This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
File:                     3139312e3234302e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier:          R92MQIi5Utm8xP6ANxBL6ZQEWTbrOrzBS0jRxxbYNvw=
Subject key identifier:   08:22:8D:40:BC:35:3B:07:F2:6B:B3:9F:7F:C0:5B:33:AF:3F:23:B4
Certificate issuer:       /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Certificate serial:       5FC506A8B21486530E5F5978088BDC81F94D7958
Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
Signing time:             Mon 29 Dec 2025 17:40:45 +0000
ROA not before:           Mon 29 Dec 2025 17:35:45 +0000
ROA not after:            Mon 28 Dec 2026 17:40:45 +0000
asID:                     28202
IP address blocks:        191.240.0.0/17 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c5:06:a8:b2:14:86:53:0e:5f:59:78:08:8b:dc:81:f9:4d:79:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
        Validity
            Not Before: Dec 29 17:35:45 2025 GMT
            Not After : Dec 28 17:40:45 2026 GMT
        Subject: CN=08228D40BC353B07F26BB39F7FC05B33AF3F23B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:a0:64:4f:d8:30:11:9a:9e:69:1f:f4:66:
                    28:34:98:9b:26:5e:ec:b5:95:4a:6e:53:46:ef:96:
                    98:70:35:b2:0a:17:9f:04:22:da:31:b1:89:46:b5:
                    6a:c7:5b:6a:77:51:2c:89:81:ea:3f:f8:0b:24:11:
                    5b:d4:59:a6:0d:fb:ff:6e:aa:65:e1:0d:0a:d3:ca:
                    9d:5a:13:13:1e:78:4b:60:06:8f:e7:5b:32:09:a1:
                    c1:53:74:d9:88:46:52:95:fa:84:f2:fd:27:79:be:
                    be:9e:07:ad:85:b1:52:e0:40:bb:05:88:10:96:bb:
                    30:0a:68:25:98:34:dc:c6:1b:ae:d1:3b:31:52:3a:
                    c4:9b:a9:d6:2b:3d:e3:30:b5:5e:d7:ed:9e:8a:b1:
                    63:37:e4:80:bb:6d:5d:5e:e7:0a:46:e5:ad:b8:ee:
                    50:de:cc:6f:95:13:59:14:bb:dc:31:a0:92:a6:0f:
                    e3:cf:6d:cc:9c:fb:ac:cf:4d:64:98:27:cd:3e:22:
                    92:bb:6e:1c:8a:98:73:ad:9d:4f:bc:93:62:bf:9f:
                    50:63:c7:ac:bc:1b:4f:11:37:0c:7e:e6:fc:85:c4:
                    02:64:26:4d:91:09:bf:be:59:02:01:63:58:30:03:
                    f4:1c:4a:c3:c2:19:5a:47:09:3e:e7:96:04:50:01:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:22:8D:40:BC:35:3B:07:F2:6B:B3:9F:7F:C0:5B:33:AF:3F:23:B4
            X509v3 Authority Key Identifier:
                keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         be:d5:87:3c:ad:39:fd:84:1b:e8:36:45:16:dc:e7:97:81:1a:
         df:69:b0:4d:1e:4d:f4:1c:66:51:53:5c:6a:da:20:d7:4e:f3:
         7b:a3:44:46:01:1d:d7:b6:e9:42:18:90:9c:89:68:82:18:83:
         1f:90:bf:1f:72:58:9a:ae:01:ff:32:4a:b8:9d:18:06:a3:9f:
         be:27:87:12:7d:30:ec:0c:5c:a8:2d:93:f0:50:e5:29:98:d9:
         6c:8a:6e:71:fc:67:c8:3d:1b:f1:0b:fe:46:78:3c:0a:b4:ae:
         9a:61:d7:d7:dc:37:a4:2c:ac:77:7c:c3:8c:45:0a:40:27:24:
         9e:4d:fb:f8:11:1a:01:6f:94:b8:6a:0f:9d:5f:29:e4:86:d0:
         07:ac:86:0f:90:14:7f:15:36:30:1b:35:97:10:63:ce:d2:c3:
         5e:e2:e6:6b:8a:25:67:04:0b:99:53:b2:24:b0:19:aa:a1:8f:
         51:48:98:4e:63:b7:71:eb:40:9d:75:9a:64:2a:7e:3b:86:3f:
         4c:cc:29:fa:22:1f:6c:1c:f2:b6:73:86:ab:89:a0:38:0e:92:
         4a:b5:81:d6:8b:80:44:e3:1e:67:64:e2:7f:cc:d4:8f:ad:6d:
         12:5a:96:fa:08:f2:cb:55:2c:38:f6:90:21:a3:0e:9a:67:4b:
         36:a5:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:32 2026 by rpki-client