This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa
File:                     3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa (raw, json)
Hash identifier:          0rYU/2lkDY1dc8lm+9sybmIz9OPP/z+dPQZmRqzzFto=
Subject key identifier:   CD:0F:31:89:07:38:44:62:45:E4:39:7F:61:B9:CD:38:A3:0A:2A:DB
Certificate issuer:       /CN=6649D462B62A954091EA975AB9273AD49F359F63
Certificate serial:       6BA27A820F5DBC1185C327E77CD1B496E151ACEE
Authority key identifier: 66:49:D4:62:B6:2A:95:40:91:EA:97:5A:B9:27:3A:D4:9F:35:9F:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa
Signing time:             Thu 04 Dec 2025 13:07:18 +0000
ROA not before:           Thu 04 Dec 2025 13:02:18 +0000
ROA not after:            Thu 03 Dec 2026 13:07:18 +0000
asID:                     268605
IP address blocks:        190.111.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 19:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a2:7a:82:0f:5d:bc:11:85:c3:27:e7:7c:d1:b4:96:e1:51:ac:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6649D462B62A954091EA975AB9273AD49F359F63
        Validity
            Not Before: Dec  4 13:02:18 2025 GMT
            Not After : Dec  3 13:07:18 2026 GMT
        Subject: CN=CD0F31890738446245E4397F61B9CD38A30A2ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:f0:7d:46:b7:48:7b:8b:2a:7c:1d:01:70:
                    9c:de:1a:20:32:a8:96:73:a4:c4:52:da:f5:02:bf:
                    fb:4c:eb:31:23:c7:72:d2:8f:7e:e9:46:36:71:27:
                    ef:34:5b:34:48:29:d6:6d:ef:3d:39:3e:7a:94:f2:
                    bc:02:82:4d:4d:4e:f4:da:28:85:5d:5b:dc:65:ef:
                    24:73:d8:bb:fb:cd:42:84:3a:b3:58:c0:5d:f4:cd:
                    9a:a6:af:2d:39:e7:41:f1:d9:f7:79:c0:bb:dd:8d:
                    7f:46:8e:59:b8:4b:86:b3:b9:48:fb:6f:26:e4:c9:
                    16:e1:b8:30:64:22:06:6a:3a:d7:6e:b2:3d:71:80:
                    26:91:d4:b9:8c:56:d2:df:71:24:c4:9d:39:f9:c6:
                    fc:ec:37:1f:77:c3:96:bd:51:ad:64:73:50:a8:a5:
                    bf:86:37:d3:16:ce:ea:8a:b5:85:35:3e:dd:51:fb:
                    22:65:62:da:ee:ad:81:3b:c6:39:45:b6:ea:a2:b3:
                    b3:6c:18:a8:bd:cb:91:ea:a6:2c:bb:a3:df:48:62:
                    f2:65:c6:aa:f2:76:24:d0:f8:73:4d:44:ef:f4:53:
                    c6:61:45:f4:a8:b5:23:04:2a:06:5a:3b:89:67:77:
                    33:8a:a6:6b:f9:ce:d0:be:9f:be:90:15:e7:85:cf:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:31:89:07:38:44:62:45:E4:39:7F:61:B9:CD:38:A3:0A:2A:DB
            X509v3 Authority Key Identifier:
                keyid:66:49:D4:62:B6:2A:95:40:91:EA:97:5A:B9:27:3A:D4:9F:35:9F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/6649D462B62A954091EA975AB9273AD49F359F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6649D462B62A954091EA975AB9273AD49F359F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b6:1c:0a:22:df:9e:ef:d8:9d:5f:c0:28:52:de:fe:d5:16:
         5a:13:4d:4a:33:37:1b:42:9f:c1:e5:0c:45:2b:16:b5:73:36:
         a1:ab:be:28:6a:89:62:44:ac:29:bc:2d:24:94:72:1e:8f:a3:
         aa:59:dd:28:08:ad:0c:c8:08:3c:1b:99:65:23:c0:f3:44:13:
         59:50:f0:73:b6:da:ce:b6:5b:9e:78:2e:e7:c4:0c:12:c5:6b:
         b5:6a:5f:ed:b7:13:53:eb:00:ff:c3:7f:ec:db:6d:7f:83:63:
         df:27:b5:46:31:b1:39:b1:60:32:ee:9e:8f:c3:6b:d8:30:ba:
         0e:d8:9e:9e:6e:9d:b5:0d:b8:bd:40:46:84:cd:0b:31:02:c2:
         95:8a:ed:c3:18:b6:87:63:6d:84:c6:c2:c7:44:9e:81:52:bc:
         95:7e:7b:ab:cc:e2:b8:9d:ad:87:c7:82:59:83:f3:c8:38:8e:
         68:cd:31:9b:43:3e:ea:59:17:8d:ac:00:77:6c:1b:5c:6e:48:
         e5:7a:de:96:5b:35:3c:cf:40:13:4d:46:1e:3f:b2:c2:53:df:
         cc:56:b6:4e:d3:b4:22:b5:0d:60:73:c1:e4:7a:76:4a:91:10:
         bd:1c:46:18:1b:ee:19:33:a1:36:e4:93:8a:3f:7b:16:d0:c4:
         93:d0:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:27 2025 by rpki-client