This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          ZCG4nd5mrvFxP6PNl/3IGW9KXAMONkdHjnOvIFygY4Q=
Subject key identifier:   A7:1F:9F:DE:41:6F:60:99:ED:28:B6:33:37:49:B5:7B:5E:A3:92:72
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       691DD33230468DD0684FA7DCC8873800CEAAEE84
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
Signing time:             Mon 01 Dec 2025 23:19:43 +0000
ROA not before:           Mon 01 Dec 2025 23:14:43 +0000
ROA not after:            Mon 30 Nov 2026 23:19:43 +0000
asID:                     263518
IP address blocks:        191.243.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 18:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1d:d3:32:30:46:8d:d0:68:4f:a7:dc:c8:87:38:00:ce:aa:ee:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Dec  1 23:14:43 2025 GMT
            Not After : Nov 30 23:19:43 2026 GMT
        Subject: CN=A71F9FDE416F6099ED28B6333749B57B5EA39272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:82:45:9b:16:a1:4a:bb:26:bc:fb:d1:c7:
                    6e:aa:9c:7b:fd:5d:8a:59:d8:a0:42:a7:36:88:87:
                    e2:b0:8e:5c:dc:ae:a2:d9:58:67:39:f2:13:3e:73:
                    1a:d0:65:20:01:fa:92:5d:07:eb:aa:91:2f:b7:86:
                    48:af:02:bd:18:1e:f5:98:d4:06:02:a2:a7:9b:1a:
                    42:ea:16:85:58:3c:73:11:8f:ca:8b:c6:25:fc:1e:
                    b6:1a:4b:71:a4:16:c6:eb:50:93:d4:97:bf:cf:38:
                    45:a1:31:0e:a0:31:23:82:61:6c:3f:77:ab:b3:3f:
                    6b:29:eb:09:7c:28:ac:34:82:f9:1c:a5:a8:e7:19:
                    cb:14:9e:dc:2b:94:cc:e1:32:4b:7c:b6:08:99:a4:
                    8f:4a:3c:86:c0:c7:f8:97:b5:f6:1f:d8:8b:11:1a:
                    11:81:6b:c3:10:9c:b2:c6:a1:30:1f:3c:fa:c2:42:
                    68:55:4c:56:f3:71:37:19:09:ae:51:1e:e4:38:12:
                    5d:56:c5:0f:66:40:f0:1c:a0:ca:f6:5b:3f:61:de:
                    81:4b:d5:80:0a:20:0f:3a:03:e9:28:d4:a3:5a:43:
                    42:31:fe:3e:e8:5a:01:7b:c8:c0:a7:df:0b:18:bd:
                    0e:fc:59:ac:58:59:16:79:07:85:54:17:32:ec:3e:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:9F:DE:41:6F:60:99:ED:28:B6:33:37:49:B5:7B:5E:A3:92:72
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:08:f6:b2:d1:1b:de:a1:3f:50:1c:fd:dc:00:87:65:0e:
         77:06:ef:27:c8:e0:85:82:df:40:57:13:de:5f:a3:97:0b:eb:
         12:d3:c7:56:80:47:85:8b:66:ef:d1:7d:10:06:4f:f2:65:8d:
         b1:2c:b6:b8:65:bf:c1:2e:fb:9f:3d:80:ba:d6:70:ae:10:1e:
         5a:4e:8b:29:a0:63:95:8c:d1:c3:97:1b:9b:69:74:c0:25:45:
         c7:96:b2:06:c8:da:da:7a:12:bc:30:4e:9b:ec:d4:df:0e:fe:
         95:bd:ca:95:b5:92:7e:e1:ad:9e:a4:79:75:dc:0f:9c:a2:a6:
         48:5f:ff:57:31:b2:b1:a1:eb:89:bb:3a:59:c1:89:be:8b:cb:
         6f:59:f9:86:9a:cd:af:38:17:67:15:79:34:5e:75:26:2b:0d:
         56:c1:69:fa:dd:2c:eb:bf:11:2e:89:6f:ca:31:b4:c4:32:0d:
         5b:0f:98:28:fb:54:58:ff:a0:48:2f:56:dc:2e:8f:3e:07:f9:
         18:1a:8d:04:39:c2:45:f8:c3:c5:49:16:c6:10:2e:45:7d:94:
         f9:7d:a6:13:eb:4c:17:d7:c0:44:c1:1a:34:6f:32:a3:93:06:
         85:c2:f4:cf:eb:64:86:88:c9:fc:9f:73:c3:9d:b5:e7:00:ec:
         bb:42:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:12:03 2025 by rpki-client