This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138362e3232362e36342e302f32302d3332203d3e203238333239.roa
File:                     3138362e3232362e36342e302f32302d3332203d3e203238333239.roa (raw, json)
Hash identifier:          8Zc88msfMsiMNBeCCYWh0lgWriwKwI2whUgIwQ0cqkI=
Subject key identifier:   37:88:D6:D2:B7:62:DA:6E:BA:11:BE:F8:76:63:40:99:ED:58:47:EB
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       4364DBE5C4C97267C3EF7D14CE806EE41DFA5256
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138362e3232362e36342e302f32302d3332203d3e203238333239.roa
Signing time:             Tue 11 Nov 2025 15:44:20 +0000
ROA not before:           Tue 11 Nov 2025 15:39:20 +0000
ROA not after:            Tue 10 Nov 2026 15:44:20 +0000
asID:                     28329
IP address blocks:        186.226.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:64:db:e5:c4:c9:72:67:c3:ef:7d:14:ce:80:6e:e4:1d:fa:52:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:20 2025 GMT
            Not After : Nov 10 15:44:20 2026 GMT
        Subject: CN=3788D6D2B762DA6EBA11BEF876634099ED5847EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:62:e8:cd:e8:64:73:89:2c:15:dd:3b:1e:
                    36:b0:82:36:d0:95:79:69:50:c0:e0:da:b1:39:b7:
                    8c:88:7b:22:de:0e:bd:33:77:18:1e:c4:8b:3a:41:
                    17:53:a0:00:95:17:8c:60:93:d7:a3:75:12:14:1e:
                    74:72:c5:27:4b:c2:45:43:20:65:c6:33:1f:df:95:
                    be:37:54:d9:a6:cd:ec:58:78:e3:da:f0:1c:57:ca:
                    76:69:d1:ad:f9:52:2c:58:2f:e0:1e:7e:5c:6c:57:
                    11:01:00:bd:54:e9:fd:82:97:1b:6c:5c:c0:a0:d4:
                    fe:11:29:50:09:33:f0:9f:6e:13:72:ac:45:d2:a1:
                    08:ed:83:ac:5d:fa:38:0d:d8:c7:84:41:8b:99:47:
                    ac:2e:21:a9:08:9d:f7:c6:5f:70:66:f0:b7:be:c1:
                    9a:0a:5e:e2:7a:45:10:87:5b:c4:86:b5:72:1b:48:
                    91:c0:68:d6:a7:9b:7e:1f:2a:64:dd:2a:cb:dd:45:
                    ea:f0:e2:28:d6:a9:70:05:d0:4c:a6:ec:ee:51:a4:
                    69:be:de:c4:ad:de:c3:84:05:31:c3:29:cd:01:12:
                    8d:7f:15:1f:ed:97:6c:c4:c6:f0:8b:74:7b:e1:8e:
                    b8:d0:bf:06:30:55:24:07:e7:78:aa:bd:9e:26:b1:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:D6:D2:B7:62:DA:6E:BA:11:BE:F8:76:63:40:99:ED:58:47:EB
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138362e3232362e36342e302f32302d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:57:2b:bd:85:dd:38:a8:59:a0:12:b0:75:a9:d6:95:e6:82:
         b6:88:59:a5:64:4a:c2:1c:89:b4:53:19:21:e6:0e:9a:09:b8:
         01:74:d4:71:a6:72:f8:e0:3d:17:d9:42:80:e4:bf:13:8e:72:
         d3:9d:88:d2:d9:3b:f0:18:b3:42:5e:70:5b:d1:02:c6:8b:89:
         da:83:bd:ac:01:b9:a5:8f:fb:3d:18:9e:d2:b0:41:42:70:af:
         03:2e:ad:15:b7:59:ee:78:6b:ea:0b:52:ca:3f:4c:18:a9:cd:
         12:c6:75:11:a2:e8:d2:d3:5c:5b:5a:c4:1e:56:52:4c:ac:ea:
         58:8b:f0:08:b1:d4:19:b0:c0:4b:c9:f5:ff:e0:f2:5a:f6:e1:
         71:92:df:12:66:8d:1b:18:af:db:44:7d:2f:0b:43:4a:66:4c:
         02:f8:0b:09:46:a0:fb:39:bb:60:5b:ac:0d:bc:b5:ca:f1:21:
         52:89:59:54:92:42:71:d0:30:ae:e8:05:17:81:91:f4:af:64:
         d1:02:dc:ba:5d:07:f6:45:c9:ed:81:44:96:44:b2:d6:f9:46:
         dc:b1:a9:65:c0:8f:60:e9:be:10:e8:01:4e:77:09:91:3c:fb:
         d5:36:19:a1:0d:2e:41:f7:76:ba:6a:cb:f5:ab:8f:a8:ab:2d:
         dd:14:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:42 2025 by rpki-client