This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa
File:                     3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier:          Az00IP6p/LjbkSEgP2DYZzTQTV62URdzMh0BaE/WYkw=
Subject key identifier:   CA:19:74:D1:EC:19:50:C4:55:6B:BF:C3:13:68:61:1C:B9:B9:A7:62
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       5AF4B4564F9960589DA36BAEAB2D13CBA9701C1C
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa
Signing time:             Wed 05 Nov 2025 00:53:15 +0000
ROA not before:           Wed 05 Nov 2025 00:48:15 +0000
ROA not after:            Wed 04 Nov 2026 00:53:15 +0000
asID:                     267469
IP address blocks:        192.141.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f4:b4:56:4f:99:60:58:9d:a3:6b:ae:ab:2d:13:cb:a9:70:1c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Nov  5 00:48:15 2025 GMT
            Not After : Nov  4 00:53:15 2026 GMT
        Subject: CN=CA1974D1EC1950C4556BBFC31368611CB9B9A762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:cf:97:a0:22:ee:5f:51:de:a8:7f:8b:c3:
                    2a:6c:37:6a:f2:ad:cc:f7:5a:15:d7:77:df:1c:0d:
                    ba:e1:3d:10:7d:0d:91:10:6f:57:70:6d:a7:10:0c:
                    32:e1:e1:30:94:7a:1b:86:8e:e0:90:94:e2:c6:99:
                    61:86:92:36:8a:e1:54:6a:2e:c7:3f:c2:4c:ab:b8:
                    12:a8:72:a6:91:a7:0a:8e:39:a8:34:94:eb:b8:f7:
                    f8:88:f1:e1:0a:52:6a:d8:18:4c:78:18:b2:19:a3:
                    f7:10:4d:22:44:10:8b:0e:fb:9e:df:e3:b7:bc:be:
                    08:28:a7:1a:28:1b:b0:64:a1:f9:da:90:ff:49:f0:
                    05:d9:d2:aa:ad:16:df:fa:9e:0d:e2:6c:b0:db:6b:
                    de:7c:bf:96:70:f3:b7:47:ff:cc:39:24:d1:aa:9a:
                    71:60:18:cd:82:0d:bf:df:8a:1a:2e:d4:45:ed:d5:
                    1f:51:b2:a3:eb:63:a7:ae:d6:a3:d1:f4:e1:f0:ed:
                    b8:cd:6c:7c:d2:6e:b3:ab:99:e8:8a:61:45:15:cc:
                    6a:43:94:01:e0:ca:0d:4c:d4:bb:ec:b5:e7:74:13:
                    c2:b4:61:86:ba:a1:1f:5d:a3:d4:44:e1:76:33:f7:
                    ff:83:04:75:57:9e:4f:de:39:90:c0:01:e1:da:8d:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:74:D1:EC:19:50:C4:55:6B:BF:C3:13:68:61:1C:B9:B9:A7:62
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:8e:8e:21:09:6d:ce:dd:2a:92:f7:d1:3c:60:be:66:96:e1:
         e9:13:d4:c3:56:c8:73:a2:0f:95:da:9b:26:23:93:91:e0:3a:
         dd:19:df:fb:75:e4:e9:8a:31:7e:18:c1:d2:12:60:32:2d:28:
         a3:d6:7d:f4:84:be:52:5c:b1:cd:71:78:48:dc:66:76:ed:12:
         e8:35:54:0e:b5:4d:b1:e3:e2:90:1d:85:51:9f:1b:41:ed:de:
         4a:d0:68:0e:f2:5a:07:2a:e2:6f:40:c6:f3:c9:84:a6:cc:2d:
         a2:f1:7b:76:e1:3f:5f:e0:aa:39:d3:20:ea:d4:6d:4e:0a:59:
         13:d8:5b:58:00:62:65:ab:62:56:6b:6c:2c:53:3c:17:24:10:
         7b:09:d8:9d:de:52:86:63:52:90:27:31:15:fa:56:3f:c2:c3:
         4f:91:54:14:23:e6:dc:d1:e2:39:1b:b8:2b:2b:b5:14:d8:4d:
         5c:cc:b9:a1:f3:79:06:31:a4:2b:88:13:34:6b:1c:3d:f7:18:
         ca:2c:a0:99:7c:ea:df:00:19:58:85:68:11:58:6c:37:29:d8:
         fe:61:70:df:02:c4:02:f9:5c:a1:76:19:5e:ed:44:f1:bb:6d:
         8a:b9:e2:51:21:ec:89:27:74:05:ab:37:c2:04:74:76:9d:9a:
         3d:c0:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:24:27 2025 by rpki-client