This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa
File:                     3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          LMxby4dG8GOD6+i/Dnl1kvgP+aO4Wyut94L/0jTIULU=
Subject key identifier:   8C:6A:32:42:67:96:0A:DA:EB:FF:C6:BD:E3:B8:CB:F6:A7:72:CA:CD
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       6B9CE47A1CD7F7440218E7C06B87E39840430396
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa
Signing time:             Tue 11 Nov 2025 15:44:19 +0000
ROA not before:           Tue 11 Nov 2025 15:39:19 +0000
ROA not after:            Tue 10 Nov 2026 15:44:19 +0000
asID:                     22381
IP address blocks:        200.150.168.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9c:e4:7a:1c:d7:f7:44:02:18:e7:c0:6b:87:e3:98:40:43:03:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:19 2025 GMT
            Not After : Nov 10 15:44:19 2026 GMT
        Subject: CN=8C6A324267960ADAEBFFC6BDE3B8CBF6A772CACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:7b:a3:68:d2:50:13:68:a6:3b:eb:41:ab:
                    2d:9a:70:be:f2:d7:34:5a:d8:48:bb:f5:41:8a:31:
                    bd:8a:61:04:cf:ea:f2:cf:03:e3:52:6c:c1:58:93:
                    fa:45:f4:4f:4c:c7:0c:74:3e:83:f8:f0:fd:02:a8:
                    70:f0:fd:d3:88:fe:97:ea:d5:6d:66:f9:5d:59:2f:
                    5a:3e:58:84:5a:6d:f7:cf:12:92:5e:30:0a:11:0f:
                    15:20:5c:e5:5c:fe:d0:31:24:b6:0a:52:07:d9:a4:
                    6c:9a:36:5a:7e:b9:17:23:95:cf:a7:1e:00:e4:05:
                    fb:81:4e:04:f5:bc:4b:cf:1a:b0:f9:cd:19:1f:75:
                    5d:88:cd:c6:64:1a:6f:8f:15:1a:72:d1:a5:ae:3c:
                    6f:07:42:d3:16:b5:76:21:6a:3d:c0:f8:a7:16:ef:
                    fc:b4:76:a5:08:8d:1b:93:a8:e6:33:5b:24:75:a8:
                    14:d4:fc:6d:0c:f4:36:31:4c:df:6a:b4:d4:f7:43:
                    08:4d:12:aa:44:0f:0f:4f:56:fa:11:b9:d3:99:91:
                    50:1a:99:e0:6a:7b:55:86:f8:bf:0d:8b:35:ec:ce:
                    fc:b3:e1:b6:3b:cf:68:d5:10:e8:57:44:85:63:ff:
                    95:32:96:d2:db:23:d9:03:96:cb:d2:f4:3d:a2:8d:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:32:42:67:96:0A:DA:EB:FF:C6:BD:E3:B8:CB:F6:A7:72:CA:CD
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:67:21:68:f8:92:ac:10:fc:b4:ce:f1:82:9c:9d:da:39:58:
         1e:b8:2d:dd:46:5e:89:a8:e3:a9:8f:e1:b4:26:5c:14:ba:f5:
         09:21:20:66:4a:24:1d:a0:af:fa:4d:cc:75:c3:b9:98:0b:e0:
         35:1c:ce:de:7b:b8:97:03:cc:24:9f:fb:69:9c:7a:e6:f2:68:
         ab:43:2d:10:a2:9e:e6:19:6d:91:02:59:a9:f7:32:8d:56:e5:
         dd:d3:57:0d:51:40:c6:d3:78:39:34:01:23:90:5b:d7:1f:31:
         56:93:1b:82:12:7d:99:09:b5:bf:e2:1f:0c:56:89:76:b2:12:
         e6:6a:48:7e:71:70:9d:77:03:bb:b5:a2:d3:06:12:12:fe:ed:
         c3:54:d7:8b:22:57:a5:b6:d1:55:94:b4:66:5c:39:68:31:cc:
         5b:e5:7a:f5:a2:50:e9:1f:57:7d:db:9e:f1:58:6f:d8:f3:2c:
         7c:61:70:17:eb:2e:13:65:9d:e6:74:44:35:97:0f:26:35:9c:
         c7:2c:4d:3f:1f:85:9e:79:bf:b2:fe:08:b3:9e:06:ee:b8:a7:
         34:67:a0:35:2d:ab:7a:70:78:cb:6e:ab:e8:d8:23:c6:14:ba:
         62:20:0e:3c:b7:1e:95:46:dd:6f:89:03:a8:20:44:19:98:24:
         76:ae:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:09 2025 by rpki-client