This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35332e302f32342d3234203d3e20323636323033.roa
File:                     3139322e3134302e35332e302f32342d3234203d3e20323636323033.roa (raw, json)
Hash identifier:          C312Fo7T7wWp1P8Q5Sb+Hs3S88I0JeKs0shgVYNxQjA=
Subject key identifier:   0D:6B:FC:8A:F2:4C:1E:55:75:42:6F:3D:36:60:99:4C:45:AB:18:61
Certificate issuer:       /CN=7435E25F550512B05B3A1947A023020643033726
Certificate serial:       5C30079F11FB40EF9DEC46674B733248106EE0C7
Authority key identifier: 74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35332e302f32342d3234203d3e20323636323033.roa
Signing time:             Tue 16 Dec 2025 15:37:52 +0000
ROA not before:           Tue 16 Dec 2025 15:32:52 +0000
ROA not after:            Tue 15 Dec 2026 15:37:52 +0000
asID:                     266203
IP address blocks:        192.140.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.crl
                          rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 07:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:30:07:9f:11:fb:40:ef:9d:ec:46:67:4b:73:32:48:10:6e:e0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7435E25F550512B05B3A1947A023020643033726
        Validity
            Not Before: Dec 16 15:32:52 2025 GMT
            Not After : Dec 15 15:37:52 2026 GMT
        Subject: CN=0D6BFC8AF24C1E5575426F3D3660994C45AB1861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:16:a2:15:a5:fb:8b:cb:c7:46:30:ea:df:
                    84:19:dd:d3:d4:6c:67:5b:87:38:46:a1:50:1b:d7:
                    7e:e1:c5:1e:f1:de:71:32:a0:64:32:2e:c2:22:55:
                    7f:63:e0:87:07:47:bf:6e:6a:c6:01:ff:ea:d7:1f:
                    62:98:46:8e:08:bb:e8:64:a6:21:5c:de:1e:0f:b0:
                    b4:cb:49:10:ca:41:e3:8f:22:79:b7:d1:d5:02:55:
                    3c:1e:1a:f0:97:3f:69:f9:2b:e6:fb:9a:ed:63:b6:
                    e9:04:37:bd:a0:19:15:27:84:44:4e:a4:75:e7:da:
                    cc:b5:de:25:99:b3:c0:f4:1b:40:89:8c:69:16:21:
                    9c:9b:9d:43:7b:26:b9:fa:df:55:f5:62:a4:a6:4f:
                    ec:3c:00:53:49:9b:14:43:43:fe:b3:22:38:69:3a:
                    2b:de:bb:2f:a1:0c:7d:56:01:13:88:ef:5c:23:48:
                    09:a9:b7:0c:3e:c0:12:b5:14:94:81:6e:5e:9f:2b:
                    75:bf:ec:a1:b6:1d:06:e5:af:7f:4d:8c:29:a1:da:
                    a4:92:77:e5:a1:ef:2f:aa:35:64:13:c1:28:a5:60:
                    42:2d:32:be:47:da:72:ca:01:5a:9a:17:f4:22:24:
                    d3:d7:e6:23:10:3a:fa:cd:69:16:14:f9:3d:45:47:
                    e5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:FC:8A:F2:4C:1E:55:75:42:6F:3D:36:60:99:4C:45:AB:18:61
            X509v3 Authority Key Identifier:
