This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa
File:                     3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa (raw, json)
Hash identifier:          IFGIUXhHJtY/xhwBGc3iU9onvOWmAMQMPRPjhNZwdhA=
Subject key identifier:   3E:79:C2:8F:85:DD:1B:D0:B8:A4:6E:E1:52:F6:B2:00:CB:A2:16:1C
Certificate issuer:       /CN=A37116D5294840CDE4F645377395CD1D8833416A
Certificate serial:       690AD84E5982AF6484E3F74C59812AB1BED0A62D
Authority key identifier: A3:71:16:D5:29:48:40:CD:E4:F6:45:37:73:95:CD:1D:88:33:41:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A37116D5294840CDE4F645377395CD1D8833416A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa
Signing time:             Mon 01 Dec 2025 10:39:26 +0000
ROA not before:           Mon 01 Dec 2025 10:34:26 +0000
ROA not after:            Mon 30 Nov 2026 10:39:26 +0000
asID:                     262851
IP address blocks:        191.240.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/A37116D5294840CDE4F645377395CD1D8833416A.crl
                          rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/A37116D5294840CDE4F645377395CD1D8833416A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A37116D5294840CDE4F645377395CD1D8833416A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0a:d8:4e:59:82:af:64:84:e3:f7:4c:59:81:2a:b1:be:d0:a6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A37116D5294840CDE4F645377395CD1D8833416A
        Validity
            Not Before: Dec  1 10:34:26 2025 GMT
            Not After : Nov 30 10:39:26 2026 GMT
        Subject: CN=3E79C28F85DD1BD0B8A46EE152F6B200CBA2161C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:74:9c:16:7a:a3:f7:05:e3:0e:da:39:f6:
                    4a:b6:78:54:ed:ea:ed:c7:72:10:64:32:de:ca:e1:
                    52:cd:63:2e:9a:d3:3a:d7:02:d7:4e:48:ec:7e:9d:
                    2d:17:17:ab:59:20:ff:07:6d:a3:f7:86:fe:9b:c9:
                    a9:d8:dd:66:7a:7f:34:f0:f3:5a:a9:fb:e5:27:e0:
                    35:db:59:69:6a:55:b3:2e:80:49:b1:82:01:2b:33:
                    05:5a:e2:37:98:95:ac:3e:fb:fd:0c:65:53:f0:c6:
                    63:64:44:44:b1:05:60:e3:24:f0:8f:50:ec:d4:f0:
                    b3:d1:f2:72:83:16:04:03:cd:f5:38:ad:bf:1f:26:
                    20:68:3f:ce:c4:b4:af:01:fb:64:62:65:2e:4b:01:
                    67:96:03:f8:72:5b:15:65:dc:17:65:bd:d9:c9:f8:
                    4e:0d:0c:e3:bb:e0:36:26:1e:10:87:60:55:f2:8f:
                    09:91:e1:1e:b1:11:d8:d6:8f:55:12:3e:87:96:0d:
                    f4:70:0e:b5:2d:8f:aa:11:7b:c4:d4:67:74:82:56:
                    2f:ac:40:7c:3c:5b:a2:e8:76:eb:63:7d:f9:36:99:
                    72:ae:bd:8d:5d:d8:54:86:b5:2d:75:41:5f:4d:89:
                    84:9f:09:82:c8:f0:cc:9f:82:68:bd:34:9a:d1:dd:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:79:C2:8F:85:DD:1B:D0:B8:A4:6E:E1:52:F6:B2:00:CB:A2:16:1C
            X509v3 Authority Key Identifier:
                keyid:A3:71:16:D5:29:48:40:CD:E4:F6:45:37:73:95:CD:1D:88:33:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/A37116D5294840CDE4F645377395CD1D8833416A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A37116D5294840CDE4F645377395CD1D8833416A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:3b:7d:65:1f:68:7f:f9:92:db:3e:b7:31:c5:8b:55:0c:fd:
         b2:b3:19:07:40:f2:0c:5e:dd:56:ae:9d:a3:fe:68:5d:88:e2:
         eb:79:61:46:32:4d:3f:18:c2:2c:d1:dd:a6:0d:a7:ac:48:a2:
         7b:1e:f7:aa:a0:59:20:75:8d:d1:25:de:a8:fc:a0:42:eb:fc:
         51:5d:ef:19:43:7d:e8:3e:64:69:e3:a3:e8:16:17:01:b8:26:
         b9:ed:69:1c:1c:d5:25:71:c4:22:a2:af:ac:cd:a1:63:12:6a:
         4a:9f:b5:ba:1e:da:fc:7a:84:c4:ef:94:37:19:01:46:be:c3:
         b0:1c:12:9e:c4:6b:8d:ed:5b:bc:57:b8:d5:87:80:09:fc:cf:
         cf:af:7e:c9:ca:12:83:e5:54:69:ff:69:31:b1:80:3d:c3:43:
         41:1f:87:01:02:27:74:f6:60:9d:a1:df:11:ef:dd:c6:b6:eb:
         88:13:5b:99:24:ab:5a:a7:98:26:64:b3:e0:c4:18:d5:6f:3f:
         9e:c8:8a:68:45:e3:a1:5c:82:be:cf:fb:e0:cb:a3:da:68:01:
         0b:4a:4b:74:d2:39:42:9d:4f:ed:61:ea:38:2f:45:6e:c2:0b:
         ff:ca:4f:02:99:75:f0:43:52:13:ee:e9:b0:47:c1:79:92:c0:
         51:ff:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:37 2025 by rpki-client