This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          dGgwpzazCZ3AqPIkaQr98HMCjeD29o7jYdUv1rZF6B8=
Subject key identifier:   B2:08:12:CF:19:6D:F5:7C:53:EC:D5:E5:6A:65:10:B4:AF:DC:25:A2
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       282A9FD3A408415670975F8F3BC14DA73D812782
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
Signing time:             Mon 01 Dec 2025 23:19:41 +0000
ROA not before:           Mon 01 Dec 2025 23:14:41 +0000
ROA not after:            Mon 30 Nov 2026 23:19:41 +0000
asID:                     263518
IP address blocks:        191.243.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2a:9f:d3:a4:08:41:56:70:97:5f:8f:3b:c1:4d:a7:3d:81:27:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Dec  1 23:14:41 2025 GMT
            Not After : Nov 30 23:19:41 2026 GMT
        Subject: CN=B20812CF196DF57C53ECD5E56A6510B4AFDC25A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2e:ae:c5:02:1a:ea:5a:e7:f2:7b:10:26:f9:
                    0d:89:56:52:f6:db:2a:50:fb:a0:12:51:f1:1f:ac:
                    74:d3:ba:c9:40:92:c0:48:09:9a:c1:4c:8a:b0:e6:
                    25:42:ed:d7:ee:c4:ac:4e:29:88:1f:85:27:85:20:
                    8a:a9:ad:4f:72:dc:fb:6c:a4:38:07:87:42:b2:e7:
                    d0:65:95:9b:39:49:62:e3:b6:0e:c0:61:7b:9b:a2:
                    62:c8:71:19:dc:34:93:f2:83:b1:bb:58:29:9d:27:
                    ac:78:94:09:df:47:cd:4a:9f:18:6f:cb:fa:0f:76:
                    0b:65:7e:46:0e:95:64:eb:72:3a:61:49:80:8c:50:
                    aa:41:c3:05:a9:e1:16:d4:06:2c:76:5e:3a:c9:90:
                    be:0d:b4:88:af:89:8b:7a:ba:9b:ba:77:b8:be:ea:
                    90:7d:85:31:ea:38:5c:50:0d:30:dd:24:37:76:4e:
                    7f:50:62:a0:48:26:93:eb:62:08:fe:5d:91:27:f5:
                    73:f2:68:51:f0:a4:60:2e:cf:74:e3:e4:5a:04:4e:
                    99:67:af:06:70:91:6d:c0:04:02:29:17:bf:74:a2:
                    4b:1d:2b:bb:45:9e:bd:62:ba:5c:8b:7b:40:33:59:
                    54:72:4d:03:b2:e1:76:f9:7b:37:d1:57:e5:d2:7f:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:08:12:CF:19:6D:F5:7C:53:EC:D5:E5:6A:65:10:B4:AF:DC:25:A2
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:be:67:8a:06:bf:34:9f:76:a6:00:3b:62:30:9d:3c:76:b2:
         c0:05:ea:b9:bc:0d:15:83:8a:28:82:21:12:fa:da:66:9d:20:
         36:8f:fc:64:fc:b1:fa:e9:40:b1:ed:b1:84:3d:46:ec:34:25:
         41:31:ba:90:58:fd:fc:8d:e4:ac:e6:79:7c:c0:70:b0:83:b9:
         58:ee:77:cb:ee:f4:ce:22:b8:dd:c0:28:34:90:cf:7c:50:8e:
         bc:f5:e1:ad:ee:51:3d:e0:82:bd:30:38:e1:9a:7e:ef:19:9d:
         dc:fc:33:2a:86:c8:e3:5b:81:36:24:52:51:51:18:9e:f0:70:
         12:cc:a9:64:7c:7d:da:24:e0:3a:68:8a:88:d7:2a:34:ca:92:
         a6:93:14:93:a4:9b:00:41:8c:90:9e:93:2f:12:d1:b3:dc:a6:
         29:f5:5f:6f:1a:cb:f1:5b:4d:1f:53:17:6e:5b:7d:4d:03:2e:
         b4:ac:ea:c5:7f:d5:6f:93:d1:15:63:e5:bf:21:2a:ce:2a:07:
         ab:da:00:64:73:25:7d:b4:a7:4e:85:e7:92:a5:64:fa:31:63:
         dc:be:30:72:d7:d4:d2:43:77:8b:85:10:6f:5b:c7:68:6e:9b:
         22:6a:b8:19:f0:ac:46:ac:7c:bf:45:31:0f:25:eb:1e:9d:31:
         37:4f:10:9a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKCqf06QIQVZwl1+PO8FNpz2BJ4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTEyMDEyMzE0NDFaFw0yNjExMzAyMzE5NDFaMDMxMTAvBgNV
BAMTKEIyMDgxMkNGMTk2REY1N0M1M0VDRDVFNTZBNjUxMEI0QUZEQzI1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkLq7FAhrqWufyexAm+Q2JVlL2
2ypQ+6ASUfEfrHTTuslAksBICZrBTIqw5iVC7dfuxKxOKYgfhSeFIIqprU9y3Pts
pDgHh0Ky59BllZs5SWLjtg7AYXubomLIcRncNJPyg7G7WCmdJ6x4lAnfR81Knxhv
y/oPdgtlfkYOlWTrcjphSYCMUKpBwwWp4RbUBix2XjrJkL4NtIiviYt6upu6d7i+
6pB9hTHqOFxQDTDdJDd2Tn9QYqBIJpPrYgj+XZEn9XPyaFHwpGAuz3Tj5FoETpln
rwZwkW3ABAIpF790oksdK7tFnr1iulyLe0AzWVRyTQOy4Xb5ezfRV+XSf6n/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsggSzxlt9XxT7NXlamUQtK/cJaIwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/z1zANBgkqhkiG9w0BAQsFAAOCAQEAZL5n
iga/NJ92pgA7YjCdPHaywAXqubwNFYOKKIIhEvraZp0gNo/8ZPyx+ulAse2xhD1G
7DQlQTG6kFj9/I3krOZ5fMBwsIO5WO53y+70ziK43cAoNJDPfFCOvPXhre5RPeCC
vTA44Zp+7xmd3PwzKobI41uBNiRSUVEYnvBwEsypZHx92iTgOmiKiNcqNMqSppMU
k6SbAEGMkJ6TLxLRs9ymKfVfbxrL8VtNH1MXblt9TQMutKzqxX/Vb5PRFWPlvyEq
zioHq9oAZHMlfbSnToXnkqVk+jFj3L4wctfU0kN3i4UQb1vHaG6bImq4GfCsRqx8
v0UxDyXrHp0xN08Qmg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:29:48 2025 by rpki-client