This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
File:                     3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa (raw, json)
Hash identifier:          r64odFzpRtrf4X7R9sTJLZdFxZyq8+grXGI06ce0tK8=
Subject key identifier:   F9:A8:00:EF:AF:59:A7:12:A6:B3:BD:A1:F6:67:9F:A8:46:35:58:E4
Certificate issuer:       /CN=26A6AC0E324AEAC3FC3940B6DAA4368880D3861C
Certificate serial:       7DA80084713BD4CB3EB5F2F14F8017E7B10A0DD1
Authority key identifier: 26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
Signing time:             Sat 22 Nov 2025 19:21:02 +0000
ROA not before:           Sat 22 Nov 2025 19:16:02 +0000
ROA not after:            Sat 21 Nov 2026 19:21:02 +0000
asID:                     266252
IP address blocks:        192.140.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.crl
                          rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a8:00:84:71:3b:d4:cb:3e:b5:f2:f1:4f:80:17:e7:b1:0a:0d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A6AC0E324AEAC3FC3940B6DAA4368880D3861C
        Validity
            Not Before: Nov 22 19:16:02 2025 GMT
            Not After : Nov 21 19:21:02 2026 GMT
        Subject: CN=F9A800EFAF59A712A6B3BDA1F6679FA8463558E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:0b:ee:34:57:5d:f0:c2:36:f9:54:4d:be:
                    de:71:18:65:86:c7:a1:6a:ec:62:e0:a7:cb:a2:16:
                    76:ac:41:a6:35:5e:d6:02:a0:ed:35:54:c6:fa:7e:
                    1c:2a:df:58:51:82:5e:ac:c2:47:e9:51:51:51:b1:
                    db:47:ac:76:f1:f4:29:73:79:b7:ed:7e:bb:65:0c:
                    0a:57:92:15:ec:26:2f:b1:d7:9a:f0:4b:9a:dd:9b:
                    2a:c0:ba:6a:da:00:98:d5:ce:5f:fd:a4:74:48:9f:
                    84:0f:a2:78:79:ee:53:4f:33:32:60:cd:38:a4:fc:
                    a6:9f:fa:2c:4f:86:77:71:6c:17:9d:58:90:30:ca:
                    17:6c:e7:3a:ac:5e:a5:29:aa:06:4d:c5:85:10:ca:
                    b4:da:83:48:7f:d7:d1:58:fd:f3:e1:57:e6:cf:95:
                    e7:ee:97:21:60:cf:f3:89:46:f1:15:af:0f:1b:f8:
                    dd:90:2c:40:a0:c1:cc:46:16:46:6f:e8:2c:06:23:
                    54:a1:68:b7:1e:13:b3:54:ef:9b:24:81:3c:75:32:
                    a9:f1:a3:51:0e:16:37:66:f5:ac:33:83:02:f4:22:
                    88:1e:82:84:a0:35:05:80:ca:4f:1e:81:2d:e7:e9:
                    1e:25:a5:91:93:77:83:60:34:90:ec:d1:83:ca:b2:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A8:00:EF:AF:59:A7:12:A6:B3:BD:A1:F6:67:9F:A8:46:35:58:E4
            X509v3 Authority Key Identifier:
                keyid:26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:d4:af:56:16:00:8c:8b:4b:0a:83:de:63:84:a0:2c:b9:
