This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa
File:                     3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          t6aaS6U65Ny9aUOFEjabgzRvEvvYV3p2IeD1Ec/VWQc=
Subject key identifier:   9D:08:80:E8:7E:58:AD:41:5B:AB:7C:B9:DE:1F:06:A4:8D:F6:F2:57
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       634A455CB9FF7B4BB8249CF0618FAE43559C3186
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa
Signing time:             Fri 28 Nov 2025 18:08:19 +0000
ROA not before:           Fri 28 Nov 2025 18:03:19 +0000
ROA not after:            Fri 27 Nov 2026 18:08:19 +0000
asID:                     262773
IP address blocks:        168.194.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:45:5c:b9:ff:7b:4b:b8:24:9c:f0:61:8f:ae:43:55:9c:31:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Nov 28 18:03:19 2025 GMT
            Not After : Nov 27 18:08:19 2026 GMT
        Subject: CN=9D0880E87E58AD415BAB7CB9DE1F06A48DF6F257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:59:a2:f1:4b:8d:70:22:5a:f1:0f:80:8b:
                    c6:4e:25:01:0b:84:69:3e:30:57:fc:9e:17:11:88:
                    3d:2b:85:0b:53:16:22:fe:fa:1d:7b:55:83:d9:35:
                    5e:6c:3f:98:2a:55:c0:2e:47:2b:19:30:eb:e5:ae:
                    29:6e:71:c4:65:05:f4:65:e7:b0:47:63:fc:cd:e0:
                    c5:d4:dd:43:0c:7b:3c:a8:1c:8b:87:79:73:08:b8:
                    b8:e6:82:28:dc:16:22:1c:8b:f2:7c:4e:a8:f8:29:
                    a4:37:7d:7f:4b:52:75:2d:30:b4:95:ee:4d:1b:22:
                    41:d9:c4:4a:2a:a0:22:d5:f7:f6:c7:25:2e:d4:80:
                    ed:34:c3:ad:9b:42:05:b5:51:6c:eb:38:9e:e6:6a:
                    06:76:6b:ad:19:8f:5d:3d:be:1c:75:81:d1:ae:1b:
                    df:5f:ab:34:13:40:e7:c5:34:7f:59:4f:10:3a:f8:
                    84:ec:1f:c5:a0:a1:cf:2b:0d:96:39:6a:6d:09:4e:
                    34:05:b5:9d:58:d0:af:1a:8b:31:6d:c6:7e:a3:49:
                    47:eb:c7:57:d2:90:ea:56:c5:aa:55:38:f5:af:a8:
                    71:fe:f7:74:cd:5f:b0:6d:f0:26:aa:1a:42:3d:68:
                    13:fb:b3:08:da:bd:1d:5e:d1:da:fd:bd:54:7f:4e:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:08:80:E8:7E:58:AD:41:5B:AB:7C:B9:DE:1F:06:A4:8D:F6:F2:57
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:26:dc:ed:c1:20:04:4e:3c:d1:56:54:ed:6c:20:39:29:
         07:40:d3:96:3e:62:90:37:e6:fe:7a:45:ff:2f:f5:57:e5:c6:
         39:6b:6b:96:c0:ed:d5:6c:f0:9b:2f:b3:19:bb:9d:76:72:e7:
         49:79:e5:a8:31:57:a6:ed:e2:5f:14:19:56:0b:af:2f:b2:d7:
         e0:10:8a:d7:84:a6:56:19:b2:3b:af:a7:f5:87:61:ca:da:a8:
         f0:30:f9:e7:a5:90:1b:5d:35:8d:5d:85:63:12:ef:dd:82:5b:
         70:ee:9c:ca:22:73:01:ff:30:2e:0f:d8:e3:ad:e6:31:67:a7:
         de:4f:50:72:a5:7d:be:39:ce:1a:55:9c:08:eb:70:c0:46:26:
         36:b7:ee:aa:04:5a:e6:6a:be:04:f5:ac:a8:bb:68:a3:0c:fb:
         52:50:39:a6:3e:e5:88:ed:f5:17:70:41:ae:3e:c6:f5:e4:1a:
         ac:89:c2:ae:6d:5b:4a:99:8d:b4:ad:5d:9b:ba:98:4f:c5:4c:
         b7:a0:92:6a:cf:54:a9:3e:e3:40:1d:76:3b:8b:11:cd:65:f0:
         6b:bf:d7:31:a0:3b:cc:ab:57:bd:2d:c8:93:b6:3e:51:fd:37:
         f9:3e:6a:40:56:ee:34:d6:27:65:2e:4f:45:d0:f1:74:a4:dd:
         da:be:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:06 2025 by rpki-client