This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e322e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          pNgByou385DWdJRr2SKZ3dntubSsyXT0tplnwIUnCWE=
Subject key identifier:   88:61:A3:14:0E:BF:97:45:E8:DD:1B:31:75:36:20:02:9B:3E:A8:E5
Certificate issuer:       /CN=83B043913D491364D833E396DC6545FC836AF449
Certificate serial:       7D9A5A28D45CE4384AA15085E438A80948266C87
Authority key identifier: 83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa
Signing time:             Wed 03 Dec 2025 18:38:47 +0000
ROA not before:           Wed 03 Dec 2025 18:33:47 +0000
ROA not after:            Wed 02 Dec 2026 18:38:47 +0000
asID:                     267440
IP address blocks:        192.141.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 22:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9a:5a:28:d4:5c:e4:38:4a:a1:50:85:e4:38:a8:09:48:26:6c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B043913D491364D833E396DC6545FC836AF449
        Validity
            Not Before: Dec  3 18:33:47 2025 GMT
            Not After : Dec  2 18:38:47 2026 GMT
        Subject: CN=8861A3140EBF9745E8DD1B31753620029B3EA8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:03:1a:d7:bd:c0:4e:4c:ee:3f:6a:64:2d:
                    81:0f:cb:93:94:6e:0a:32:6d:c5:61:c8:e5:89:93:
                    5f:3f:cd:38:30:ed:c5:ab:32:9e:a8:24:c0:2b:4b:
                    83:b9:a1:d1:2d:ab:ed:3c:ab:94:09:6c:e8:b8:c3:
                    f8:a9:27:db:5b:cc:cc:3f:af:30:1c:8c:02:38:46:
                    bc:e3:32:0e:9b:96:7a:26:18:dc:f3:58:3d:dd:07:
                    90:30:b3:da:fb:cd:f2:64:13:e3:5a:f7:a9:c7:3a:
                    4b:8f:f4:70:ab:9f:6c:64:fa:7a:5f:82:24:e4:8d:
                    b4:9d:6e:1a:d3:2f:57:e6:a4:8a:59:e3:12:ab:63:
                    92:bd:12:0c:d4:9b:ab:91:5b:a2:fb:ce:77:86:db:
                    82:59:69:b4:72:af:9c:47:b2:b3:fc:f4:fc:d6:86:
                    2a:13:26:e5:5a:4a:c9:75:7d:c0:54:4d:54:0e:9c:
                    0a:fd:38:85:ef:ed:d6:50:22:02:8c:43:5b:a5:ae:
                    96:d8:3a:ee:a4:a1:c1:4c:52:4f:61:7d:fa:19:46:
                    5f:0a:5a:09:fd:47:98:21:d4:9a:11:6c:cb:62:34:
                    e3:26:64:3e:f6:39:c3:aa:97:b9:f5:d4:6e:78:15:
                    4b:06:db:3b:fa:e7:a8:c2:9e:87:84:05:a3:6c:24:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:61:A3:14:0E:BF:97:45:E8:DD:1B:31:75:36:20:02:9B:3E:A8:E5
            X509v3 Authority Key Identifier:
                keyid:83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:90:55:79:33:4d:26:44:d8:8f:a9:dd:54:5b:95:bd:62:
         b9:fc:b7:c8:97:2e:61:9b:42:c1:bf:71:70:41:2e:c8:88:20:
         ab:23:11:0a:40:b7:8a:0f:f8:e6:ed:3b:20:4c:02:1f:7f:5d:
         fc:2e:6a:c9:8c:1a:b9:ae:7e:ad:50:34:78:48:5d:b3:e8:ea:
         49:36:00:44:05:b2:b5:fe:be:84:2b:67:4e:e6:b1:25:bf:f1:
         26:e2:fe:0d:6d:80:80:a2:bd:49:f1:fb:60:97:8d:25:9f:9d:
         96:2b:55:2a:04:f4:0b:16:b3:7e:39:3d:2f:a1:bf:50:89:09:
         fb:c3:14:20:a9:aa:f1:10:16:9f:f8:fa:db:5a:c8:1f:d6:1a:
         13:8e:e8:9e:39:4a:86:84:43:6b:31:46:cb:8d:1c:37:a9:ca:
         a5:6c:42:b2:bf:94:07:17:ad:39:5b:02:a7:79:3f:e0:4b:b2:
         06:97:64:56:75:82:e4:00:a4:86:ff:42:46:19:13:5c:f3:f9:
         d1:eb:41:bc:76:f3:cc:0e:05:cf:56:db:ad:3f:d6:2e:6b:3b:
         d7:3b:ec:96:36:6f:fe:e2:35:02:84:f8:9b:20:9b:83:64:d4:
         45:53:1c:2e:2f:37:22:2f:2f:44:3c:1d:a8:14:71:d3:ac:7a:
         32:67:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:09:19 2025 by rpki-client