This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35322e302f32322d3232203d3e20323636323033.roa
File:                     3139322e3134302e35322e302f32322d3232203d3e20323636323033.roa (raw, json)
Hash identifier:          ACfHFTe9coqZAggdcuYMLlB9e7/4Snseb2vZ/j4ztf8=
Subject key identifier:   CC:73:50:29:A0:E3:EA:6B:2D:EA:D1:80:4D:03:18:BA:31:78:4D:16
Certificate issuer:       /CN=7435E25F550512B05B3A1947A023020643033726
Certificate serial:       766B3047A02873AE1ADCC4416C0E4477C229EF85
Authority key identifier: 74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35322e302f32322d3232203d3e20323636323033.roa
Signing time:             Tue 16 Dec 2025 15:37:37 +0000
ROA not before:           Tue 16 Dec 2025 15:32:37 +0000
ROA not after:            Tue 15 Dec 2026 15:37:37 +0000
asID:                     266203
IP address blocks:        192.140.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.crl
                          rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 07:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6b:30:47:a0:28:73:ae:1a:dc:c4:41:6c:0e:44:77:c2:29:ef:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7435E25F550512B05B3A1947A023020643033726
        Validity
            Not Before: Dec 16 15:32:37 2025 GMT
            Not After : Dec 15 15:37:37 2026 GMT
        Subject: CN=CC735029A0E3EA6B2DEAD1804D0318BA31784D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:40:1f:0a:3b:79:eb:fe:b3:2b:45:7e:61:
                    2c:71:8f:32:a1:be:d5:cb:4e:d0:48:5c:b1:af:77:
                    82:15:bb:13:06:9b:c4:f6:ea:f1:a6:fa:a2:59:03:
                    6b:82:46:e9:15:27:74:e3:f3:a1:b1:fc:e4:09:fe:
                    27:d5:07:b9:60:b3:e5:c7:8d:7b:70:37:de:b0:31:
                    d3:34:84:62:51:11:4c:ba:9f:72:4a:68:30:ae:33:
                    93:e1:6d:a1:2a:89:80:ed:98:0f:5f:e7:e3:ea:54:
                    5c:d2:ff:55:99:c4:d9:4d:6c:77:e3:4b:c3:d4:f5:
                    d3:cb:ca:66:75:27:e4:12:2b:90:8d:99:3b:bd:6c:
                    98:c9:32:0c:bd:52:67:32:36:92:52:b4:ba:b9:5c:
                    29:a9:68:45:e1:5f:f8:14:3c:c5:1d:ab:84:94:84:
                    b7:d3:c2:c0:c6:7a:ec:49:25:e2:f7:14:93:44:f2:
                    7c:02:94:40:44:2d:26:fd:01:c1:6a:01:86:84:43:
                    36:4a:bc:0f:11:a6:3d:65:84:67:2a:a9:f7:e9:b1:
                    4f:fc:f0:ca:25:cb:27:b2:dc:21:7c:7b:9a:6c:66:
                    71:d2:3c:db:ca:07:d1:81:fa:c4:b8:37:4d:2c:ed:
                    36:d6:d4:78:33:51:b2:bb:da:2e:be:c8:fe:17:a1:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:50:29:A0:E3:EA:6B:2D:EA:D1:80:4D:03:18:BA:31:78:4D:16
            X509v3 Authority Key Identifier:
                keyid:74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35322e302f32322d3232203d3e20323636323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:7b:b1:20:bb:d9:8a:a8:d7:a7:ec:04:e3:75:e8:fa:c8:9c:
         7d:8c:df:bd:e7:86:25:23:72:45:ab:9a:ba:46:15:d3:40:3d:
         ca:15:33:37:d8:6d:0d:28:c0:ef:f4:af:e1:f7:7d:54:b4:70:
         39:ae:bf:c5:44:5c:d0:b1:81:08:a1:2d:a4:f0:61:0a:b9:80:
         19:14:e8:f7:db:c2:ce:88:d5:24:d4:d5:63:da:58:82:fc:de:
         e5:b2:1b:52:8c:10:7a:27:1d:8f:30:54:f6:0f:26:a5:68:c3:
         3b:98:c6:83:47:bc:7a:c8:19:ad:62:90:ae:92:b9:a2:fc:db:
         7e:d1:e7:3a:8e:34:ea:95:eb:b9:6e:86:0c:be:a0:ba:06:7b:
         3a:c1:49:0e:ba:5c:cb:c8:83:bc:75:79:ff:d8:e2:7c:50:ad:
         26:02:8b:b5:00:7d:e5:3c:f2:0a:d4:1b:5e:fb:2a:6f:a4:96:
         e8:5b:b1:3f:22:6e:44:ed:9b:a7:4e:27:e2:aa:5b:4c:b3:17:
         32:23:f5:fe:d9:80:e7:24:46:41:f1:49:53:69:1f:92:21:bf:
         28:d6:22:d9:03:aa:5d:57:94:63:69:25:b4:63:73:44:2c:8a:
         98:f9:01:66:67:52:44:02:a2:0d:16:22:5b:2f:73:05:d3:1a:
         50:e5:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:03:16 2025 by rpki-client