This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235302e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3235302e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          BdOeyMqguVY1+rz5NZYpUXvDJIquZ+23bVsENeEOz94=
Subject key identifier:   EB:C3:33:93:1A:05:F8:FB:1B:3A:61:D5:9F:76:F5:C1:C9:D1:B7:2C
Certificate issuer:       /CN=4DD1FA4F247D9EAD88019534CB0703384B6A4DE8
Certificate serial:       07A2720CBCB66D4E23B7BAC6EE561C4A0063C314
Authority key identifier: 4D:D1:FA:4F:24:7D:9E:AD:88:01:95:34:CB:07:03:38:4B:6A:4D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235302e302f32342d3234203d3e20323633333032.roa
Signing time:             Tue 11 Nov 2025 22:36:34 +0000
ROA not before:           Tue 11 Nov 2025 22:31:34 +0000
ROA not after:            Tue 10 Nov 2026 22:36:34 +0000
asID:                     263302
IP address blocks:        191.6.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 19:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a2:72:0c:bc:b6:6d:4e:23:b7:ba:c6:ee:56:1c:4a:00:63:c3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD1FA4F247D9EAD88019534CB0703384B6A4DE8
        Validity
            Not Before: Nov 11 22:31:34 2025 GMT
            Not After : Nov 10 22:36:34 2026 GMT
        Subject: CN=EBC333931A05F8FB1B3A61D59F76F5C1C9D1B72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:60:d1:17:2f:9c:77:8d:48:7e:f5:da:e4:
                    67:fd:d3:dd:41:30:a4:b4:56:f3:29:a3:c7:ef:5a:
                    01:17:1e:3c:c1:8e:dd:11:d2:b7:6e:92:6b:6f:c4:
                    2b:5c:57:bd:fa:33:5c:cc:3a:66:12:73:f3:58:51:
                    ba:6c:22:d1:78:1a:f8:a6:73:2f:cb:3d:bb:a8:f3:
                    3a:1e:9e:81:8c:d4:3e:e2:be:85:f2:e9:49:5f:e7:
                    a5:40:2d:a1:0d:82:5b:9f:60:5d:ab:d9:95:a6:5c:
                    58:53:57:aa:b3:20:e0:95:e6:31:32:72:a7:ab:a2:
                    32:5f:14:b9:33:ee:24:22:77:88:bc:41:d6:fc:a0:
                    3e:62:fb:2f:85:2c:c4:cc:d3:9d:1b:4b:51:ee:59:
                    1f:25:4a:f0:7f:fe:5c:7d:e3:ad:5f:ce:ab:81:98:
                    e6:db:df:5a:9c:2e:ba:b7:f7:95:7c:ff:6a:35:96:
                    fe:a3:26:a0:ac:d1:d6:f2:44:1c:c1:10:a1:61:13:
                    ba:a0:8d:21:c4:8d:4c:7b:94:ec:6e:dc:ba:f5:d9:
                    46:94:97:e2:9b:c8:e5:45:fc:b6:ef:6b:19:9a:ca:
                    83:33:da:d8:ac:a8:62:dc:95:6b:18:f3:7a:d9:d7:
                    01:93:93:2e:8b:3c:a1:3f:73:94:5b:8d:c5:2d:98:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C3:33:93:1A:05:F8:FB:1B:3A:61:D5:9F:76:F5:C1:C9:D1:B7:2C
            X509v3 Authority Key Identifier:
                keyid:4D:D1:FA:4F:24:7D:9E:AD:88:01:95:34:CB:07:03:38:4B:6A:4D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235302e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:3a:f3:94:85:68:f5:7e:41:97:4d:c8:44:02:d9:0e:b7:
         2b:01:2d:5a:53:6a:79:5e:b3:fc:4c:13:27:5a:f9:e7:7d:01:
         a4:37:fe:91:99:6a:fd:05:38:f8:23:b8:bc:72:60:a0:82:90:
         3b:f6:a9:f4:7a:03:a3:6a:28:3a:cb:66:14:02:e5:94:10:70:
         ad:03:52:35:31:7e:d7:21:22:9e:0c:49:f2:d4:41:99:36:12:
         9a:33:d8:f2:d4:20:ed:35:49:c5:11:e7:36:fa:c2:8f:05:ef:
         be:20:c8:1b:fa:c5:7a:e9:8b:02:b6:7e:23:0a:94:42:07:7c:
         e4:65:4d:53:6e:6f:53:13:80:b3:59:86:c6:dd:c7:7d:31:52:
         a9:f8:d0:b4:11:47:b6:01:4f:3e:f0:fb:a8:a1:04:66:8f:3f:
         d0:70:2c:4b:86:26:6a:4f:11:fd:16:a4:97:ee:ea:d9:6d:0d:
         0c:70:f9:a5:25:40:6e:99:f3:e4:40:fe:9b:2b:90:6e:be:99:
         da:ef:37:09:ee:b5:54:08:0e:00:2c:51:86:a6:f0:82:bf:f4:
         64:73:fe:6f:f6:e3:d8:f2:38:50:71:b0:cf:fb:1f:0b:bd:04:
         30:42:6f:fc:08:64:59:a6:be:ff:05:82:60:d4:e1:fd:97:9f:
         16:74:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:38 2025 by rpki-client