This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          6E16WdayLCuq9ZqwWwNY7tVFUAcaXaJN796N+MXN9v0=
Subject key identifier:   70:3E:02:82:4A:BE:BB:FC:B9:B8:B8:58:4E:D0:5A:45:DA:DD:63:4A
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       56B1ACE288A816634DF0629E0A45B246132F32DA
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa
Signing time:             Mon 01 Dec 2025 23:19:41 +0000
ROA not before:           Mon 01 Dec 2025 23:14:41 +0000
ROA not after:            Mon 30 Nov 2026 23:19:41 +0000
asID:                     263518
IP address blocks:        191.243.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 18:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b1:ac:e2:88:a8:16:63:4d:f0:62:9e:0a:45:b2:46:13:2f:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Dec  1 23:14:41 2025 GMT
            Not After : Nov 30 23:19:41 2026 GMT
        Subject: CN=703E02824ABEBBFCB9B8B8584ED05A45DADD634A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:99:ac:aa:09:92:20:39:2c:d9:a6:02:c2:
                    b7:ae:92:14:31:56:70:a9:17:b7:ce:1e:8d:5c:10:
                    14:bb:fe:f3:a6:39:62:b0:61:2a:7f:79:46:5c:db:
                    10:eb:e9:c4:d4:ca:41:64:8c:4a:bc:03:85:22:6e:
                    4d:23:f7:f3:0d:cb:bc:cd:9e:c5:11:25:d9:27:f2:
                    98:36:86:64:b0:c3:7a:91:c0:3b:2b:a0:32:12:ad:
                    36:c4:fd:93:8b:25:2f:ef:79:85:28:11:fa:c6:b7:
                    b0:0e:a1:b3:39:78:39:6c:5e:6c:54:40:ca:32:8b:
                    f4:28:1c:09:25:b7:f4:75:bf:ea:1a:60:89:67:a1:
                    e8:cb:7a:f3:dc:2b:b8:bd:87:95:35:38:c2:19:ce:
                    af:cc:84:16:da:a3:be:7b:ce:49:4e:fc:08:d4:4a:
                    2e:1d:13:eb:88:a8:ba:5b:1f:a1:01:82:71:99:2c:
                    e0:da:9b:f7:1b:7e:a6:6b:0b:9d:19:f5:9f:f7:54:
                    e3:ab:76:b6:99:12:ab:f1:bd:c9:0c:78:4e:85:be:
                    84:d4:8d:61:df:1d:a7:e6:ac:95:d0:97:f4:f5:ce:
                    75:f1:7f:f8:b5:05:8f:cb:16:03:e4:e8:e6:63:49:
                    a8:ee:56:31:b1:88:cb:92:42:11:40:7f:36:cc:30:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3E:02:82:4A:BE:BB:FC:B9:B8:B8:58:4E:D0:5A:45:DA:DD:63:4A
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d2:2d:20:82:28:20:ee:b1:5a:f1:24:20:39:4d:73:82:7e:
         0f:64:0c:7e:e6:37:5a:e9:15:3d:f0:93:df:99:05:97:d2:e0:
         52:05:70:ba:8b:38:87:9f:9d:59:23:3a:98:11:63:87:69:9d:
         f9:40:18:7a:db:a9:77:29:08:50:09:09:c7:f9:2b:76:d7:e1:
         b3:53:39:49:77:87:8f:31:9d:55:af:75:08:ee:da:1f:1f:1a:
         8e:80:df:ae:8b:7a:aa:68:b5:ae:92:01:ed:b3:7a:48:6e:02:
         26:39:be:21:c2:a4:8e:02:9f:1d:08:3c:b3:91:a2:d8:74:11:
         31:60:27:cc:d3:1c:a9:1c:19:a7:92:d4:07:3b:86:f5:fd:84:
         b5:af:f9:be:62:ce:7e:89:a0:db:88:10:33:01:6f:d9:bb:ca:
         c0:60:93:ff:5c:db:79:05:d1:7d:18:ce:d4:47:7a:05:8f:09:
         2c:89:49:21:1b:ee:bf:89:64:78:d5:7f:de:ab:ce:46:83:67:
         54:91:5f:ea:fb:f7:f3:90:6b:c1:31:5a:8e:a3:9d:90:4e:d2:
         3b:c5:81:e1:3f:59:25:bd:ec:a9:c8:b2:ec:74:cb:7b:a6:d9:
         cb:2a:a9:97:5f:93:21:ee:37:5c:fe:dd:b1:cd:91:12:62:9d:
         0d:18:96:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:19:20 2025 by rpki-client