This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235352e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3235352e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          9Ujo6V18hro30vAQk84vd67iOm13IcXwnXU+0tAAxTg=
Subject key identifier:   EC:AE:B1:10:E7:08:4C:57:D9:D3:F9:33:7A:84:23:0D:9E:B7:60:4F
Certificate issuer:       /CN=4DD1FA4F247D9EAD88019534CB0703384B6A4DE8
Certificate serial:       5B5D0D7539E3868A3AB5BD38C41A0B20758C879C
Authority key identifier: 4D:D1:FA:4F:24:7D:9E:AD:88:01:95:34:CB:07:03:38:4B:6A:4D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235352e302f32342d3234203d3e20323633333032.roa
Signing time:             Tue 11 Nov 2025 22:36:33 +0000
ROA not before:           Tue 11 Nov 2025 22:31:33 +0000
ROA not after:            Tue 10 Nov 2026 22:36:33 +0000
asID:                     263302
IP address blocks:        191.6.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5d:0d:75:39:e3:86:8a:3a:b5:bd:38:c4:1a:0b:20:75:8c:87:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD1FA4F247D9EAD88019534CB0703384B6A4DE8
        Validity
            Not Before: Nov 11 22:31:33 2025 GMT
            Not After : Nov 10 22:36:33 2026 GMT
        Subject: CN=ECAEB110E7084C57D9D3F9337A84230D9EB7604F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:ee:f7:82:6b:ea:a7:0d:b2:0b:13:a1:6b:
                    3c:c2:93:6d:5a:07:94:a0:7c:32:0a:1b:2f:1a:f0:
                    ea:f5:86:23:a1:22:0e:4c:f2:e7:ba:79:2b:32:ec:
                    e0:51:f0:16:a5:05:48:c1:5b:d2:ce:bb:36:11:8b:
                    62:b1:21:b7:ca:59:06:ef:e1:a3:aa:b4:2a:2f:39:
                    1e:d1:cc:02:b4:98:50:1a:43:c7:5e:74:49:b1:2a:
                    17:5e:70:82:a8:6e:76:ac:d6:f6:11:0b:33:d5:fa:
                    f3:69:84:75:55:80:b2:27:71:54:93:40:8d:85:5f:
                    fb:03:0a:b6:18:e5:75:23:2a:e4:4d:27:f5:8e:b6:
                    b1:d2:dd:d4:22:5e:75:3d:77:ab:45:89:60:b4:c8:
                    93:0e:54:d2:41:ee:45:bc:04:8c:14:d3:30:68:83:
                    a3:f4:9d:7f:0e:99:6a:ad:49:e6:e6:03:b6:3d:bf:
                    8e:eb:13:ad:ec:f0:55:d6:db:d7:85:30:a2:87:99:
                    f0:49:74:f4:80:82:f7:2a:1f:91:4c:f2:ff:ee:54:
                    6a:f4:7e:f8:0a:a9:2b:63:be:7d:21:4b:73:3d:c6:
                    34:28:0e:e9:36:3f:6b:5d:53:58:14:65:75:f4:56:
                    72:da:1f:72:92:4b:1c:65:e4:64:fb:ed:aa:ba:37:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:B1:10:E7:08:4C:57:D9:D3:F9:33:7A:84:23:0D:9E:B7:60:4F
            X509v3 Authority Key Identifier:
                keyid:4D:D1:FA:4F:24:7D:9E:AD:88:01:95:34:CB:07:03:38:4B:6A:4D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD1FA4F247D9EAD88019534CB0703384B6A4DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235352e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:07:77:7f:e6:a0:6f:86:7d:b2:a1:b0:66:89:5a:16:20:
         14:65:18:f7:cb:11:14:ef:91:0d:86:76:55:38:a7:d7:68:ca:
         55:a0:7b:8b:aa:5a:91:be:85:bd:6b:f3:9e:2d:fe:e3:d8:f8:
         20:b5:f3:a9:67:2e:71:09:5e:00:a3:78:06:c6:2d:3d:32:2b:
         9d:c9:a1:9b:2e:09:3c:6d:cd:41:69:be:df:35:5b:f7:94:70:
         7c:14:38:61:4a:f2:10:f1:d7:49:0b:e6:ac:2c:b3:fa:eb:de:
         a9:0d:8f:6f:82:c6:f7:a7:79:d0:45:5b:91:77:75:09:72:3a:
         f4:86:c1:f4:e3:9e:ad:db:65:ce:65:a5:fa:b5:02:af:9f:27:
         99:77:59:68:ed:39:37:00:3d:95:ae:22:75:b4:8a:ce:5b:ad:
         2e:3e:9d:b8:43:55:9b:10:28:a9:24:ef:ae:0a:9a:3d:07:d1:
         46:7b:b6:a8:aa:58:2d:6e:96:c5:ec:21:a5:f9:ea:5b:85:2f:
         b0:61:e2:9d:e9:90:cb:15:bb:0a:93:56:98:a6:29:2f:e2:df:
         a0:c4:53:b1:2c:ea:a7:e7:60:e1:d1:8b:8c:aa:26:1e:bc:ee:
         02:7b:fd:f7:34:27:7f:88:a0:75:a8:d9:56:a2:46:a7:d3:cf:
         bc:bc:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:21:52 2025 by rpki-client