This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138372e3132302e382e302f32322d3332203d3e203232333831.roa
File:                     3138372e3132302e382e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          dX+Vr4TcdXAP9bHmi5NF7w7S9q90Q5jTf9ABABgu2MI=
Subject key identifier:   E8:B6:95:40:F1:69:D5:28:21:8F:5A:16:FE:B5:92:C8:D4:6F:D1:F2
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       4A2304C92985E3F34A982F8F0546C60859E6BE0B
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138372e3132302e382e302f32322d3332203d3e203232333831.roa
Signing time:             Tue 11 Nov 2025 15:44:14 +0000
ROA not before:           Tue 11 Nov 2025 15:39:14 +0000
ROA not after:            Tue 10 Nov 2026 15:44:14 +0000
asID:                     22381
IP address blocks:        187.120.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:04:c9:29:85:e3:f3:4a:98:2f:8f:05:46:c6:08:59:e6:be:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:14 2025 GMT
            Not After : Nov 10 15:44:14 2026 GMT
        Subject: CN=E8B69540F169D528218F5A16FEB592C8D46FD1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:60:d4:2b:af:dd:62:08:b2:85:1f:29:ad:
                    48:e3:c7:70:fd:1b:1a:68:6e:13:ac:f4:17:0a:fe:
                    6f:cf:16:6e:90:60:ed:cb:2c:a5:7c:6c:39:4c:b7:
                    8c:3c:cf:6f:80:09:61:ad:82:ec:3f:01:0c:d4:b3:
                    aa:59:4e:3d:fd:86:e4:ce:09:6a:2a:8f:4e:99:46:
                    9e:34:f0:e5:62:8d:14:f2:f5:c0:48:d6:4f:f2:17:
                    f8:d8:57:b7:09:a2:09:ee:e8:ec:4a:20:a5:78:a8:
                    10:7e:e5:15:6f:dd:c1:97:30:90:26:4a:41:ed:8c:
                    ce:fc:fa:d7:76:bd:e6:d4:29:77:0a:90:ce:da:e9:
                    13:41:f9:5f:74:ea:c9:f1:2b:74:dc:ae:a3:bf:97:
                    81:dd:c1:a1:79:eb:9d:6b:66:c5:c6:73:7d:75:48:
                    0f:d8:51:29:1c:49:c8:01:6e:21:c7:85:7e:37:60:
                    8d:a3:e7:80:62:c8:c9:1e:8e:cb:ff:5d:ce:a0:32:
                    10:0b:1a:ab:c8:13:93:02:06:f1:f1:03:89:06:f4:
                    0c:85:31:b2:ac:95:95:49:5d:b8:2b:92:61:e3:cf:
                    b8:82:17:a1:87:91:81:a7:fa:9c:e2:ca:a3:61:ee:
                    ab:81:38:76:49:96:0e:1f:62:72:ca:1a:26:33:15:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:95:40:F1:69:D5:28:21:8F:5A:16:FE:B5:92:C8:D4:6F:D1:F2
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3138372e3132302e382e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:d4:81:1f:0b:55:c9:78:16:d1:6b:fc:37:bc:c3:34:33:
         0c:7e:2a:a6:5f:10:04:51:f0:90:aa:f5:e4:4d:20:38:38:70:
         a9:c6:37:2b:a3:f1:1d:8e:5d:db:a2:1d:f7:df:44:e2:26:f0:
         ea:48:46:99:10:d7:26:b7:86:df:3d:15:21:25:aa:2f:fd:e4:
         18:f1:32:df:5c:cb:c1:c4:20:da:0e:88:9d:a1:84:32:a3:8a:
         a6:73:62:e2:e0:f3:2b:cc:fd:04:52:8e:1c:00:c1:23:fc:a5:
         8f:19:ab:75:01:39:1a:07:29:91:ad:11:7a:45:f5:fb:a6:8c:
         a6:a9:c4:b6:57:1a:48:00:30:50:27:b2:3d:fa:9c:48:c6:e2:
         c6:44:d3:d4:c2:c4:b1:00:7b:14:22:d3:7b:53:e1:f9:4c:58:
         7a:30:f9:e1:ca:3c:cb:f0:19:fa:6f:fe:ef:01:e7:fd:fc:f0:
         f5:34:95:09:f4:e8:cd:8c:93:d3:be:92:6b:aa:82:08:b5:11:
         aa:4c:29:50:fa:41:b0:35:f5:8a:a9:b4:83:e3:86:42:ea:e1:
         aa:d3:7c:2d:54:1e:32:99:b7:e6:94:5a:ba:74:45:27:4b:d4:
         f7:60:35:e7:44:72:a4:d6:24:65:fe:bc:1a:56:c1:bc:38:00:
         f0:f0:e7:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSiMEySmF4/NKmC+PBUbGCFnmvgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYzOUJGRDhCQkE4RUMzQTE0REM4NUNENEFDMzgxRTM2
QTI5RjExMjAeFw0yNTExMTExNTM5MTRaFw0yNjExMTAxNTQ0MTRaMDMxMTAvBgNV
BAMTKEU4QjY5NTQwRjE2OUQ1MjgyMThGNUExNkZFQjU5MkM4RDQ2RkQxRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbh2DUK6/dYgiyhR8prUjjx3D9
GxpobhOs9BcK/m/PFm6QYO3LLKV8bDlMt4w8z2+ACWGtguw/AQzUs6pZTj39huTO
CWoqj06ZRp408OVijRTy9cBI1k/yF/jYV7cJognu6OxKIKV4qBB+5RVv3cGXMJAm
SkHtjM78+td2vebUKXcKkM7a6RNB+V906snxK3TcrqO/l4HdwaF5651rZsXGc311
SA/YUSkcScgBbiHHhX43YI2j54BiyMkejsv/Xc6gMhALGqvIE5MCBvHxA4kG9AyF
MbKslZVJXbgrkmHjz7iCF6GHkYGn+pziyqNh7quBOHZJlg4fYnLKGiYzFYHlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6LaVQPFp1Sghj1oW/rWSyNRv0fIwHwYDVR0j
BBgwFoAUTzm/2Luo7DoU3IXNSsOB42op8RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMi80RjM5QkZEOEJCQThFQzNBMTREQzg1Q0Q0QUMzODFFMzZBMjlGMTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMzlCRkQ4QkJBOEVDM0Ex
NERDODVDRDRBQzM4MUUzNkEyOUYxMTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzIv
MzEzODM3MmUzMTMyMzAyZTM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMjMz
MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArt4CDANBgkqhkiG9w0BAQsFAAOCAQEASdHUgR8LVcl4
FtFr/De8wzQzDH4qpl8QBFHwkKr15E0gODhwqcY3K6PxHY5d26Id999E4ibw6khG
mRDXJreG3z0VISWqL/3kGPEy31zLwcQg2g6InaGEMqOKpnNi4uDzK8z9BFKOHADB
I/yljxmrdQE5Ggcpka0RekX1+6aMpqnEtlcaSAAwUCeyPfqcSMbixkTT1MLEsQB7
FCLTe1Ph+UxYejD54co8y/AZ+m/+7wHn/fzw9TSVCfTozYyT076Sa6qCCLURqkwp
UPpBsDX1iqm0g+OGQurhqtN8LVQeMpm35pRaunRFJ0vU92A150RypNYkZf68GlbB
vDgA8PDnIg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:00 2025 by rpki-client