This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/3139302e38332e36382e302f32322d3332203d3e20323730333738.roa
File:                     3139302e38332e36382e302f32322d3332203d3e20323730333738.roa (raw, json)
Hash identifier:          JiaaSY4H81oQ487lLSXIwupEThG0eeliItWobF66OQM=
Subject key identifier:   BB:2F:AB:6A:A2:1F:D3:FA:66:A3:B4:BC:76:68:18:EB:A4:FA:93:C5
Certificate issuer:       /CN=35F25B04BB1C4CABDB37F749BB6922F5F4998942
Certificate serial:       6651CEB5D311649A0FB7DAB4E76D00718AD39140
Authority key identifier: 35:F2:5B:04:BB:1C:4C:AB:DB:37:F7:49:BB:69:22:F5:F4:99:89:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F25B04BB1C4CABDB37F749BB6922F5F4998942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/3139302e38332e36382e302f32322d3332203d3e20323730333738.roa
Signing time:             Wed 10 Dec 2025 12:17:38 +0000
ROA not before:           Wed 10 Dec 2025 12:12:38 +0000
ROA not after:            Wed 09 Dec 2026 12:17:38 +0000
asID:                     270378
IP address blocks:        190.83.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/35F25B04BB1C4CABDB37F749BB6922F5F4998942.crl
                          rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/35F25B04BB1C4CABDB37F749BB6922F5F4998942.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F25B04BB1C4CABDB37F749BB6922F5F4998942.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:51:ce:b5:d3:11:64:9a:0f:b7:da:b4:e7:6d:00:71:8a:d3:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F25B04BB1C4CABDB37F749BB6922F5F4998942
        Validity
            Not Before: Dec 10 12:12:38 2025 GMT
            Not After : Dec  9 12:17:38 2026 GMT
        Subject: CN=BB2FAB6AA21FD3FA66A3B4BC766818EBA4FA93C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:62:16:1d:85:e4:ed:4d:42:a1:48:d1:e3:
                    de:a0:44:a4:ae:6c:8b:4d:f7:a1:9b:5e:92:70:ae:
                    d0:fe:ab:8a:a6:a6:79:76:09:33:6b:e7:3e:66:e7:
                    79:a5:88:c3:ad:7f:b1:f1:96:a2:73:a6:3e:df:ac:
                    90:8b:f1:ef:72:bf:a9:8b:98:d1:e3:e3:23:af:1c:
                    ab:80:ee:1d:99:ad:a8:29:2e:32:22:b0:bd:e8:4b:
                    ce:a6:d9:c2:a8:98:f0:c1:89:9b:06:11:41:e3:f8:
                    ca:82:6d:ed:b6:44:2a:02:61:f9:c2:d7:c5:e8:c3:
                    75:d3:5a:6e:a5:37:c1:8c:fb:94:87:bd:e1:e2:b1:
                    3f:91:80:39:6f:55:8f:d1:a6:17:20:2f:22:23:22:
                    9c:90:4a:ae:ab:5c:ed:be:73:02:62:f7:86:da:04:
                    9c:97:d5:b5:4e:dd:45:9b:aa:94:e6:db:d2:a5:2c:
                    d4:25:3b:ce:15:c0:f1:b5:aa:98:a1:3c:17:ea:eb:
                    65:ee:7b:b0:5b:85:d5:b7:57:79:81:a4:c7:d0:63:
                    f0:c0:20:1e:6d:61:e4:aa:5f:35:2a:aa:f4:d3:f0:
                    6f:56:ae:c6:58:03:6f:eb:51:e8:73:e6:21:16:5b:
                    59:aa:a5:20:6e:11:be:56:aa:a1:38:95:9a:0b:66:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2F:AB:6A:A2:1F:D3:FA:66:A3:B4:BC:76:68:18:EB:A4:FA:93:C5
            X509v3 Authority Key Identifier:
                keyid:35:F2:5B:04:BB:1C:4C:AB:DB:37:F7:49:BB:69:22:F5:F4:99:89:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/35F25B04BB1C4CABDB37F749BB6922F5F4998942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F25B04BB1C4CABDB37F749BB6922F5F4998942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/3139302e38332e36382e302f32322d3332203d3e20323730333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:68:a5:ea:b6:cc:e9:82:93:a1:a8:f5:2e:5e:3f:7b:55:a9:
         4d:3f:71:84:e7:d7:3b:5e:ec:53:2a:1b:17:2c:8c:d9:aa:f4:
         cf:8e:b7:f4:3e:c4:d9:d6:fe:bb:4e:f4:c3:72:a1:0d:80:89:
         4e:90:dd:d4:2d:e4:15:bc:7d:3e:b1:a9:50:2b:10:02:0b:4e:
         a8:9c:a2:90:f6:ce:ae:f8:1e:df:92:6a:e8:21:b1:39:25:66:
         32:6e:57:93:ad:e2:65:09:be:0a:72:a8:60:db:c0:93:32:e0:
         db:84:1f:25:d8:a1:a2:b5:1b:34:9d:e8:75:b1:0d:82:14:80:
         d4:57:76:21:9f:cd:5d:44:b5:1f:48:33:76:0e:59:6b:2b:5c:
         94:f6:5b:c1:d5:2b:63:69:26:0b:07:75:03:87:32:93:94:21:
         86:bd:6e:dc:63:98:38:9c:10:9d:da:de:80:3d:e9:10:12:a3:
         ea:19:1b:25:26:e9:72:00:fa:6a:7f:d3:3d:6e:f4:19:06:05:
         21:23:43:bb:00:23:2a:0a:26:fc:af:f9:9d:77:5c:6d:5a:f8:
         10:50:ba:24:f4:bf:da:0b:f6:94:64:13:a3:6c:9d:63:c2:dd:
         aa:ef:4f:0e:a2:1e:8a:2e:c5:ac:dc:ec:bd:3a:ea:f8:a6:51:
         7a:65:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:26:11 2025 by rpki-client