This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa
File:                     3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa (raw, json)
Hash identifier:          zLsw5tliyfOoApBzm2VelSfOaFw5XN+l95lJoZut1ak=
Subject key identifier:   9C:C3:B5:4D:54:99:B2:F2:25:CE:50:9E:87:7D:2B:9B:D5:44:EA:EB
Certificate issuer:       /CN=6649D462B62A954091EA975AB9273AD49F359F63
Certificate serial:       0513C2AEDD0044885DB4AB22272A8B740697476E
Authority key identifier: 66:49:D4:62:B6:2A:95:40:91:EA:97:5A:B9:27:3A:D4:9F:35:9F:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa
Signing time:             Thu 04 Dec 2025 13:07:16 +0000
ROA not before:           Thu 04 Dec 2025 13:02:16 +0000
ROA not after:            Thu 03 Dec 2026 13:07:16 +0000
asID:                     268605
IP address blocks:        190.111.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:c2:ae:dd:00:44:88:5d:b4:ab:22:27:2a:8b:74:06:97:47:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6649D462B62A954091EA975AB9273AD49F359F63
        Validity
            Not Before: Dec  4 13:02:16 2025 GMT
            Not After : Dec  3 13:07:16 2026 GMT
        Subject: CN=9CC3B54D5499B2F225CE509E877D2B9BD544EAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:2f:45:c0:6d:0d:bd:a2:6a:79:79:05:98:
                    b2:12:25:ed:f2:5b:b6:5e:e0:d7:ef:6a:60:e9:af:
                    e0:87:78:0d:09:5f:2e:1b:42:f7:08:a3:76:a9:02:
                    1e:9b:95:90:67:00:68:6f:1d:19:94:74:75:34:4e:
                    6d:c7:cd:ee:ff:41:bb:42:89:54:1f:04:2b:e8:8f:
                    85:fa:c0:54:d2:28:38:f2:bb:94:87:ed:ec:9c:b8:
                    3f:8a:d9:d8:05:aa:83:7a:2e:c4:3e:08:06:2f:4b:
                    62:10:2c:98:60:95:bc:9d:1c:ec:21:a9:c6:61:df:
                    2a:12:95:f5:10:8d:6f:64:90:c4:3c:a4:8e:0a:4e:
                    73:30:33:d8:51:7b:03:63:e8:1e:fa:51:86:ae:e8:
                    cb:d7:e9:82:50:58:25:9d:5b:a4:97:d4:35:c6:b1:
                    b2:d6:36:b3:e3:ab:db:9a:02:d7:3f:05:23:3d:29:
                    37:97:23:8a:99:7b:5a:00:96:8b:76:0f:30:63:29:
                    83:33:19:d4:20:35:92:3f:8a:19:1b:5c:ee:1b:08:
                    32:4e:8b:be:db:09:e7:79:0d:dc:54:08:34:1e:5f:
                    01:bc:32:b7:f2:8a:71:8c:16:90:2d:dc:5e:87:71:
                    b8:b0:ff:37:de:67:91:fd:19:13:d3:02:8c:6d:eb:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C3:B5:4D:54:99:B2:F2:25:CE:50:9E:87:7D:2B:9B:D5:44:EA:EB
            X509v3 Authority Key Identifier:
                keyid:66:49:D4:62:B6:2A:95:40:91:EA:97:5A:B9:27:3A:D4:9F:35:9F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:d9:13:25:88:e3:fd:90:ea:27:3a:db:85:8c:15:dd:98:
         77:9a:8d:cc:5a:5d:92:3b:af:10:78:70:5c:df:d0:94:9d:01:
         98:0c:ba:85:7b:7c:d0:fd:18:99:cf:69:8f:01:ac:6d:96:1b:
         f5:68:00:1c:95:08:93:61:11:9c:af:96:73:cb:bb:65:29:03:
         85:10:ab:05:49:ed:74:e8:d7:d2:bf:99:87:d0:2e:a3:1a:97:
         76:82:6f:71:ea:ee:89:b1:07:73:1a:08:6d:b5:15:51:95:17:
         67:63:8a:ae:96:70:ed:31:11:2e:d8:ca:96:64:f2:00:cf:ca:
         3f:fe:dc:c3:02:03:8d:ba:95:43:58:af:cb:98:7d:af:59:3b:
         e4:77:70:25:49:b1:c4:47:14:81:fc:b1:6d:2c:4c:9b:1b:0d:
         f9:d7:43:17:d3:e8:96:a3:48:71:b4:20:08:af:50:cc:cf:e2:
         19:8e:72:a2:3d:7b:43:bb:9a:6e:44:56:f9:b4:cd:ce:e6:7d:
         56:0d:70:5d:7a:33:5f:7a:4a:35:59:50:b3:b9:fd:f1:20:40:
         e5:22:eb:c5:82:c1:4d:a2:22:33:31:e4:23:e4:17:69:01:e1:
         4f:7e:91:33:45:5d:59:fa:59:00:16:a1:81:5e:34:f9:b4:88:
         fc:8e:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:54 2025 by rpki-client