This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa
File:                     3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa (raw, json)
Hash identifier:          Ix2ka9mCP17rIRTD0+LYKO9c3/RaTFmI3laJbDwsi58=
Subject key identifier:   DF:9C:A4:AE:8D:5F:E7:8D:61:2F:52:45:14:27:BB:C4:A7:99:D8:8D
Certificate issuer:       /CN=519EB4C8F7D595D1C83083F1A140256DB60A221B
Certificate serial:       75ADEC55198739758CF2A0CC87975A41B88F3582
Authority key identifier: 51:9E:B4:C8:F7:D5:95:D1:C8:30:83:F1:A1:40:25:6D:B6:0A:22:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/519EB4C8F7D595D1C83083F1A140256DB60A221B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa
Signing time:             Thu 13 Nov 2025 12:49:01 +0000
ROA not before:           Thu 13 Nov 2025 12:44:01 +0000
ROA not after:            Thu 12 Nov 2026 12:49:01 +0000
asID:                     263462
IP address blocks:        177.190.184.0/21 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.crl
                          rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/519EB4C8F7D595D1C83083F1A140256DB60A221B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ad:ec:55:19:87:39:75:8c:f2:a0:cc:87:97:5a:41:b8:8f:35:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519EB4C8F7D595D1C83083F1A140256DB60A221B
        Validity
            Not Before: Nov 13 12:44:01 2025 GMT
            Not After : Nov 12 12:49:01 2026 GMT
        Subject: CN=DF9CA4AE8D5FE78D612F52451427BBC4A799D88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:8b:18:65:ff:5b:2b:c4:cd:13:ea:51:89:
                    9c:31:d0:6e:19:c4:58:01:3a:4d:b9:3d:48:e4:68:
                    54:b1:85:a8:c6:f4:2c:a8:e0:b3:32:c1:d0:bc:bf:
                    4e:9c:c7:d6:54:0d:a1:54:07:48:e2:24:a8:7c:53:
                    c3:ed:ab:a3:71:6f:e9:8c:37:a4:84:a2:75:b4:72:
                    32:66:f6:52:8c:e2:30:82:fe:3c:f8:1b:23:57:d5:
                    be:c6:9c:23:b8:6c:a3:25:40:44:a6:7a:9b:e4:05:
                    d2:93:99:15:9f:a5:14:31:6e:99:59:dd:2f:d2:e1:
                    39:75:0f:52:15:06:55:1a:d5:8e:78:72:bf:80:93:
                    52:4e:60:9e:25:a5:c6:31:4c:19:94:df:73:de:8b:
                    3e:15:f3:8f:8f:e1:43:02:89:cf:31:04:49:b3:c6:
                    bd:98:6d:8a:34:38:2e:f2:24:2b:64:f2:e2:f0:d6:
                    37:8a:c5:a3:d0:c2:ee:ad:ea:9b:40:e8:aa:0d:7a:
                    24:23:e0:28:5c:f3:e0:b8:46:85:e8:42:b1:04:94:
                    38:3e:7c:17:b6:17:03:62:21:4d:ff:89:73:6a:50:
                    de:b8:e7:98:e2:66:02:89:e2:8a:78:45:e6:26:fb:
                    fa:2b:dd:6e:cf:99:17:4c:f5:5a:e6:ab:76:b2:25:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9C:A4:AE:8D:5F:E7:8D:61:2F:52:45:14:27:BB:C4:A7:99:D8:8D
            X509v3 Authority Key Identifier:
                keyid:51:9E:B4:C8:F7:D5:95:D1:C8:30:83:F1:A1:40:25:6D:B6:0A:22:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/519EB4C8F7D595D1C83083F1A140256DB60A221B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/519EB4C8F7D595D1C83083F1A140256DB60A221B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:43:c8:ee:3a:9c:8c:87:90:e6:0f:47:9f:d5:af:bb:04:75:
         3b:31:3b:e0:75:d6:bb:1c:2e:38:93:4d:25:e9:14:b1:37:85:
         ee:6d:25:06:aa:64:9e:16:90:47:ae:bf:49:8b:85:8c:e5:f6:
         ba:d9:3a:62:ae:50:2f:b6:bf:40:4f:24:e9:64:95:22:a0:9c:
         8e:8a:05:78:5a:89:b1:fe:f5:b0:51:a6:51:2e:5b:60:8c:41:
         38:be:9f:cb:45:6c:5b:76:8c:23:d0:bb:55:db:f5:be:e5:95:
         cb:e4:48:14:24:db:87:62:a6:21:78:63:5c:ce:ca:2b:28:16:
         51:7f:3a:50:8d:8c:6b:3a:56:02:b2:8d:f9:18:9a:2f:d5:e8:
         c8:f7:51:50:8a:96:cb:8b:ad:fc:8c:02:ad:45:59:d9:29:83:
         38:39:8b:ca:62:63:0e:f4:d5:4f:4f:03:99:ba:40:ef:3c:8a:
         dc:46:84:18:fd:54:b3:8f:dd:74:b2:90:7b:20:33:94:2a:95:
         91:1f:aa:71:a1:e6:e1:f1:25:29:9b:7d:79:fa:ce:b3:b9:cc:
         ca:f6:c7:36:f3:8a:b5:f3:14:ec:09:1b:91:aa:55:0a:43:ae:
         37:ee:70:5e:3f:be:d1:a1:08:35:45:fd:9f:14:55:ca:06:21:
         52:56:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:14 2025 by rpki-client