:cf:23:f8:d5:ee:83:ef:bc:80:
         0e:27:3e:56:7a:30:ba:a4:5e:b9:e3:cc:42:a6:33:32:ac:fc:
         64:e7:18:92:ae:69:e6:1e:c1:a7:0b:07:ee:9c:8a:9a:ed:ab:
         9a:be:25:8d:09:75:b7:11:86:50:18:31:d9:72:2f:86:cb:ea:
         56:59:e1:8a:63:e0:e3:52:61:02:04:b7:a4:f0:84:fb:68:f9:
         6f:ef:8c:1b:17:50:75:bc:c8:94:70:ce:00:32:4a:d3:ca:61:
         fc:82:8c:b3:79:cb:52:14:a3:6c:a3:67:b1:09:83:db:af:7c:
         a5:43:68:07:39:cc:6b:17:0a:3b:75:eb:f7:30:25:c6:e1:35:
         09:e4:f4:09:8d:b4:90:55:36:8e:20:ed:61:9c:24:b8:c2:34:
         fc:8c:9e:a8:e0:d6:31:e7:8d:33:c0:f7:ef:61:e3:ff:26:da:
         97:31:42:c5:af:ff:a2:97:d6:3b:e5:15:0b:6d:57:16:3e:8c:
         02:75:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----