This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3139312e3235332e38302e302f32302d3234203d3e203533313037.roa
File:                     3139312e3235332e38302e302f32302d3234203d3e203533313037.roa (raw, json)
Hash identifier:          0X4oR6ARZHqfe2/9F+D5hXx4w0ewdEbzILlxiNizOL0=
Subject key identifier:   32:58:76:1C:07:E9:DE:5F:53:80:C8:96:F3:30:31:A4:73:83:F9:3A
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       7AC9972CF69C9EA1364D268BBD94B9855586D027
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3139312e3235332e38302e302f32302d3234203d3e203533313037.roa
Signing time:             Tue 25 Nov 2025 11:25:15 +0000
ROA not before:           Tue 25 Nov 2025 11:20:15 +0000
ROA not after:            Tue 24 Nov 2026 11:25:15 +0000
asID:                     53107
IP address blocks:        191.253.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c9:97:2c:f6:9c:9e:a1:36:4d:26:8b:bd:94:b9:85:55:86:d0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Nov 25 11:20:15 2025 GMT
            Not After : Nov 24 11:25:15 2026 GMT
        Subject: CN=3258761C07E9DE5F5380C896F33031A47383F93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:25:36:40:ee:15:19:6b:a0:a7:58:a6:01:
                    e0:8c:96:04:92:36:f4:1a:a5:cd:14:c4:6b:f0:e1:
                    b8:94:5c:76:66:ac:7d:4d:a4:d2:46:45:07:08:e9:
                    d0:f3:e2:b5:36:46:b6:71:87:da:00:e1:fc:79:f5:
                    83:94:49:a2:72:5b:74:b1:ad:83:7d:f6:e4:25:17:
                    a2:49:08:6f:b4:f9:96:7f:38:29:2b:6a:ce:e2:af:
                    5b:00:bf:3c:58:2e:2e:cc:23:b6:f1:f3:0b:1c:6c:
                    76:ab:0f:19:f8:a8:47:22:50:b9:bf:0a:0e:de:9c:
                    a4:ce:e0:bb:3c:7d:3c:af:fd:54:be:94:78:f3:4c:
                    aa:38:0e:cf:80:2b:c8:d0:61:2b:77:61:ab:e5:d0:
                    e9:d5:da:9b:c5:81:bc:0a:8b:c7:5e:3d:f1:39:41:
                    3c:20:04:a9:d7:e8:1b:bd:60:fa:82:10:6d:46:a5:
                    a2:6b:57:39:89:3d:1c:6c:1b:cf:14:68:ae:34:03:
                    76:fe:ff:b3:32:7b:dd:b2:b5:c8:da:d6:4b:5a:73:
                    15:55:4b:ca:a4:f1:50:f8:31:ae:d6:1d:85:b6:8a:
                    74:69:04:a6:87:ca:08:af:44:b2:34:eb:b7:c3:e1:
                    c9:bc:81:ca:5f:ec:29:c6:06:1c:1a:bc:36:ce:14:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:76:1C:07:E9:DE:5F:53:80:C8:96:F3:30:31:A4:73:83:F9:3A
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3139312e3235332e38302e302f32302d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:c3:c3:27:ce:d5:fb:5a:91:5f:a9:62:70:3c:16:2e:1b:
         ce:fd:46:ed:82:89:d1:ab:b6:78:36:f0:01:58:64:16:90:d2:
         48:3f:97:aa:0a:ac:23:78:06:85:63:ea:02:ce:34:79:92:93:
         79:f4:7f:06:b3:85:db:ca:7d:2a:d2:6c:f8:d1:ff:bb:2a:eb:
         6a:b0:a1:f9:ae:5e:90:40:a7:68:59:5f:cf:2c:63:6e:2e:3c:
         46:f9:f4:5e:64:ad:c8:be:5e:e3:04:c5:7d:56:75:b6:b8:79:
         d2:8c:45:37:35:f1:cb:d4:33:64:a4:eb:a4:ab:7f:21:70:d0:
         c8:49:6a:e4:95:cd:64:e8:54:7c:51:f3:85:b0:e3:2f:dd:f2:
         5a:46:d6:92:46:36:84:b1:2e:4b:e4:1c:f9:0e:ec:d6:e0:1d:
         94:f6:a2:29:91:22:4a:92:00:a8:c2:30:2e:de:74:77:0d:5a:
         5d:57:4f:44:ea:e6:94:ae:6f:45:3f:bf:31:55:55:ef:2d:f3:
         e6:a4:26:65:9b:0f:9d:05:56:fb:8b:bf:f5:0f:5c:25:5d:ba:
         cb:cd:b5:d5:3d:4f:e2:72:db:aa:f6:af:e2:33:de:ee:f6:8e:
         4b:2f:84:e2:6e:70:ca:14:af:6a:86:ee:f1:cb:92:4d:e0:88:
         95:16:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:28 2025 by rpki-client