This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          Z0XkzR2t1VuLBrzI81nplQbI1Y36ZkX/Yd3OnCe2AwI=
Subject key identifier:   CC:B4:D8:72:11:CF:93:0A:1D:51:76:C2:8E:0B:8E:A3:8B:76:B1:BC
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       5FCB6DEC1AC3F6EB08AA1984F828ADB092C491B8
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 13 Nov 2025 20:35:24 +0000
ROA not before:           Thu 13 Nov 2025 20:30:24 +0000
ROA not after:            Thu 12 Nov 2026 20:35:24 +0000
asID:                     53153
IP address blocks:        186.209.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cb:6d:ec:1a:c3:f6:eb:08:aa:19:84:f8:28:ad:b0:92:c4:91:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Nov 13 20:30:24 2025 GMT
            Not After : Nov 12 20:35:24 2026 GMT
        Subject: CN=CCB4D87211CF930A1D5176C28E0B8EA38B76B1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:05:18:9d:96:65:01:3f:67:f8:93:10:2b:
                    3a:e6:a1:9a:96:8e:f6:04:9f:88:24:1c:fa:fa:9a:
                    aa:0f:37:f9:ff:4e:0e:de:45:ac:e0:9b:b4:b2:bf:
                    cb:54:5b:7f:04:95:a1:7f:8b:80:eb:d5:bc:60:67:
                    26:d0:24:72:78:1e:61:a9:a2:64:6a:84:95:73:ea:
                    97:ba:49:b3:47:29:14:52:82:e8:89:15:23:ee:eb:
                    ee:a2:ff:f4:62:8d:04:ab:a4:7f:1b:00:6c:40:4e:
                    20:a7:7d:0c:0c:50:97:ac:41:22:58:03:8f:bf:1d:
                    7f:1c:ce:0f:82:17:11:03:a1:50:ca:49:73:79:0f:
                    99:82:e0:80:42:2f:31:10:75:a4:36:73:0e:2f:98:
                    ce:4c:ad:57:3d:b5:b9:2a:09:e3:90:e2:4c:71:75:
                    3b:e5:be:38:00:41:61:55:56:cd:49:f2:65:38:5e:
                    3a:21:ff:ee:83:ee:f2:fd:a3:be:ae:d4:72:88:85:
                    6f:92:2a:63:20:c5:cc:1d:ae:95:c1:50:68:90:d0:
                    d1:28:d6:b3:75:c0:3d:86:99:24:d7:79:b1:0f:2f:
                    c6:01:ce:d6:27:ff:3a:f7:26:8a:0e:ac:fd:76:57:
                    a6:00:c7:f3:b7:86:02:d9:e2:e2:dc:69:27:e7:87:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B4:D8:72:11:CF:93:0A:1D:51:76:C2:8E:0B:8E:A3:8B:76:B1:BC
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:92:f2:a3:d9:ab:71:fe:03:be:a5:d9:34:80:9b:22:51:a9:
         66:7c:b2:0f:7c:a9:e4:ec:3d:7e:c7:22:43:15:ee:f6:b6:0f:
         50:69:35:cc:27:3b:e6:92:de:09:5c:1a:88:da:91:2c:38:95:
         74:23:57:f0:cd:ad:0e:f9:28:f6:e4:c3:2f:ec:03:9e:7a:7a:
         5a:18:33:8f:c2:a3:48:2a:3d:8f:5c:b5:ad:ae:c9:2f:2a:65:
         84:fd:fe:66:8d:03:54:12:02:12:fd:4f:b6:1b:a2:0f:3d:03:
         2f:c9:6f:93:f8:09:45:d9:d1:fa:dc:d6:cb:db:2f:17:43:15:
         9d:cf:31:ea:85:ae:1d:15:a0:8d:5b:ac:2c:e5:ed:8d:55:25:
         5e:de:3c:80:6f:ab:8d:d6:70:fa:75:4b:0c:06:b0:8e:f4:a9:
         29:90:8e:10:5c:11:ea:83:1c:2e:53:11:ce:5b:e5:cf:03:b6:
         9a:ca:48:62:23:b9:59:20:df:6b:43:3e:ee:b7:85:92:1b:07:
         90:7a:77:ce:aa:33:eb:7d:2a:e5:9d:96:69:3c:75:e4:95:60:
         dd:b6:e1:37:b1:5e:7d:5b:3d:dd:1e:54:ce:45:5b:f8:3d:00:
         65:72:61:da:7f:86:d3:79:32:e1:46:f2:f4:1a:e8:f5:c2:0a:
         36:f6:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:44 2025 by rpki-client