This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37342e302f32342d3234203d3e20323632343630.roa
File:                     3134332e3235352e37342e302f32342d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          hNUH2DFOcrlemoFco131uFMcuY5PudDVL6J0yxBORnA=
Subject key identifier:   34:23:3D:BB:CD:B8:50:E9:2B:18:B9:AC:73:A4:6E:25:42:8D:55:8B
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       378F4BBDEC1731C4CC55655CB58A2DE322315816
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37342e302f32342d3234203d3e20323632343630.roa
Signing time:             Tue 11 Nov 2025 13:42:20 +0000
ROA not before:           Tue 11 Nov 2025 13:37:20 +0000
ROA not after:            Tue 10 Nov 2026 13:42:20 +0000
asID:                     262460
IP address blocks:        143.255.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8f:4b:bd:ec:17:31:c4:cc:55:65:5c:b5:8a:2d:e3:22:31:58:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Nov 11 13:37:20 2025 GMT
            Not After : Nov 10 13:42:20 2026 GMT
        Subject: CN=34233DBBCDB850E92B18B9AC73A46E25428D558B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:2a:4d:7a:1e:4c:b6:b4:57:95:e2:70:e4:
                    46:54:86:a5:eb:b6:a5:a6:fc:5c:f0:1b:43:0b:37:
                    12:c8:cb:8c:1a:85:5d:db:04:54:5b:6c:66:0e:f9:
                    1d:4f:92:f1:45:74:75:f7:cb:c8:40:c1:af:d5:b9:
                    af:6f:00:14:09:2d:cb:27:15:0c:f6:e1:ea:22:7c:
                    1c:7d:33:d3:73:b5:53:4a:8b:a2:02:fa:06:c8:ae:
                    94:eb:63:9b:46:ab:e9:48:a8:83:d4:75:b6:88:71:
                    d9:8c:68:3d:ab:99:65:17:5e:3d:bb:ed:09:3b:9f:
                    38:4d:b0:ce:33:69:a2:2c:86:71:be:99:a9:c1:08:
                    f2:e0:74:e1:c4:32:a3:04:ad:f0:48:dc:8f:c4:10:
                    fb:07:b5:8c:39:1c:79:39:be:23:36:1b:eb:26:1f:
                    5c:5b:a3:1d:3b:27:45:a9:26:f7:34:78:d9:ea:33:
                    49:f6:22:7f:47:60:b8:53:c7:66:c3:e9:d0:da:dc:
                    8b:f2:8e:c2:a6:e5:a4:4c:94:e1:38:53:11:27:d2:
                    a9:36:56:95:79:be:a6:af:a5:a9:61:50:24:2c:ea:
                    96:87:6c:ac:e6:c1:27:75:2f:71:5e:3a:9e:8c:96:
                    af:79:23:32:0c:a8:01:6c:3a:20:12:b3:dc:94:14:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:3D:BB:CD:B8:50:E9:2B:18:B9:AC:73:A4:6E:25:42:8D:55:8B
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37342e302f32342d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ef:64:f6:7a:b0:c5:4a:c4:6d:1c:76:32:c9:cd:43:62:95:
         da:4b:33:35:4f:95:95:8b:f8:cf:0a:0e:33:9d:ec:16:f5:3a:
