This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa
File:                     3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa (raw, json)
Hash identifier:          YRXUQAZar0uTO1g6gvS6QzY1HkgS5fXJZ//3rAwcacg=
Subject key identifier:   CF:29:90:A7:8B:39:23:54:EA:9D:B9:CB:FC:98:66:95:CB:4F:A7:07
Certificate issuer:       /CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB
Certificate serial:       1ADCAAE704AB317CC11C900CD5BA47880ACE63D2
Authority key identifier: 5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa
Signing time:             Wed 12 Nov 2025 00:37:14 +0000
ROA not before:           Wed 12 Nov 2025 00:32:14 +0000
ROA not after:            Wed 11 Nov 2026 00:37:14 +0000
asID:                     264949
IP address blocks:        168.232.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:dc:aa:e7:04:ab:31:7c:c1:1c:90:0c:d5:ba:47:88:0a:ce:63:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB
        Validity
            Not Before: Nov 12 00:32:14 2025 GMT
            Not After : Nov 11 00:37:14 2026 GMT
        Subject: CN=CF2990A78B392354EA9DB9CBFC986695CB4FA707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:db:59:47:2c:82:a1:90:2d:ef:81:87:0f:
                    14:f3:49:9d:8a:53:4c:b5:8d:ab:e3:53:39:0b:3b:
                    9e:69:13:ca:7c:80:24:c0:5c:cc:61:da:8b:2c:70:
                    ec:92:f2:38:ba:e7:f3:91:4c:a5:c0:d0:81:8d:7c:
                    73:2a:ff:c6:e6:58:24:c9:c8:b8:0d:d5:64:9b:66:
                    30:2f:1a:0f:6c:a5:4f:4e:5d:8b:72:ea:c0:fb:a8:
                    3d:59:da:c3:d3:8f:04:77:f2:3e:7a:42:7a:a5:ca:
                    98:98:ec:ac:ff:de:bd:d6:93:91:13:d2:b7:6b:d3:
                    55:9b:fe:f6:8d:2d:c5:91:13:e6:80:ec:d5:59:7c:
                    32:5f:1f:c8:4c:a1:78:57:10:ef:00:8c:18:0e:6f:
                    32:13:af:79:a6:89:36:0b:5f:8c:d0:74:73:60:aa:
                    49:95:bc:7a:ec:82:8c:e8:b2:2f:c0:70:a9:54:fa:
                    14:45:c8:0e:af:f9:f7:7f:55:87:52:ac:45:73:36:
                    60:b6:42:b0:98:20:6d:c4:64:75:a5:d1:1b:08:0c:
                    9a:c7:4b:27:d6:1d:7f:54:f4:5e:03:1c:21:ad:e6:
                    46:76:54:63:80:c6:d4:26:f6:a7:28:ed:11:61:8f:
                    03:31:42:1e:e3:48:df:a9:de:ac:a4:14:f8:86:3f:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:90:A7:8B:39:23:54:EA:9D:B9:CB:FC:98:66:95:CB:4F:A7:07
            X509v3 Authority Key Identifier:
                keyid:5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:44:3a:e2:8f:37:70:f1:1a:9b:81:09:86:c4:d9:d7:c1:
         b6:6d:26:d0:7d:b6:9f:5d:2a:d2:4f:87:6a:cf:e9:14:05:c5:
         aa:05:f4:7c:4c:a4:90:cb:ba:5b:44:80:56:7e:11:ce:5f:41:
         48:7a:48:f4:0d:2f:cc:cf:8b:c3:18:4e:f9:85:8a:fb:11:81:
         10:26:45:5a:98:dd:ab:b3:e6:f2:75:96:66:fe:cc:18:08:ff:
         6e:9f:6d:36:78:f1:66:a8:55:14:43:6e:bd:35:3c:ac:37:c0:
         48:af:00:60:57:e4:16:0a:18:99:cc:63:09:e3:9b:f8:81:47:
         5c:c5:ec:07:f0:45:54:83:ad:dc:81:d4:48:01:00:2f:1f:9c:
         95:b7:40:5c:0e:49:0e:a3:79:30:b6:d5:ca:f8:72:57:47:3d:
         af:2a:a6:fd:d6:ba:6f:81:61:54:0a:7a:08:e5:e7:a9:bd:68:
         e6:e4:7d:0e:e8:d3:4a:2b:22:3d:87:f8:c8:22:f6:61:50:ab:
         c3:3e:c8:fc:da:98:09:e0:ad:4b:fc:2c:5c:14:ac:09:16:8f:
         32:0e:02:3c:72:64:81:3a:85:e7:ad:57:c6:28:9d:6d:34:ce:
         64:59:bd:cc:ce:e9:47:29:1b:aa:69:8a:95:f4:af:28:2c:71:
         09:02:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:38 2025 by rpki-client