                keyid:74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35332e302f32342d3234203d3e20323636323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c3:36:b4:c1:e6:4d:6f:2f:64:79:3a:fa:be:67:57:00:68:
         c4:4e:ef:54:6e:54:cf:45:00:75:fb:4f:e3:47:c2:3f:bb:bf:
         25:9b:56:bd:fb:73:d3:c9:41:b8:1b:b9:8f:d1:58:a9:aa:ba:
         0f:b2:28:a4:8a:2f:1a:6c:47:ed:1c:4c:78:01:7b:1f:c2:ab:
         f7:26:c6:05:f1:7d:fd:43:db:1c:21:4f:7b:ea:95:70:63:13:
         20:ec:8b:25:ba:81:a5:59:f9:38:64:67:b7:bd:bb:cf:70:d4:
         67:07:af:0a:81:21:bc:5d:68:d2:01:58:64:94:95:8c:2e:eb:
         b2:27:13:53:88:39:af:7c:90:4c:71:15:e4:46:63:5e:e1:33:
         2e:ad:42:de:53:39:98:89:1e:9e:85:7e:64:38:05:45:88:c8:
         4d:39:e8:38:e9:12:f4:b1:28:a0:8b:d4:81:32:47:02:40:e6:
         34:fa:06:bc:ee:14:67:33:3d:f3:20:a2:ff:44:58:f5:95:e3:
         8a:02:78:40:93:a0:68:c6:32:f4:a6:fa:11:b8:2e:18:cf:59:
         c6:88:9e:79:ca:33:67:b4:2d:df:b7:ed:57:85:31:e9:90:72:
         a7:54:72:39:73:ed:dd:de:3d:56:49:63:04:a9:63:ca:51:0d:
         4a:a8:66:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXDAHnxH7QO+d7EZnS3MySBBu4McwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQzNUUyNUY1NTA1MTJCMDVCM0ExOTQ3QTAyMzAyMDY0
MzAzMzcyNjAeFw0yNTEyMTYxNTMyNTJaFw0yNjEyMTUxNTM3NTJaMDMxMTAvBgNV
BAMTKDBENkJGQzhBRjI0QzFFNTU3NTQyNkYzRDM2NjA5OTRDNDVBQjE4NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSRaiFaX7i8vHRjDq34QZ3dPU
bGdbhzhGoVAb137hxR7x3nEyoGQyLsIiVX9j4IcHR79uasYB/+rXH2KYRo4Iu+hk
piFc3h4PsLTLSRDKQeOPInm30dUCVTweGvCXP2n5K+b7mu1jtukEN72gGRUnhERO
pHXn2sy13iWZs8D0G0CJjGkWIZybnUN7Jrn631X1YqSmT+w8AFNJmxRDQ/6zIjhp
Oiveuy+hDH1WAROI71wjSAmptww+wBK1FJSBbl6fK3W/7KG2HQblr39NjCmh2qSS
d+Wh7y+qNWQTwSilYEItMr5H2nLKAVqaF/QiJNPX5iMQOvrNaRYU+T1FR+UvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDWv8ivJMHlV1Qm89NmCZTEWrGGEwHwYDVR0j
BBgwFoAUdDXiX1UFErBbOhlHoCMCBkMDNyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXYyNms4MThERTZNS1JYZFU4Z2dRdTVLVk1uakZnTlMybkFxbXl6aWdI
NEIvMC83NDM1RTI1RjU1MDUxMkIwNUIzQTE5NDdBMDIzMDIwNjQzMDMzNzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0MzVFMjVGNTUwNTEyQjA1
QjNBMTk0N0EwMjMwMjA2NDMwMzM3MjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl2MjZrODE4REU2TUtSWGRVOGdnUXU1S1ZNbmpGZ05TMm5BcW15emlnSDRCLzAv
MzEzOTMyMmUzMTM0MzAyZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAjDUwDQYJKoZIhvcNAQELBQADggEBAFfDNrTB
5k1vL2R5Ovq+Z1cAaMRO71RuVM9FAHX7T+NHwj+7vyWbVr37c9PJQbgbuY/RWKmq
ug+yKKSKLxpsR+0cTHgBex/Cq/cmxgXxff1D2xwhT3vqlXBjEyDsiyW6gaVZ+Thk
Z7e9u89w1GcHrwqBIbxdaNIBWGSUlYwu67InE1OIOa98kExxFeRGY17hMy6tQt5T
OZiJHp6FfmQ4BUWIyE056DjpEvSxKKCL1IEyRwJA5jT6BrzuFGczPfMgov9EWPWV
44oCeECToGjGMvSm+hG4LhjPWcaInnnKM2e0Ld+37VeFMemQcqdUcjlz7d3ePVZJ
YwSpY8pRDUqoZpM=
-----END CERTIFICATE-----
Generated at Thu Dec 18 21:04:10 2025 by rpki-client