This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235322e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3235322e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          qgEa/xPKiN6m9qalZCQJOj8wfoBpebD9I24HdaOtH9I=
Subject key identifier:   22:CB:7A:0A:20:06:BE:A8:A9:73:6A:29:18:93:74:2C:90:99:68:27
Certificate issuer:       /CN=4DD1FA4F247D9EAD88019534CB0703384B6A4DE8
Certificate serial:       297E9F8769F2E4A7EBE759466A9E2B33994884F2
Authority key identifier: 4D:D1:FA:4F:24:7D:9E:AD:88:01:95:34:CB:07:03:38:4B:6A:4D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235322e302f32342d3234203d3e20323633333032.roa
Signing time:             Tue 11 Nov 2025 22:36:33 +0000
ROA not before:           Tue 11 Nov 2025 22:31:33 +0000
ROA not after:            Tue 10 Nov 2026 22:36:33 +0000
asID:                     263302
IP address blocks:        191.6.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7e:9f:87:69:f2:e4:a7:eb:e7:59:46:6a:9e:2b:33:99:48:84:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD1FA4F247D9EAD88019534CB0703384B6A4DE8
        Validity
            Not Before: Nov 11 22:31:33 2025 GMT
            Not After : Nov 10 22:36:33 2026 GMT
        Subject: CN=22CB7A0A2006BEA8A9736A291893742C90996827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:a0:68:e4:df:2a:81:78:c6:6f:6c:e1:8b:
                    09:c4:4a:be:51:9e:ca:ed:f4:68:50:c9:a2:f9:d6:
                    9c:e8:a7:55:bf:c4:21:cc:6e:bc:8b:74:76:55:9d:
                    04:78:94:31:89:7e:02:e0:6c:62:01:62:f1:2f:a3:
                    aa:00:eb:7b:01:5c:6e:2a:45:fc:1d:56:50:48:26:
                    e3:8b:45:f5:0e:42:7e:df:9f:4c:9b:8f:c0:d4:5a:
                    1e:0f:df:76:ef:38:16:90:93:dc:1a:e0:cc:ff:eb:
                    f5:18:d6:92:a7:ba:f2:7e:3b:8a:ad:e8:d6:23:be:
                    32:1c:0f:fe:38:a4:fc:54:0e:c3:8d:7b:46:af:fa:
                    6f:92:22:3c:cb:26:84:f7:c1:81:0d:46:d0:6f:86:
                    ab:e2:be:7b:e1:f4:44:46:e4:67:48:eb:73:b5:f3:
                    35:a4:d1:9b:54:1a:96:33:ad:b6:37:8f:8e:58:6a:
                    03:79:82:8a:ed:c3:72:0a:2a:28:51:fe:7c:cc:42:
                    3a:29:bb:e3:e0:0f:5b:6b:35:5c:95:83:e1:58:c4:
                    85:90:e4:ad:ad:c3:94:d4:b8:d8:8f:49:8b:fd:53:
                    f1:73:99:34:22:88:93:74:72:dd:2a:fa:01:bd:d7:
                    c9:23:21:36:ef:5b:02:94:bb:d0:f1:4c:3b:f6:b7:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CB:7A:0A:20:06:BE:A8:A9:73:6A:29:18:93:74:2C:90:99:68:27
            X509v3 Authority Key Identifier:
                keyid:4D:D1:FA:4F:24:7D:9E:AD:88:01:95:34:CB:07:03:38:4B:6A:4D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235322e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a1:86:c5:11:a9:57:5f:f5:c3:d6:54:d7:bd:cd:eb:3c:34:
         90:35:49:a8:1d:0f:8e:3f:d1:8f:9a:c4:e2:17:e8:6d:ce:42:
         03:96:4e:37:5b:9b:58:2f:63:75:fc:28:a0:e5:d8:e6:fa:cb:
         c8:59:fd:c3:ca:9c:fc:a9:33:5a:23:5a:bb:f5:6a:70:f3:d0:
         c5:2b:bd:35:d1:18:af:0a:8c:03:80:97:8b:b9:7f:a1:3c:9c:
         cd:36:14:80:bc:f6:8a:52:1b:26:ec:c8:d7:01:9f:09:a5:d7:
         08:40:c3:7c:87:05:ac:e6:45:8c:37:31:d2:d7:57:7b:9d:b6:
         eb:97:51:12:dd:d1:e9:29:c9:87:9f:e0:be:0e:f4:41:ba:ca:
         46:2f:fb:8e:d5:fe:9b:60:8c:de:77:96:c2:b3:24:c0:b8:8b:
         c2:fa:40:50:4d:e2:8b:d7:90:60:64:ec:76:89:9e:77:7c:ad:
         a0:c5:82:95:6f:9c:a4:18:54:ac:fc:d8:56:82:09:bd:47:f7:
         47:e3:e4:02:03:35:0d:05:c5:0a:c4:70:9e:e6:08:06:98:ac:
         50:4c:af:8c:33:c6:88:56:21:13:da:6d:0a:a7:5c:96:e0:23:
         21:1a:e1:5f:c7:f9:64:e4:73:23:b5:a0:ae:ff:a2:ae:47:aa:
         10:8a:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:10 2025 by rpki-client