This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa
File:                     3138372e3132302e31342e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier:          j6AYCHK8qvY97MWPPgQyVdcJXcK/Z/clrGuxK5XNVTg=
Subject key identifier:   AF:19:E8:F9:81:E9:D6:C4:29:D2:C8:A3:3C:6C:BC:47:F7:16:EA:F1
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       618AAD7653E457F0A204D19F63D80A5435B567AE
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa
Signing time:             Tue 11 Nov 2025 15:44:12 +0000
ROA not before:           Tue 11 Nov 2025 15:39:12 +0000
ROA not after:            Tue 10 Nov 2026 15:44:12 +0000
asID:                     22381
IP address blocks:        187.120.14.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8a:ad:76:53:e4:57:f0:a2:04:d1:9f:63:d8:0a:54:35:b5:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:12 2025 GMT
            Not After : Nov 10 15:44:12 2026 GMT
        Subject: CN=AF19E8F981E9D6C429D2C8A33C6CBC47F716EAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:51:32:bf:b4:86:8e:5d:cc:12:76:0f:c2:
                    7a:0a:d0:a1:aa:ec:26:b1:88:57:ff:44:18:02:63:
                    c1:d4:1d:b4:05:6a:a0:50:08:8b:6a:74:ac:07:09:
                    41:8d:50:5e:ea:db:f1:5c:86:c3:4c:dc:27:6d:a0:
                    8e:94:6b:6f:2f:10:da:3b:91:ee:1a:4f:40:a2:ec:
                    91:87:4a:6e:56:f0:0c:a3:01:9b:77:dc:67:48:8d:
                    4b:02:77:36:80:1c:dd:7f:0a:b8:18:31:fa:ee:4f:
                    56:68:e7:8f:f4:a9:e6:47:05:09:52:70:7f:8e:c0:
                    cc:5a:c0:df:9d:b6:e0:c6:62:98:68:ea:6b:f7:28:
                    2e:6f:59:2a:ca:49:be:30:cf:85:4c:24:2b:db:3b:
                    64:aa:ef:8a:f6:62:7e:ae:02:64:6b:ec:0b:c3:29:
                    55:45:e1:55:32:14:95:b6:bb:08:86:42:90:26:bb:
                    41:73:45:f4:34:37:e4:93:50:1f:be:0b:26:c4:fe:
                    29:32:e8:ad:49:2d:d5:c9:ff:e3:da:c5:fd:2f:a5:
                    e0:af:67:15:d4:23:fb:42:32:3b:01:dc:2c:1b:f8:
                    61:c4:76:56:5e:d9:8a:5c:c6:17:96:c9:47:f1:5e:
                    58:51:b1:f4:45:f3:04:04:dd:35:e1:59:fa:c5:62:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:19:E8:F9:81:E9:D6:C4:29:D2:C8:A3:3C:6C:BC:47:F7:16:EA:F1
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:72:77:a6:2e:b3:57:40:53:73:27:45:af:4f:ae:30:6e:be:
         bb:54:ad:2f:ab:36:1b:7e:1b:3f:4b:a0:04:16:c1:9a:f1:65:
         40:90:99:54:53:64:e6:8c:c1:4f:c8:e1:0f:bf:c6:7b:98:1d:
         14:00:dc:17:c6:ac:d4:0a:c7:43:21:68:40:21:e0:eb:ba:a8:
         18:73:14:62:3c:b2:13:45:69:e9:85:97:70:84:82:e2:b6:36:
         5e:0a:8f:32:bb:d1:74:e7:3b:3c:29:e2:01:e1:50:2e:e1:9a:
         80:99:4c:ca:42:f9:7a:bf:0e:ec:4a:2c:5b:4b:3a:e6:f7:d2:
         68:21:eb:4e:a1:c5:a5:cd:f2:41:c1:3a:69:67:cd:84:02:59:
         13:1e:8a:2d:a1:52:ea:13:cd:3e:3b:49:8c:f8:92:9f:94:7e:
         86:a1:11:ce:14:a8:4c:52:0a:66:89:84:26:8c:d2:67:d1:d2:
         82:46:34:5c:24:1e:f9:66:73:ae:c9:20:ab:aa:52:bd:88:20:
         f9:5a:c2:df:3a:4f:77:3d:cd:ea:db:89:7e:65:ab:f3:cb:2e:
         71:ec:05:93:c3:03:92:3e:f5:d4:6a:3a:68:0b:e3:93:09:82:
         ce:1c:7f:32:f3:19:9a:f2:82:72:db:15:9e:d6:ab:da:b4:b4:
         28:82:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:56 2025 by rpki-client