This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3134332e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          4IYMEY0jWZ7nTNNHlLALO7tzE1zJaPlRhjvQtSrkKjI=
Subject key identifier:   65:CB:78:9C:29:26:A2:CF:B9:DA:6F:AE:6D:0E:0A:7D:98:28:6B:CF
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       6612A5F782B0E1F7C5DE4DAA5CEEBD8F4A276189
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa
Signing time:             Tue 11 Nov 2025 15:44:09 +0000
ROA not before:           Tue 11 Nov 2025 15:39:09 +0000
ROA not after:            Tue 10 Nov 2026 15:44:09 +0000
asID:                     22381
IP address blocks:        201.87.143.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:12:a5:f7:82:b0:e1:f7:c5:de:4d:aa:5c:ee:bd:8f:4a:27:61:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:09 2025 GMT
            Not After : Nov 10 15:44:09 2026 GMT
        Subject: CN=65CB789C2926A2CFB9DA6FAE6D0E0A7D98286BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:cd:be:93:9f:6b:27:5c:73:30:7e:46:a2:
                    b6:0a:18:93:6d:bf:9b:85:4d:41:87:52:d7:79:2b:
                    a2:7f:6a:e5:6b:71:ce:b6:b8:70:2a:ca:84:c3:45:
                    2d:57:e8:42:4f:a6:81:fc:3f:83:4b:47:37:c7:f8:
                    34:6a:a9:13:f1:f0:dd:73:95:fe:bb:a8:e7:73:fe:
                    ec:63:2f:57:4f:cb:13:1f:d3:c5:f5:68:02:49:52:
                    7c:ea:d7:2f:37:02:bb:34:df:15:c7:e1:d3:a8:07:
                    48:c7:f7:e2:0b:ea:8a:23:b7:74:d0:70:16:19:b4:
                    0c:f5:75:c4:a8:42:aa:97:0d:a3:83:ed:c2:1a:15:
                    8a:ad:f3:51:a0:6c:0c:91:e6:10:da:97:e8:5b:4f:
                    1a:58:21:24:df:69:ca:bf:c3:92:58:96:95:41:ea:
                    12:43:34:af:cb:71:20:83:2f:7b:fa:76:07:dc:3d:
                    0f:2a:f1:fc:06:83:b5:f3:27:5b:d9:0b:9e:64:32:
                    9c:3b:ef:df:c7:54:20:29:47:25:1b:a0:68:f4:f8:
                    90:91:a8:8b:cc:9e:26:e2:b6:a1:8b:03:93:f0:9f:
                    8d:7d:53:59:48:4e:21:dc:e9:b7:16:38:5a:99:95:
                    69:5d:b0:83:9e:f6:03:fd:49:8e:f1:0a:f5:1f:93:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:78:9C:29:26:A2:CF:B9:DA:6F:AE:6D:0E:0A:7D:98:28:6B:CF
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:92:74:24:74:c5:a7:97:75:58:c1:cd:95:e1:30:ec:23:45:
         d9:22:cf:01:93:6e:6f:0d:bb:29:0b:d9:3f:e2:c2:24:35:04:
         c7:f1:aa:23:8a:ba:8f:63:75:59:e0:0f:35:16:6b:7c:82:4a:
         47:7b:22:4a:0e:e8:8a:34:23:6d:d7:82:54:b9:64:c4:b3:32:
         5b:56:33:09:47:36:e7:21:0d:b1:45:33:a2:c0:de:32:66:f0:
         19:5b:61:83:2e:6e:24:59:7f:b7:7c:4e:29:36:bd:08:b5:4c:
         fe:a0:d8:40:7e:57:69:50:16:6d:a8:c1:64:02:9e:df:99:39:
         13:d2:2a:6e:6d:97:97:38:ff:84:6c:a5:8e:42:56:29:da:fd:
         53:59:7e:1e:96:9c:f1:96:6a:15:23:9d:4b:b7:d3:a0:57:9a:
         ca:21:d5:5e:36:b1:cb:99:a2:aa:d6:db:51:8c:a7:e2:11:7d:
         08:e2:00:e1:a7:6f:7d:70:af:be:65:3c:f9:44:88:37:67:8a:
         33:96:bc:7e:d3:eb:23:26:0e:22:30:b5:8c:aa:cf:4f:15:2b:
         6f:51:58:9e:22:d9:c0:8a:7d:a7:4b:32:e1:15:8d:13:04:1a:
         aa:69:7a:21:a1:58:49:2e:48:86:1e:2c:07:a2:04:64:ef:21:
         bd:05:90:ad
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZhKl94Kw4ffF3k2qXO69j0onYYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYzOUJGRDhCQkE4RUMzQTE0REM4NUNENEFDMzgxRTM2
QTI5RjExMjAeFw0yNTExMTExNTM5MDlaFw0yNjExMTAxNTQ0MDlaMDMxMTAvBgNV
BAMTKDY1Q0I3ODlDMjkyNkEyQ0ZCOURBNkZBRTZEMEUwQTdEOTgyODZCQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPts2+k59rJ1xzMH5GorYKGJNt
v5uFTUGHUtd5K6J/auVrcc62uHAqyoTDRS1X6EJPpoH8P4NLRzfH+DRqqRPx8N1z
lf67qOdz/uxjL1dPyxMf08X1aAJJUnzq1y83Ars03xXH4dOoB0jH9+IL6oojt3TQ
cBYZtAz1dcSoQqqXDaOD7cIaFYqt81GgbAyR5hDal+hbTxpYISTfacq/w5JYlpVB
6hJDNK/LcSCDL3v6dgfcPQ8q8fwGg7XzJ1vZC55kMpw779/HVCApRyUboGj0+JCR
qIvMnibitqGLA5Pwn419U1lITiHc6bcWOFqZlWldsIOe9gP9SY7xCvUfk4y/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZct4nCkmos+52m+ubQ4KfZgoa88wHwYDVR0j
BBgwFoAUTzm/2Luo7DoU3IXNSsOB42op8RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMi80RjM5QkZEOEJCQThFQzNBMTREQzg1Q0Q0QUMzODFFMzZBMjlGMTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMzlCRkQ4QkJBOEVDM0Ex
NERDODVDRDRBQzM4MUUzNkEyOUYxMTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzIv
MzIzMDMxMmUzODM3MmUzMTM0MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjMy
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyVePMA0GCSqGSIb3DQEBCwUAA4IBAQCYknQkdMWn
l3VYwc2V4TDsI0XZIs8Bk25vDbspC9k/4sIkNQTH8aojirqPY3VZ4A81Fmt8gkpH
eyJKDuiKNCNt14JUuWTEszJbVjMJRzbnIQ2xRTOiwN4yZvAZW2GDLm4kWX+3fE4p
Nr0ItUz+oNhAfldpUBZtqMFkAp7fmTkT0ipubZeXOP+EbKWOQlYp2v1TWX4elpzx
lmoVI51Lt9OgV5rKIdVeNrHLmaKq1ttRjKfiEX0I4gDhp299cK++ZTz5RIg3Z4oz
lrx+0+sjJg4iMLWMqs9PFStvUVieItnAin2nSzLhFY0TBBqqaXohoVhJLkiGHiwH
ogRk7yG9BZCt
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:09 2025 by rpki-client