This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa
File:                     3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa (raw, json)
Hash identifier:          vJ5fjqBI/A88KzZxqfvYp2piCGfZaPCyXJFhh093SH0=
Subject key identifier:   7D:AE:BC:74:44:B6:23:E5:31:12:05:83:3A:DB:05:30:1F:70:7A:F5
Certificate issuer:       /CN=CE0E887EF61F71B4438C48E64615124DF0463AF5
Certificate serial:       4252DB38530C67D626AB1E4252903CB89FA963F6
Authority key identifier: CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa
Signing time:             Fri 26 Dec 2025 13:58:45 +0000
ROA not before:           Fri 26 Dec 2025 13:53:45 +0000
ROA not after:            Fri 25 Dec 2026 13:58:45 +0000
asID:                     262989
IP address blocks:        190.103.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:52:db:38:53:0c:67:d6:26:ab:1e:42:52:90:3c:b8:9f:a9:63:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE0E887EF61F71B4438C48E64615124DF0463AF5
        Validity
            Not Before: Dec 26 13:53:45 2025 GMT
            Not After : Dec 25 13:58:45 2026 GMT
        Subject: CN=7DAEBC7444B623E5311205833ADB05301F707AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:9f:cc:0f:c7:4e:b0:a2:7c:a3:ad:f3:7a:
                    8f:e4:ef:eb:83:b0:ab:1c:09:c8:fc:90:c8:55:7a:
                    cc:5c:cd:ad:76:b2:b6:5f:40:39:33:e8:f2:df:0e:
                    8a:aa:14:c8:db:c7:5f:cc:5b:69:90:36:7b:30:2d:
                    55:81:1c:b9:d4:08:fc:f5:83:3b:d5:44:fc:36:de:
                    e1:93:96:7f:fa:af:7b:44:dd:a3:15:22:de:c4:f3:
                    d4:f1:3f:34:32:dc:a9:41:b5:2f:b9:0c:19:1c:00:
                    39:28:d9:0a:dc:e4:7b:42:0c:92:5a:6d:8b:06:bc:
                    7a:b9:46:2e:94:a9:18:3c:35:81:6f:eb:00:0e:be:
                    f6:cd:91:44:bc:0a:8d:d5:f6:53:5d:52:71:ca:a2:
                    76:ec:6f:7e:c4:e0:ba:aa:32:0c:2a:3c:42:dc:88:
                    f3:bb:1d:af:ea:08:09:77:ae:a1:8e:45:72:ba:f8:
                    de:dd:24:6c:52:c3:30:e2:46:30:4d:a7:d5:4e:5b:
                    58:c1:ca:54:69:37:da:85:27:8f:96:c2:aa:ce:73:
                    c9:99:66:a1:8a:58:36:18:78:f7:14:3c:a4:4b:c5:
                    4f:fb:8d:fe:5e:d7:71:ed:cb:6a:09:35:ea:95:39:
                    66:a7:ae:9a:4f:62:88:4e:f2:ee:70:27:3d:ed:d5:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:BC:74:44:B6:23:E5:31:12:05:83:3A:DB:05:30:1F:70:7A:F5
            X509v3 Authority Key Identifier:
                keyid:CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:2b:d9:de:80:a6:1f:6d:20:70:c1:aa:01:7a:e3:f7:1a:
         a0:71:b2:ea:c6:1f:1d:9c:6f:fd:21:4c:e6:da:47:29:4f:cf:
         43:e9:c4:80:e1:e9:1b:ae:b7:e2:14:0f:34:66:dd:00:c7:31:
         58:92:0c:d1:0d:ca:3a:0b:05:36:2c:63:de:c0:7d:8e:35:2a:
         d6:fb:4e:b9:49:e3:f3:a0:0f:9c:53:d2:b4:5f:3a:90:25:2e:
         58:d8:a2:ec:69:63:d0:4f:7f:35:4d:6b:fe:02:a1:5e:64:21:
         bd:2c:28:04:5b:fa:b2:8d:07:f6:bc:9b:24:f8:a2:b4:0b:6c:
         b4:4e:56:0b:99:a0:eb:d3:5a:77:e8:dc:04:4d:67:80:4f:ec:
         33:12:4d:b4:43:6f:83:68:44:eb:02:b5:c3:4a:0f:fc:e3:d3:
         5c:58:a8:b5:8a:fb:5d:7f:62:ad:28:8c:51:a5:24:64:3d:59:
         3c:55:ce:ca:c7:93:62:64:df:40:e4:ce:e1:e4:a1:54:14:51:
         06:84:0a:0f:25:f6:90:79:b5:e1:19:26:32:9a:5d:16:65:57:
         35:bd:9a:41:9f:66:42:fa:00:0b:d0:5e:9d:0f:8b:2a:30:d4:
         16:b7:a7:70:56:5b:83:88:bb:6b:af:fb:eb:03:de:0d:c2:f4:
         2c:e4:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:50:38 2026 by rpki-client