This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa
File:                     3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa (raw, json)
Hash identifier:          qPy7KkNhtAdoTufnPwnrRnXcVUtVBpUr4nAdV9YW0XA=
Subject key identifier:   B1:60:9C:B7:6E:6C:C0:D8:04:2C:F6:42:14:A2:B8:BC:C2:7D:1D:EC
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       10648CD3E5319275CF6F3CC647FE2D2376AF2787
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa
Signing time:             Wed 05 Nov 2025 00:53:14 +0000
ROA not before:           Wed 05 Nov 2025 00:48:14 +0000
ROA not after:            Wed 04 Nov 2026 00:53:14 +0000
asID:                     267469
IP address blocks:        192.141.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:64:8c:d3:e5:31:92:75:cf:6f:3c:c6:47:fe:2d:23:76:af:27:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Nov  5 00:48:14 2025 GMT
            Not After : Nov  4 00:53:14 2026 GMT
        Subject: CN=B1609CB76E6CC0D8042CF64214A2B8BCC27D1DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:3e:0a:c0:04:ed:56:18:72:53:75:bc:d7:
                    bf:ac:08:e6:d2:40:cb:4c:00:e3:e0:b7:39:58:ec:
                    f7:88:8e:c5:ef:85:b6:15:1a:03:34:e7:79:a8:da:
                    6c:39:3d:f9:80:94:91:75:c7:1e:bb:ac:19:87:5d:
                    8c:c7:03:c8:42:e9:50:87:75:8a:8e:d6:3f:12:23:
                    27:a8:de:f7:a9:50:cf:5d:d8:26:1b:4f:29:48:30:
                    d3:43:64:ee:09:40:a2:c0:d6:55:6b:8c:0e:54:7d:
                    ea:c9:39:dd:b0:f7:41:03:93:fe:c0:4d:0d:fa:a0:
                    95:d0:cc:33:9b:e8:2e:d5:cc:f5:20:f1:17:be:bd:
                    11:d4:41:57:05:7a:a2:98:aa:41:25:d4:e4:16:d7:
                    61:ee:2f:26:66:9e:fe:dd:56:9a:e2:6c:1c:10:b4:
                    57:5c:02:b3:dd:94:2f:e3:d7:ea:ad:da:33:14:a6:
                    df:f1:d5:69:58:16:9f:2f:f2:91:0c:bd:ad:eb:f3:
                    ac:a6:2e:28:71:2b:89:3b:e3:73:ed:2e:24:4e:0b:
                    c7:73:b4:c7:74:14:b6:31:23:8c:2a:66:a5:fa:26:
                    77:a4:5e:e6:1f:d4:58:87:ed:29:a0:30:ff:b9:a5:
                    94:cc:69:1a:fa:60:87:99:16:85:bf:06:b2:76:e4:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:9C:B7:6E:6C:C0:D8:04:2C:F6:42:14:A2:B8:BC:C2:7D:1D:EC
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:a5:66:c6:2b:a6:db:b9:59:92:00:f5:fa:7f:31:02:89:
         cb:d4:55:88:7f:a7:dc:0a:5c:00:69:5a:f0:c6:85:7e:c1:9b:
         b0:b8:43:05:d3:02:dd:f9:a6:ab:a4:f7:db:3b:53:e1:68:bc:
         ef:99:eb:8c:97:1a:9e:3a:82:93:5f:82:9d:49:89:35:8b:99:
         5d:ed:ac:01:10:ef:bf:8d:87:50:f4:25:bd:79:11:3b:3c:92:
         aa:42:43:33:11:ae:89:54:23:92:f5:bd:3b:4d:99:02:59:2d:
         8e:f3:92:db:e6:8e:e2:3a:c2:83:25:b0:1d:dc:cd:b9:69:c0:
         b5:a4:17:5d:01:54:e0:b3:0c:da:0e:aa:38:51:12:c3:54:35:
         6f:d5:a7:a5:38:69:62:0e:22:4d:0b:19:78:a2:ba:28:e0:ea:
         cc:21:a9:cb:a6:15:c3:54:fb:70:87:12:de:44:3f:1f:b4:23:
         1d:a3:57:7c:be:0b:61:d7:88:3b:c0:6a:cf:03:ca:cb:43:8d:
         4b:b7:36:4b:16:1b:94:2c:36:42:60:a7:57:6c:69:c7:95:40:
         6a:04:e4:e5:37:fc:56:21:9f:e6:ac:d1:4f:4f:7f:77:e7:10:
         c9:00:f1:e6:05:65:b4:a7:97:e5:50:56:bc:68:9f:43:91:6a:
         34:46:b9:d1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEGSM0+UxknXPbzzGR/4tI3avJ4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBNjZBMUI1OUIxRkY4MzJEMzAxMTBGOEI0QTcyRjRG
MTBCNzEzOTAeFw0yNTExMDUwMDQ4MTRaFw0yNjExMDQwMDUzMTRaMDMxMTAvBgNV
BAMTKEIxNjA5Q0I3NkU2Q0MwRDgwNDJDRjY0MjE0QTJCOEJDQzI3RDFERUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jD4KwATtVhhyU3W817+sCObS
QMtMAOPgtzlY7PeIjsXvhbYVGgM053mo2mw5PfmAlJF1xx67rBmHXYzHA8hC6VCH
dYqO1j8SIyeo3vepUM9d2CYbTylIMNNDZO4JQKLA1lVrjA5UferJOd2w90EDk/7A
TQ36oJXQzDOb6C7VzPUg8Re+vRHUQVcFeqKYqkEl1OQW12HuLyZmnv7dVpribBwQ
tFdcArPdlC/j1+qt2jMUpt/x1WlYFp8v8pEMva3r86ymLihxK4k743PtLiROC8dz
tMd0FLYxI4wqZqX6JnekXuYf1FiH7SmgMP+5pZTMaRr6YIeZFoW/BrJ25ButAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsWCct25swNgELPZCFKK4vMJ9HewwHwYDVR0j
BBgwFoAU+qZqG1mx/4MtMBEPi0py9PELcTkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yVmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tu
LzAvRkFBNjZBMUI1OUIxRkY4MzJEMzAxMTBGOEI0QTcyRjRGMTBCNzEzOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQUE2NkExQjU5QjFGRjgzMkQz
MDExMEY4QjRBNzJGNEYxMEI3MTM5LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
VmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tuLzAvMzEz
OTMyMmUzMTM0MzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
NzM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAsCNnDANBgkqhkiG9w0BAQsFAAOCAQEAdsilZsYr
ptu5WZIA9fp/MQKJy9RViH+n3ApcAGla8MaFfsGbsLhDBdMC3fmmq6T32ztT4Wi8
75nrjJcanjqCk1+CnUmJNYuZXe2sARDvv42HUPQlvXkROzySqkJDMxGuiVQjkvW9
O02ZAlktjvOS2+aO4jrCgyWwHdzNuWnAtaQXXQFU4LMM2g6qOFESw1Q1b9WnpThp
Yg4iTQsZeKK6KODqzCGpy6YVw1T7cIcS3kQ/H7QjHaNXfL4LYdeIO8BqzwPKy0ON
S7c2SxYblCw2QmCnV2xpx5VAagTk5Tf8ViGf5qzRT09/d+cQyQDx5gVltKeX5VBW
vGifQ5FqNEa50Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:14:28 2025 by rpki-client