This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e312e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e312e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          r7pgsd/h7jSsYjZxXJMR/5NCkofitoBDCeJnheT7L7s=
Subject key identifier:   D5:7D:6E:5C:45:79:9B:FA:1F:8B:6C:28:88:75:89:6E:C2:C4:20:A6
Certificate issuer:       /CN=83B043913D491364D833E396DC6545FC836AF449
Certificate serial:       3DC6664C2A22ABD91D00C2CD43046F1FAD1AA072
Authority key identifier: 83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e312e302f32342d3234203d3e20323637343430.roa
Signing time:             Wed 03 Dec 2025 18:38:49 +0000
ROA not before:           Wed 03 Dec 2025 18:33:49 +0000
ROA not after:            Wed 02 Dec 2026 18:38:49 +0000
asID:                     267440
IP address blocks:        192.141.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c6:66:4c:2a:22:ab:d9:1d:00:c2:cd:43:04:6f:1f:ad:1a:a0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B043913D491364D833E396DC6545FC836AF449
        Validity
            Not Before: Dec  3 18:33:49 2025 GMT
            Not After : Dec  2 18:38:49 2026 GMT
        Subject: CN=D57D6E5C45799BFA1F8B6C288875896EC2C420A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:ca:84:cc:19:e3:b8:01:92:bc:ae:6b:20:
                    8b:34:9a:7b:01:83:5d:9a:4b:17:d6:94:6a:00:5b:
                    29:e6:6a:36:45:50:78:b5:59:b1:e3:bc:d8:05:04:
                    4c:69:82:d3:13:4d:92:61:0a:ce:fa:ee:bc:2c:bc:
                    8b:dd:29:6d:a9:76:a3:46:07:f5:4c:60:9e:13:cf:
                    62:a8:51:aa:70:f3:9d:87:ab:de:4b:1f:d5:47:5c:
                    2b:2c:48:db:22:d2:43:d2:ed:37:c3:0f:7f:14:eb:
                    d3:5f:1e:fb:58:85:91:75:4f:06:66:40:4e:82:11:
                    e8:e8:65:f9:fa:c1:13:58:4a:50:dc:3d:3b:ac:f3:
                    fd:5e:6e:67:c9:0a:22:c0:77:09:a2:e4:71:7a:49:
                    6e:ea:71:e4:8d:65:62:ce:31:1d:0c:f9:c2:ba:02:
                    f6:33:c4:7d:cc:a4:00:b2:ff:2d:42:30:6a:1c:a6:
                    b6:ff:65:21:34:df:ac:1f:fa:9b:d2:85:0d:95:e0:
                    a8:01:95:31:01:bb:7c:2d:59:26:ae:0e:2c:f3:57:
                    e5:4a:23:b3:86:60:71:44:4b:be:5b:6c:7c:60:4d:
                    2e:6d:42:29:de:81:7e:a8:84:8f:73:ac:dd:1b:c3:
                    f7:88:4b:4e:dc:3c:35:99:64:cf:5d:b7:f0:46:23:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7D:6E:5C:45:79:9B:FA:1F:8B:6C:28:88:75:89:6E:C2:C4:20:A6
            X509v3 Authority Key Identifier:
                keyid:83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e312e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:69:72:c4:26:35:96:a4:f0:62:6f:14:b1:7f:35:b5:66:55:
         95:86:43:5a:99:85:6f:7f:cf:04:f9:25:08:df:62:83:1a:00:
         c2:25:99:4a:09:c6:fa:1e:37:34:c4:f2:01:47:77:05:70:72:
         16:76:3a:21:02:2d:77:34:12:d2:44:03:dd:8f:0d:d1:d8:41:
         b3:e7:7e:e8:5f:a4:d5:a6:88:f0:11:76:11:d5:61:74:c3:d7:
         4f:6e:c7:4c:fa:c0:31:7d:fe:06:56:0b:8d:55:37:89:10:7d:
         61:05:21:3b:63:d9:d3:4e:2a:b2:ab:97:d0:ef:40:e9:42:68:
         a7:1a:e9:70:8d:5c:93:ef:a7:63:10:92:51:13:c7:1f:ce:08:
         f8:be:05:32:bb:2c:6e:ae:76:73:3e:fd:94:1f:29:3d:6f:a3:
         b1:d5:fe:6f:74:48:65:83:6b:f3:e0:3a:11:29:4b:8f:74:79:
         02:78:33:03:04:7e:b9:a7:b6:f8:c6:58:9e:03:59:27:a5:9b:
         36:a7:a1:e6:52:8e:58:ef:65:3f:e6:1b:36:c2:fa:2a:9f:67:
         e5:6c:4e:b6:94:4a:37:c3:34:59:ee:9f:6f:5b:cf:ea:44:cf:
         79:84:64:a0:04:31:2b:04:26:75:09:19:22:4e:c9:98:33:7d:
         34:96:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:59 2025 by rpki-client