This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35342e302f32332d3233203d3e20323636323033.roa
File:                     3139322e3134302e35342e302f32332d3233203d3e20323636323033.roa (raw, json)
Hash identifier:          oRKtoIIZ3kQXuwdguCECAEJ+o+Dok3wbikn7RYPhU0A=
Subject key identifier:   04:5B:60:F3:DD:32:03:07:50:F1:1F:6A:CA:FC:2D:10:9C:38:42:80
Certificate issuer:       /CN=7435E25F550512B05B3A1947A023020643033726
Certificate serial:       16131B13358B6D218BF8FE1E87CB780391996FDD
Authority key identifier: 74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35342e302f32332d3233203d3e20323636323033.roa
Signing time:             Tue 16 Dec 2025 15:37:55 +0000
ROA not before:           Tue 16 Dec 2025 15:32:55 +0000
ROA not after:            Tue 15 Dec 2026 15:37:55 +0000
asID:                     266203
IP address blocks:        192.140.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.crl
                          rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 07:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:13:1b:13:35:8b:6d:21:8b:f8:fe:1e:87:cb:78:03:91:99:6f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7435E25F550512B05B3A1947A023020643033726
        Validity
            Not Before: Dec 16 15:32:55 2025 GMT
            Not After : Dec 15 15:37:55 2026 GMT
        Subject: CN=045B60F3DD32030750F11F6ACAFC2D109C384280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:50:a8:58:06:4b:95:a5:90:a3:14:e7:ed:
                    b5:f8:f3:49:2b:23:93:76:1b:57:aa:0a:5a:52:78:
                    04:79:f3:3b:89:4e:c2:22:6f:9f:22:84:da:df:d6:
                    4f:ee:dc:57:b6:2c:49:ed:35:7b:ea:57:ea:4b:ae:
                    0d:d1:b8:8c:ba:5d:19:bb:ad:c3:d4:02:4f:39:65:
                    e6:4c:20:9b:d9:85:83:42:ed:d1:86:bc:61:2f:29:
                    60:f1:e7:fc:47:51:11:2c:9a:32:ba:ac:1f:e8:47:
                    d0:be:16:5a:82:2c:00:83:42:5f:ee:11:65:08:f0:
                    c0:43:50:b1:07:6a:53:c7:0d:a2:98:de:3b:8c:42:
                    3f:07:99:73:39:48:33:75:75:a5:64:5b:05:62:89:
                    42:ff:c0:3a:3c:66:46:09:47:89:a8:44:34:27:5d:
                    4b:1b:71:18:af:21:31:01:61:a2:17:15:38:55:3d:
                    2a:6f:1e:9e:48:3b:2d:f3:1b:b8:18:57:98:73:55:
                    07:fc:22:f2:a1:0d:32:67:10:ac:98:20:5b:04:b4:
                    04:b9:91:d5:c0:da:de:6d:bd:3b:48:0f:76:44:f3:
                    69:4d:d9:36:2d:2b:29:30:00:00:7c:a7:67:ff:c7:
                    6a:c7:23:b9:88:9b:0c:32:71:ee:c6:ac:37:7a:8a:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:60:F3:DD:32:03:07:50:F1:1F:6A:CA:FC:2D:10:9C:38:42:80
            X509v3 Authority Key Identifier:
                keyid:74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/3139322e3134302e35342e302f32332d3233203d3e20323636323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:61:a1:84:25:10:70:f3:2d:9d:53:be:3b:2d:10:8b:05:a0:
         35:2c:77:2a:c3:e8:da:65:f8:45:ea:be:57:6a:e2:26:dd:8c:
         d1:74:b5:11:a9:4a:9b:b4:a3:40:55:f7:8e:81:53:71:97:e0:
         16:30:30:db:a2:82:8e:8d:49:8e:d9:d7:a6:c8:bf:87:53:0f:
         3d:75:9e:66:6f:68:27:af:e9:cc:82:98:40:3b:b2:e2:1d:f7:
         b2:70:10:ca:ee:ad:26:c8:1b:5d:42:2b:9e:81:dd:31:7f:6b:
         3b:e0:73:70:30:af:06:fd:1a:16:61:fb:a0:19:ae:56:be:2d:
         e9:dd:ec:6d:e4:40:8e:7c:81:bc:c3:69:8b:6c:30:9b:9e:94:
         f0:f0:db:20:4d:f8:9d:f5:93:ad:8e:12:63:07:3e:79:5d:c0:
         69:ac:f8:0c:4d:01:5d:bf:75:0d:76:54:d7:cb:f1:01:0b:0d:
         ca:1e:23:be:a3:83:ea:eb:49:92:9c:74:f6:dc:63:63:f3:4c:
         c7:c8:c6:dd:05:d5:43:dc:ae:f0:c3:f7:6a:9c:38:df:f3:e8:
         a2:62:71:ce:26:ee:c2:39:ce:03:ed:70:d1:69:26:b0:dc:e2:
         fd:b7:c1:d0:eb:06:40:6c:84:db:9c:88:0d:bc:b2:24:73:67:
         04:84:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:03:16 2025 by rpki-client