This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e302e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          86b8clZtLXEvqbzVs6HRMgxel1oTcHPi4ervVQ+VWkc=
Subject key identifier:   70:52:B8:7F:FB:CE:42:5A:0A:B2:A8:6D:9F:AE:62:B8:02:32:D8:C9
Certificate issuer:       /CN=83B043913D491364D833E396DC6545FC836AF449
Certificate serial:       77FFB33EC4E8909C1709C8D343694DF54D7BD4B7
Authority key identifier: 83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32342d3234203d3e20323637343430.roa
Signing time:             Wed 03 Dec 2025 18:38:49 +0000
ROA not before:           Wed 03 Dec 2025 18:33:49 +0000
ROA not after:            Wed 02 Dec 2026 18:38:49 +0000
asID:                     267440
IP address blocks:        192.141.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ff:b3:3e:c4:e8:90:9c:17:09:c8:d3:43:69:4d:f5:4d:7b:d4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B043913D491364D833E396DC6545FC836AF449
        Validity
            Not Before: Dec  3 18:33:49 2025 GMT
            Not After : Dec  2 18:38:49 2026 GMT
        Subject: CN=7052B87FFBCE425A0AB2A86D9FAE62B80232D8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:35:72:b7:48:48:20:00:95:69:ab:38:68:
                    e0:ec:3c:eb:e9:1e:39:b6:68:33:73:a5:4d:d4:68:
                    64:08:d9:3e:97:89:93:c2:7f:74:f6:f9:c3:b3:f3:
                    5b:09:5b:1c:05:e9:bf:61:42:32:cd:dc:0c:46:b5:
                    c9:fc:ea:90:5e:1a:36:57:83:cc:a2:75:93:9f:78:
                    74:88:b8:ef:98:20:45:86:d3:09:72:01:36:8c:c7:
                    20:45:3e:b6:cd:7a:a0:39:94:55:6a:33:8c:c7:b8:
                    ea:f0:3f:38:0f:d3:89:2f:04:b4:7c:01:7e:ca:17:
                    8c:3d:aa:43:09:8d:e8:29:f6:cd:3d:b9:15:52:ad:
                    12:2f:79:72:47:76:06:46:da:46:04:8c:80:74:c5:
                    2c:51:ac:88:bf:e7:2c:ce:c2:34:ad:d9:6a:99:10:
                    21:23:f6:31:d8:e3:e6:42:39:62:d7:c9:47:05:8c:
                    f0:5d:5d:e6:be:5b:57:a4:83:55:8b:f0:83:a2:0f:
                    1d:7d:16:15:fc:cf:7f:68:b2:48:64:0b:28:c5:07:
                    87:83:1c:0c:26:b5:df:e1:64:56:68:5d:64:de:49:
                    fa:15:60:25:30:d1:a1:ee:0e:e8:e8:15:2e:9e:8c:
                    26:2b:52:ab:b5:4b:74:1a:26:e2:91:d6:45:4d:53:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:B8:7F:FB:CE:42:5A:0A:B2:A8:6D:9F:AE:62:B8:02:32:D8:C9
            X509v3 Authority Key Identifier:
                keyid:83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:66:43:82:d1:8d:f9:46:9a:e1:dc:25:9a:d2:7c:d1:28:
         da:60:ea:18:e5:09:d2:dd:6b:8d:c6:8d:d5:41:54:0a:62:d5:
         56:9e:58:a4:85:52:09:26:1b:35:b5:35:22:14:09:6f:77:12:
         7e:be:2a:cb:dc:a4:54:bf:2f:63:80:17:0b:bb:be:12:2a:fd:
         a8:75:ee:29:95:5f:fa:ec:3e:f7:c2:4b:7b:f2:40:be:26:d5:
         e8:2b:e4:20:04:66:e9:2b:d7:fd:17:67:57:57:db:43:29:4c:
         e3:7a:ad:1c:5b:0b:5b:6f:2f:7c:e1:d6:40:9e:85:28:c9:c3:
         9f:a5:95:60:3a:5e:e0:83:e5:0c:63:72:cd:6e:6e:d8:fc:07:
         2b:db:91:94:72:f7:b7:c3:9e:6c:b2:f4:f4:20:90:44:36:04:
         b9:9a:d8:4f:fd:40:52:7b:0a:82:2b:4a:24:d9:30:e6:22:5d:
         78:6b:5e:6d:fd:e9:5c:ca:0f:73:14:18:f0:e3:46:f7:2b:94:
         52:27:17:20:43:84:fa:e6:2f:83:54:73:92:14:44:6f:1b:c1:
         93:af:ec:b2:14:c1:2f:c3:bd:9c:fc:86:0c:9b:03:96:65:ad:
         b8:4c:ae:21:99:99:50:bf:f3:db:6e:12:0a:4d:27:f5:76:79:
         f1:8c:c5:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd/+zPsTokJwXCcjTQ2lN9U171LcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNCMDQzOTEzRDQ5MTM2NEQ4MzNFMzk2REM2NTQ1RkM4
MzZBRjQ0OTAeFw0yNTEyMDMxODMzNDlaFw0yNjEyMDIxODM4NDlaMDMxMTAvBgNV
BAMTKDcwNTJCODdGRkJDRTQyNUEwQUIyQTg2RDlGQUU2MkI4MDIzMkQ4QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHDVyt0hIIACVaas4aODsPOvp
Hjm2aDNzpU3UaGQI2T6XiZPCf3T2+cOz81sJWxwF6b9hQjLN3AxGtcn86pBeGjZX
g8yidZOfeHSIuO+YIEWG0wlyATaMxyBFPrbNeqA5lFVqM4zHuOrwPzgP04kvBLR8
AX7KF4w9qkMJjegp9s09uRVSrRIveXJHdgZG2kYEjIB0xSxRrIi/5yzOwjSt2WqZ
ECEj9jHY4+ZCOWLXyUcFjPBdXea+W1ekg1WL8IOiDx19FhX8z39oskhkCyjFB4eD
HAwmtd/hZFZoXWTeSfoVYCUw0aHuDujoFS6ejCYrUqu1S3QaJuKR1kVNU1d7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcFK4f/vOQloKsqhtn65iuAIy2MkwHwYDVR0j
BBgwFoAUg7BDkT1JE2TYM+OW3GVF/INq9EkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMC84M0IwNDM5MTNENDkxMzY0RDgzM0UzOTZEQzY1NDVGQzgzNkFGNDQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzQjA0MzkxM0Q0OTEzNjRE
ODMzRTM5NkRDNjU0NUZDODM2QUY0NDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAv
MzEzOTMyMmUzMTM0MzEyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAwI0AMA0GCSqGSIb3DQEBCwUAA4IBAQBeOmZDgtGN
+Uaa4dwlmtJ80SjaYOoY5QnS3WuNxo3VQVQKYtVWnlikhVIJJhs1tTUiFAlvdxJ+
virL3KRUvy9jgBcLu74SKv2ode4plV/67D73wkt78kC+JtXoK+QgBGbpK9f9F2dX
V9tDKUzjeq0cWwtbby984dZAnoUoycOfpZVgOl7gg+UMY3LNbm7Y/Acr25GUcve3
w55ssvT0IJBENgS5mthP/UBSewqCK0ok2TDmIl14a15t/elcyg9zFBjw40b3K5RS
JxcgQ4T65i+DVHOSFERvG8GTr+yyFMEvw72c/IYMmwOWZa24TK4hmZlQv/PbbhIK
TSf1dnnxjMUh
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:17 2025 by rpki-client