This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa
File:                     3139302e392e3132372e302f32342d3234203d3e20323731363733.roa (raw, json)
Hash identifier:          fCtxBgUjEIK10Q/wo720O2TGWtm4JXe0tsIL+mToQRE=
Subject key identifier:   D2:CD:7C:C5:97:C6:25:59:D3:99:2E:DE:AB:68:CD:BF:06:BB:19:BF
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       04C7504C94910F7D659C6A70EE8E608C8DD7F287
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa
Signing time:             Fri 19 Dec 2025 18:58:12 +0000
ROA not before:           Fri 19 Dec 2025 18:53:12 +0000
ROA not after:            Fri 18 Dec 2026 18:58:12 +0000
asID:                     271673
IP address blocks:        190.9.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c7:50:4c:94:91:0f:7d:65:9c:6a:70:ee:8e:60:8c:8d:d7:f2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Dec 19 18:53:12 2025 GMT
            Not After : Dec 18 18:58:12 2026 GMT
        Subject: CN=D2CD7CC597C62559D3992EDEAB68CDBF06BB19BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:70:56:e7:d6:87:eb:71:aa:e5:26:73:26:
                    db:34:1c:70:0d:a9:62:75:6f:39:0f:3b:1c:93:fb:
                    75:23:5b:cd:40:25:b6:2c:8e:6f:31:b8:df:e3:94:
                    9d:d8:73:22:af:51:56:cf:4f:1b:a9:f8:e4:87:f1:
                    8a:96:a6:1e:21:43:fe:26:9f:35:d2:71:8a:50:d3:
                    bc:4c:04:f5:24:3c:d2:10:73:21:5b:8f:0a:0c:10:
                    40:d8:92:7f:65:4e:e6:aa:cc:fc:f1:0d:37:a1:c1:
                    3d:c2:ea:42:35:95:7d:68:26:ba:e0:7d:31:d2:59:
                    6c:64:6b:68:b0:41:07:0c:df:4c:a3:a7:37:bd:a5:
                    99:77:8f:bf:e0:a6:1e:48:0c:9d:cd:9f:c0:05:03:
                    cc:f6:b0:b3:df:75:83:d0:16:d4:1d:5b:79:b2:e9:
                    34:26:58:be:a4:b8:1f:99:c0:6b:a6:9b:7a:cd:d7:
                    40:b0:40:36:1b:5d:fe:2e:04:05:a2:1f:82:42:21:
                    fb:08:e9:6c:df:ed:b9:a0:e9:80:e6:70:46:99:cb:
                    28:01:76:e5:e7:5a:86:87:25:b2:9b:01:e7:47:d0:
                    ec:37:2a:4a:e0:5e:05:5f:34:a1:a8:84:b5:2e:b1:
                    38:c7:89:dd:b6:90:4f:a0:96:c1:75:70:d7:ab:2b:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CD:7C:C5:97:C6:25:59:D3:99:2E:DE:AB:68:CD:BF:06:BB:19:BF
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:6b:4a:eb:b1:74:84:77:4d:6c:5e:f0:c5:88:18:5a:c5:
         b9:e5:54:7a:e5:23:21:1d:4e:15:0d:dc:84:3a:92:00:36:db:
         81:e4:ba:03:f5:ee:4b:b6:d9:02:1d:66:3a:4d:d4:5d:0a:79:
         62:73:42:55:ab:46:ce:57:4c:22:8a:e2:9e:bb:7a:9e:17:a8:
         6b:72:ba:eb:58:92:9b:43:b0:32:63:f2:80:63:94:5c:e0:80:
         b8:8e:ea:91:44:8c:52:9d:d0:22:ad:7d:c2:ae:0f:62:4c:62:
         bd:de:6b:88:59:f3:10:a5:6c:35:14:3b:eb:9f:52:ad:9d:a4:
         b1:f0:c4:87:16:21:cf:10:f4:dd:f7:55:4f:13:d7:42:f5:16:
         fe:46:6b:5c:3c:ba:9b:6c:9c:fb:3a:a9:1d:f8:7f:65:48:ca:
         8e:99:13:9f:1c:c1:19:29:cc:20:0e:a1:f9:45:47:5c:8b:aa:
         0a:9d:65:2a:20:d9:6d:69:40:7e:6c:8c:c6:86:67:f3:18:d8:
         cd:82:9a:9a:36:f6:ad:66:84:24:69:04:2a:dd:6a:f4:f3:4d:
         60:ea:9c:da:32:ca:5b:be:5b:58:5f:ec:23:e7:3d:49:34:8c:
         1c:6d:49:85:a8:50:c7:74:03:5e:35:aa:02:81:fc:16:55:bb:
         48:b9:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:12:56 2025 by rpki-client