This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132392e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3132392e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          KSyTTrJKu3KNMbQfqY+NVTkDiIDj0RbF2afr7+x+jww=
Subject key identifier:   D4:0F:3F:C5:3F:3E:74:A5:FC:15:08:F3:B8:28:89:B0:CC:E4:8B:A5
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       79891C30822A59A0A0FB3F6C2D6468159B818DE6
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132392e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 19 Dec 2025 16:50:01 +0000
ROA not before:           Fri 19 Dec 2025 16:45:01 +0000
ROA not after:            Fri 18 Dec 2026 16:50:01 +0000
asID:                     52930
IP address blocks:        190.180.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 01:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:89:1c:30:82:2a:59:a0:a0:fb:3f:6c:2d:64:68:15:9b:81:8d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Dec 19 16:45:01 2025 GMT
            Not After : Dec 18 16:50:01 2026 GMT
        Subject: CN=D40F3FC53F3E74A5FC1508F3B82889B0CCE48BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:02:63:47:1c:e4:6b:4b:c6:d7:29:59:66:
                    ab:44:da:65:41:c7:53:ea:1d:9b:ac:25:94:30:3f:
                    8f:6d:6b:96:1f:f1:9f:aa:83:d3:01:fe:13:34:fc:
                    bc:f1:f6:c2:6b:4b:98:2c:85:a7:63:8b:51:88:9b:
                    71:51:7d:14:58:45:16:54:7f:28:ae:4c:27:e6:c2:
                    e8:52:e7:ba:f0:ad:98:8b:82:8e:de:86:d4:e6:24:
                    e2:07:53:c3:bf:53:ac:09:8f:60:a1:3c:17:82:bd:
                    60:8e:a6:98:90:dc:63:46:75:65:cf:66:a6:64:3a:
                    83:d4:a1:63:1d:1c:61:93:09:41:07:55:1f:b4:0c:
                    5c:63:4c:95:c2:ba:6f:19:53:0b:21:cd:7f:05:2f:
                    5b:64:ee:b5:11:d7:6c:40:15:45:fe:a9:a7:e2:b9:
                    d1:ed:ce:f6:87:9b:07:2f:32:f8:6b:d5:61:c2:4c:
                    e6:0c:a3:32:73:e2:8d:2b:bd:00:2f:5a:c1:af:ac:
                    63:59:61:a6:e9:bb:7f:65:a6:5e:c9:f6:e8:59:24:
                    34:08:11:50:65:0f:b1:87:45:0a:0c:89:1b:a3:1d:
                    00:f8:0c:45:50:33:78:93:01:bb:f1:2d:1b:36:6d:
                    ce:35:42:b7:58:56:48:8a:91:9b:fc:61:0c:a2:d8:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:3F:C5:3F:3E:74:A5:FC:15:08:F3:B8:28:89:B0:CC:E4:8B:A5
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132392e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:c1:0f:1c:d1:57:64:0f:97:f3:24:21:a4:b3:32:b3:40:
         51:cb:88:a4:68:39:e6:07:6d:80:4b:a9:7a:d8:b5:11:56:6a:
         71:68:80:dc:00:00:d1:18:59:ab:fe:44:78:92:a8:c0:71:10:
         d6:5f:c9:86:3e:71:1d:4f:15:18:d1:42:97:4c:02:89:93:5e:
         ca:d0:c3:56:4b:c5:69:a7:7c:bc:48:d7:49:88:38:38:6b:d6:
         15:76:4f:6a:5d:4e:a1:61:12:9e:b9:56:27:dc:12:0b:c9:9b:
         c4:4e:63:03:e9:fa:f7:43:e3:6c:fa:10:00:a1:dc:d1:65:fc:
         7c:89:c8:b9:9c:0a:9c:79:0e:cd:66:d1:cc:88:0f:e9:67:6a:
         46:1f:5d:e6:a0:d4:27:96:db:07:05:c8:05:23:94:f2:f7:41:
         b5:80:36:85:c2:53:92:e1:e0:e5:ed:1c:57:42:03:fe:fe:90:
         ee:1b:f6:30:06:1e:81:93:d2:28:19:20:b3:44:c3:b9:33:a4:
         6e:1d:4c:4c:35:e9:90:03:10:a9:9c:3a:1c:2e:cd:cc:6b:b4:
         d7:54:10:87:f5:41:92:86:b1:2e:2c:39:01:6c:0d:12:7b:06:
         1a:a6:74:ae:6b:ba:ef:b0:c7:dd:03:7f:53:2b:70:7f:d1:4d:
         d1:aa:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:59:09 2025 by rpki-client