This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/3133312e3235352e3130342e302f32322d3234203d3e20323731373631.roa
File:                     3133312e3235352e3130342e302f32322d3234203d3e20323731373631.roa (raw, json)
Hash identifier:          9GkCvEKf9udIfmXGLXbPgHCwSCKV5vW/5e/8xAIX8kE=
Subject key identifier:   E4:48:C1:F1:A2:E9:C1:76:20:CE:DC:09:89:05:B2:4D:61:40:9D:B7
Certificate issuer:       /CN=6EA22A57869702BB3EC504F354E3A399C57E7BF5
Certificate serial:       1090ED76AE50E3B1B3A0EDCE4E6397A6F66768A5
Authority key identifier: 6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/3133312e3235352e3130342e302f32322d3234203d3e20323731373631.roa
Signing time:             Wed 19 Nov 2025 16:48:09 +0000
ROA not before:           Wed 19 Nov 2025 16:43:09 +0000
ROA not after:            Wed 18 Nov 2026 16:48:09 +0000
asID:                     271761
IP address blocks:        131.255.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.crl
                          rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:90:ed:76:ae:50:e3:b1:b3:a0:ed:ce:4e:63:97:a6:f6:67:68:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA22A57869702BB3EC504F354E3A399C57E7BF5
        Validity
            Not Before: Nov 19 16:43:09 2025 GMT
            Not After : Nov 18 16:48:09 2026 GMT
        Subject: CN=E448C1F1A2E9C17620CEDC098905B24D61409DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:88:c7:fb:12:4d:51:e2:69:d6:b9:fa:dd:
                    21:01:0c:0a:1e:43:66:b6:ac:ec:be:fa:ac:19:28:
                    d4:54:4b:a8:9d:ec:f4:ea:c7:e0:20:59:5b:96:b8:
                    f1:f2:43:60:5c:ce:ed:6a:63:17:fa:9f:13:7c:e4:
                    9d:6e:6d:58:ce:b3:80:74:ec:2c:05:54:ca:a7:bf:
                    6b:52:f0:06:cd:8a:80:76:1f:b7:4b:10:fe:e1:d2:
                    2a:9b:92:e2:dd:a1:84:eb:67:16:73:a6:fc:c4:aa:
                    71:cb:da:31:2b:3f:27:18:9d:2b:88:ff:e1:63:09:
                    27:5f:91:44:d3:b8:b3:bb:1c:72:9c:65:c2:1d:03:
                    34:b3:9f:d5:5e:a3:59:aa:da:8b:ec:1a:d5:26:43:
                    45:7f:dc:e4:6a:61:99:ec:95:d0:b5:60:39:52:6a:
                    5b:ff:48:1e:89:a1:e7:03:37:27:65:59:47:e2:08:
                    a2:d1:2a:4c:4d:ba:ae:65:24:5a:65:31:2d:26:d0:
                    46:a0:f2:72:1c:41:df:cc:e5:b3:45:b1:54:85:39:
                    49:f4:25:34:f7:bb:08:73:24:0d:26:c6:ab:62:49:
                    e0:8d:6f:db:2a:15:d6:01:80:e7:9f:f1:68:01:03:
                    f5:6d:7c:9a:2e:48:17:d5:09:b4:04:a1:f7:92:43:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:C1:F1:A2:E9:C1:76:20:CE:DC:09:89:05:B2:4D:61:40:9D:B7
            X509v3 Authority Key Identifier:
                keyid:6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/3133312e3235352e3130342e302f32322d3234203d3e20323731373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:7b:06:82:1b:2f:19:c6:da:76:54:0f:ad:6c:f4:41:c2:f7:
         2c:b1:29:5f:38:58:ad:d6:e5:d2:ee:0e:65:ab:28:24:e3:7a:
         40:a5:70:85:9c:b9:69:63:a4:e3:ef:06:1c:45:85:dc:79:f1:
         73:04:42:b2:73:c2:db:49:06:dd:c2:97:ea:9e:98:fb:f0:09:
         c5:97:52:71:70:b4:8e:ba:f8:2f:15:72:5e:d6:1f:bd:e3:31:
         ac:0f:85:06:3a:ce:c7:9a:3b:85:44:1d:aa:3c:a9:52:5b:45:
         f9:c1:a3:1f:40:b8:3e:6c:95:24:77:00:c3:a0:a9:36:b8:7e:
         e2:7b:f8:4d:af:3c:aa:ae:a4:af:e1:97:d5:4f:a5:6d:27:1c:
         0d:e8:fd:ee:dc:ae:ae:7a:d1:39:4d:d0:cb:70:3a:a9:71:3d:
         10:2e:c5:f2:ac:6a:1a:23:22:2d:c2:37:14:41:98:6d:fc:36:
         ac:d0:6d:e5:99:16:11:5b:04:f7:0e:a9:bb:8e:cc:1a:82:6d:
         96:24:ac:6b:84:0f:49:c5:50:67:c2:f4:b3:77:ab:de:8a:53:
         bc:d5:da:62:3d:ec:02:fe:14:43:cc:58:81:e7:30:98:a3:98:
         60:84:1f:39:f2:e3:35:3e:51:4e:eb:f4:ab:2d:fa:14:8c:ce:
         34:82:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:03 2025 by rpki-client