         02:90:c7:64:0a:45:b9:59:45:ff:5e:36:05:bf:af:56:28:09:
         52:4c:d3:db:b6:fe:37:a1:a0:7a:dd:75:d5:37:01:d6:22:23:
         11:33:d2:b4:f4:76:75:11:d0:12:bd:da:f5:4a:1a:cb:11:65:
         39:3b:28:50:79:70:9e:da:d6:a6:5b:24:dd:6d:81:98:96:e1:
         ee:b5:44:7d:f1:04:02:db:7b:06:35:75:07:f3:14:ba:5c:3e:
         5a:bd:d9:3b:6d:bb:89:4b:13:e4:80:6b:30:44:43:99:0f:b1:
         69:fb:26:a3:c1:7d:e2:0d:c0:18:34:99:e6:2e:00:68:0c:23:
         98:7b:c2:8c:ae:59:e9:2a:52:97:9c:72:1f:da:52:49:59:db:
         f8:0c:b5:e0:92:1e:7e:fc:ad:03:ee:3d:ea:f9:83:cf:4a:24:
         90:a8:5a:89:b4:17:c0:5d:4b:e0:5a:54:56:7c:3d:cf:7c:a0:
         a5:67:70:c2:f0:f8:03:38:ee:fe:16:43:46:82:e1:b0:6d:d5:
         d9:a5:10:51:a9:a8:1d:ad:1b:dd:4f:65:ce:8e:c8:41:e4:7e:
         ba:a3:57:ed:c1:f7:09:c9:59:09:4a:04:6e:06:30:55:ed:f8:
         aa:bd:dd:5f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfagAhHE71Ms+tfLxT4AX57EKDdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZBNkFDMEUzMjRBRUFDM0ZDMzk0MEI2REFBNDM2ODg4
MEQzODYxQzAeFw0yNTExMjIxOTE2MDJaFw0yNjExMjExOTIxMDJaMDMxMTAvBgNV
BAMTKEY5QTgwMEVGQUY1OUE3MTJBNkIzQkRBMUY2Njc5RkE4NDYzNTU4RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWQvuNFdd8MI2+VRNvt5xGGWG
x6Fq7GLgp8uiFnasQaY1XtYCoO01VMb6fhwq31hRgl6swkfpUVFRsdtHrHbx9Clz
ebftfrtlDApXkhXsJi+x15rwS5rdmyrAumraAJjVzl/9pHRIn4QPonh57lNPMzJg
zTik/Kaf+ixPhndxbBedWJAwyhds5zqsXqUpqgZNxYUQyrTag0h/19FY/fPhV+bP
lefulyFgz/OJRvEVrw8b+N2QLECgwcxGFkZv6CwGI1ShaLceE7NU75skgTx1Mqnx
o1EOFjdm9awzgwL0IogegoSgNQWAyk8egS3n6R4lpZGTd4NgNJDs0YPKst7tAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+agA769ZpxKms72h9mefqEY1WOQwHwYDVR0j
BBgwFoAUJqasDjJK6sP8OUC22qQ2iIDThhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2VxNHlMZEduN1RNMW54ekRLU3NVOUxnWXlId1dHMzVRSGJZd2NDOERB
TjcvMC8yNkE2QUMwRTMyNEFFQUMzRkMzOTQwQjZEQUE0MzY4ODgwRDM4NjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QTZBQzBFMzI0QUVBQzNG
QzM5NDBCNkRBQTQzNjg4ODBEMzg2MUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NlcTR5TGRHbjdUTTFueHpES1NzVTlMZ1l5SHdXRzM1UUhiWXdjQzhEQU43LzAv
MzEzOTMyMmUzMTM0MzAyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNjMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsCMeDANBgkqhkiG9w0BAQsFAAOCAQEAL3XU
r1YWAIyLSwqD3mOEoCy5ApDHZApFuVlF/142Bb+vVigJUkzT27b+N6Gget111TcB
1iIjETPStPR2dRHQEr3a9UoayxFlOTsoUHlwntrWplsk3W2BmJbh7rVEffEEAtt7
BjV1B/MUulw+Wr3ZO227iUsT5IBrMERDmQ+xafsmo8F94g3AGDSZ5i4AaAwjmHvC
jK5Z6SpSl5xyH9pSSVnb+Ay14JIefvytA+496vmDz0okkKhaibQXwF1L4FpUVnw9
z3ygpWdwwvD4Azju/hZDRoLhsG3V2aUQUamoHa0b3U9lzo7IQeR+uqNX7cH3CclZ
CUoEbgYwVe34qr3dXw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:59:54 2025 by rpki-client