         c3:d2:aa:0d:f2:f9:8a:27:ca:c8:d3:de:85:03:dd:ac:20:c1:
         75:df:b0:cb:77:fc:9c:f2:b5:5c:a9:a4:a8:2f:c2:12:4e:7b:
         0c:9b:6e:52:bf:fc:77:a9:a3:d0:8c:b6:e5:be:0b:fd:60:9b:
         82:4e:80:a6:b3:37:21:a3:b0:2a:f1:28:79:ad:ea:a0:22:74:
         85:fe:64:f6:24:f2:6e:94:48:a1:5d:6b:4d:94:6c:44:f6:55:
         c2:bb:bf:3f:0e:1c:be:7e:96:79:c3:3e:42:23:84:6b:26:19:
         29:62:fe:6d:5d:c0:6e:fd:eb:c6:51:30:ea:e0:d6:4e:ed:64:
         2c:f9:d6:25:8f:5a:a4:ac:2f:2d:82:51:59:40:77:78:b5:ac:
         06:c8:1a:10:b1:84:a8:58:8e:54:c2:c5:a1:8d:a5:d2:ed:d4:
         e5:f7:5e:09:e8:77:f7:07:7d:df:79:4e:8f:45:ad:a7:85:47:
         13:87:81:3e:e7:18:b7:1d:91:b4:8c:31:44:2f:17:0d:90:4b:
         ba:ba:b8:11:b1:17:d4:59:ac:39:7f:90:bb:d4:a5:a5:ce:96:
         00:a8:6b:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN49LvewXMcTMVWVctYot4yIxWBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY5MjY0QkVENDhBMkM1OUFCOTUwQjRBRjkyRjlERkRF
MjcyRjg2NDAeFw0yNTExMTExMzM3MjBaFw0yNjExMTAxMzQyMjBaMDMxMTAvBgNV
BAMTKDM0MjMzREJCQ0RCODUwRTkyQjE4QjlBQzczQTQ2RTI1NDI4RDU1OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjESpNeh5MtrRXleJw5EZUhqXr
tqWm/FzwG0MLNxLIy4wahV3bBFRbbGYO+R1PkvFFdHX3y8hAwa/Vua9vABQJLcsn
FQz24eoifBx9M9NztVNKi6IC+gbIrpTrY5tGq+lIqIPUdbaIcdmMaD2rmWUXXj27
7Qk7nzhNsM4zaaIshnG+manBCPLgdOHEMqMErfBI3I/EEPsHtYw5HHk5viM2G+sm
H1xbox07J0WpJvc0eNnqM0n2In9HYLhTx2bD6dDa3IvyjsKm5aRMlOE4UxEn0qk2
VpV5vqavpalhUCQs6paHbKzmwSd1L3FeOp6Mlq95IzIMqAFsOiASs9yUFKRrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNCM9u824UOkrGLmsc6RuJUKNVYswHwYDVR0j
BBgwFoAUn5JkvtSKLFmrlQtK+S+d/eJy+GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0R1V3MW5hWnhROXc4RERVcVlQZWhCWUZpMndIdDlqTGJ0R0tGaTRU
Wk4vMC85RjkyNjRCRUQ0OEEyQzU5QUI5NTBCNEFGOTJGOURGREUyNzJGODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGOTI2NEJFRDQ4QTJDNTlB
Qjk1MEI0QUY5MkY5REZERTI3MkY4NjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdEdVdzFuYVp4UTl3OEREVXFZUGVoQllGaTJ3SHQ5akxidEdLRmk0VFpOLzAv
MzEzNDMzMmUzMjM1MzUyZTM3MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACP/0owDQYJKoZIhvcNAQELBQADggEBAGnvZPZ6
sMVKxG0cdjLJzUNildpLMzVPlZWL+M8KDjOd7Bb1OsPSqg3y+YonysjT3oUD3awg
wXXfsMt3/JzytVyppKgvwhJOewybblK//Hepo9CMtuW+C/1gm4JOgKazNyGjsCrx
KHmt6qAidIX+ZPYk8m6USKFda02UbET2VcK7vz8OHL5+lnnDPkIjhGsmGSli/m1d
wG7968ZRMOrg1k7tZCz51iWPWqSsLy2CUVlAd3i1rAbIGhCxhKhYjlTCxaGNpdLt
1OX3Xgnod/cHfd95To9FraeFRxOHgT7nGLcdkbSMMUQvFw2QS7q6uBGxF9RZrDl/
kLvUpaXOlgCoa8E=
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:54:47 2025 by rpki-client