This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa
File:                     3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa (raw, json)
Hash identifier:          lSyo9iMe2e8zkx88kYejal+eIRIgGn/lkrvsEvmeYzs=
Subject key identifier:   9C:5E:94:32:A4:1B:47:33:28:40:39:48:05:34:29:68:3E:55:C5:E5
Certificate issuer:       /CN=7C15F291DFB615DDF2838141345B3BEFF00DF2A8
Certificate serial:       1BB02AD1C83879D02F32ADC20E2F8EED7E40A09C
Authority key identifier: 7C:15:F2:91:DF:B6:15:DD:F2:83:81:41:34:5B:3B:EF:F0:0D:F2:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa
Signing time:             Tue 25 Nov 2025 13:46:52 +0000
ROA not before:           Tue 25 Nov 2025 13:41:52 +0000
ROA not after:            Tue 24 Nov 2026 13:46:52 +0000
asID:                     273521
IP address blocks:        189.126.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.crl
                          rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b0:2a:d1:c8:38:79:d0:2f:32:ad:c2:0e:2f:8e:ed:7e:40:a0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C15F291DFB615DDF2838141345B3BEFF00DF2A8
        Validity
            Not Before: Nov 25 13:41:52 2025 GMT
            Not After : Nov 24 13:46:52 2026 GMT
        Subject: CN=9C5E9432A41B473328403948053429683E55C5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:8a:08:25:9d:97:02:47:64:33:70:1a:50:
                    0b:6a:13:5c:e8:09:7d:9c:9a:b0:44:34:26:ea:11:
                    52:9d:3c:e9:23:17:bc:5a:7f:65:2f:39:44:21:f7:
                    3d:f3:0a:ed:a8:11:d1:3d:65:6d:d3:e2:6b:26:03:
                    5c:ea:a5:61:2f:8c:b7:84:35:ab:c6:54:99:f4:06:
                    47:7b:56:a1:d8:8d:eb:ab:36:7c:ae:62:7d:13:19:
                    2b:21:eb:cc:4f:b3:89:06:fe:99:76:3c:ff:fb:11:
                    15:44:d8:ec:d7:40:d9:a9:77:6f:9c:e0:3e:b8:a0:
                    3c:c0:d8:88:8d:d9:23:31:ed:1d:22:66:1d:40:38:
                    65:62:c4:f3:fe:a7:f3:76:f6:dc:32:80:0d:d3:8e:
                    91:0d:6d:62:11:76:fa:c1:a2:3e:a3:cc:9e:bb:46:
                    75:d5:08:48:4a:01:2f:3a:3c:25:6d:aa:5e:f1:9d:
                    dc:8d:a6:1d:b0:41:bf:5c:e2:77:9d:40:44:23:9a:
                    df:49:cf:b9:73:f4:b7:d4:f6:ba:d2:32:fb:a8:17:
                    6f:c0:12:d1:c0:75:ba:6c:d2:d1:c5:57:01:43:14:
                    6e:52:b4:dd:3d:65:8c:e0:a6:89:91:ae:4b:20:3c:
                    c9:19:79:e4:4d:2d:2e:08:a5:09:8a:e0:bf:30:3b:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:94:32:A4:1B:47:33:28:40:39:48:05:34:29:68:3E:55:C5:E5
            X509v3 Authority Key Identifier:
                keyid:7C:15:F2:91:DF:B6:15:DD:F2:83:81:41:34:5B:3B:EF:F0:0D:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f7:b0:6c:7a:fc:e2:f9:50:a7:cd:c1:bc:1a:70:4d:6a:9a:
         89:c6:b9:18:5e:0b:e8:02:3e:64:cc:e1:1b:7e:1a:3f:48:5b:
         b7:d2:23:1e:cc:d0:7f:73:32:a2:f9:b8:e5:88:6f:d3:fb:85:
         17:86:34:94:8c:db:dc:12:56:c4:ac:48:86:e4:bd:86:3d:e7:
         e7:78:b2:53:1b:c4:db:57:cb:3c:c6:a5:91:e0:9b:31:76:3d:
         57:ec:65:82:bb:ea:82:3c:b0:b7:8a:11:bc:2b:f5:aa:f1:64:
         8b:fe:95:b2:7a:bc:33:4b:f0:ba:5a:41:6b:c1:57:16:2f:40:
         af:29:71:52:8d:33:d8:03:15:f7:4f:55:c5:b3:01:4b:b8:9f:
         f6:cc:67:2f:6a:c9:33:28:fb:da:d9:6d:33:ab:28:a2:e0:06:
         75:c5:83:a9:83:44:83:6c:6b:8e:34:7b:76:1a:84:1f:ee:63:
         d2:fc:26:09:53:e4:39:bf:34:7e:ed:e2:7d:a9:cc:1d:1f:9a:
         42:f0:67:e6:c3:cc:ad:b5:c5:0d:78:3d:5e:55:be:e1:15:1a:
         d8:57:c4:d4:9c:67:c5:1a:c0:30:38:b9:01:9c:90:78:03:81:
         2f:29:83:33:fa:d2:31:87:1a:2d:5f:5a:48:31:b0:6f:4d:6a:
         fb:82:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:43 2025 by rpki-client