This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa
File:                     3139312e372e3134342e302f32302d3234203d3e20323633333230.roa (raw, json)
Hash identifier:          ZPSANKileb9HzYxB2xVEbM926Jh1h2EZsqWfdLyMfx4=
Subject key identifier:   61:65:88:88:A2:57:B4:30:60:DC:2E:13:86:12:BC:B1:F2:55:AE:9D
Certificate issuer:       /CN=0AD6FC25670359526F73C3DC618326621E90418D
Certificate serial:       2E9EA9A62E6EC18C5933290AD9288D8065AF3F9E
Authority key identifier: 0A:D6:FC:25:67:03:59:52:6F:73:C3:DC:61:83:26:62:1E:90:41:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AD6FC25670359526F73C3DC618326621E90418D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa
Signing time:             Fri 12 Dec 2025 18:23:52 +0000
ROA not before:           Fri 12 Dec 2025 18:18:52 +0000
ROA not after:            Fri 11 Dec 2026 18:23:52 +0000
asID:                     263320
IP address blocks:        191.7.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/0AD6FC25670359526F73C3DC618326621E90418D.crl
                          rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/0AD6FC25670359526F73C3DC618326621E90418D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AD6FC25670359526F73C3DC618326621E90418D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 20:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9e:a9:a6:2e:6e:c1:8c:59:33:29:0a:d9:28:8d:80:65:af:3f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD6FC25670359526F73C3DC618326621E90418D
        Validity
            Not Before: Dec 12 18:18:52 2025 GMT
            Not After : Dec 11 18:23:52 2026 GMT
        Subject: CN=61658888A257B43060DC2E138612BCB1F255AE9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:72:25:62:d6:67:7e:be:86:ea:02:a1:01:
                    63:95:fa:7b:81:b9:69:7a:69:0e:ec:f6:ca:ca:60:
                    c1:eb:82:af:6c:18:9d:2c:a0:ca:9d:8b:e2:28:4c:
                    ca:90:ee:32:a0:76:d1:4a:05:bb:c3:6a:ce:e3:db:
                    7e:bb:8a:7d:fb:3a:39:d0:98:4c:49:4c:7b:07:b4:
                    75:d4:84:bd:85:c0:0f:8e:9d:5f:56:eb:85:27:9c:
                    03:5c:2c:5d:e8:68:0b:7e:43:96:58:98:26:12:7c:
                    df:92:85:ef:88:2e:7f:fc:15:d1:ad:ea:1e:33:d7:
                    be:d2:02:fc:a5:48:01:1d:8d:5e:9b:22:28:b9:90:
                    cc:ea:e5:65:35:e0:11:b2:e6:02:6e:7c:b0:c2:13:
                    74:06:6e:f9:57:5d:19:61:a1:e0:9a:73:1c:48:82:
                    a2:76:4e:a1:b8:77:f3:8e:cb:34:eb:f0:49:27:c5:
                    36:ab:16:1d:28:2d:4d:76:14:ea:e8:d4:75:15:a9:
                    68:b4:a6:da:59:d3:dd:65:52:f0:6e:f9:7a:97:3a:
                    a6:ab:fb:06:6d:9d:15:a0:7c:85:55:a1:89:74:f1:
                    14:77:77:55:04:92:8c:e8:17:ca:23:4f:ff:85:36:
                    57:45:8b:f5:9a:2b:39:96:43:83:bb:22:68:dd:bf:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:88:88:A2:57:B4:30:60:DC:2E:13:86:12:BC:B1:F2:55:AE:9D
            X509v3 Authority Key Identifier:
                keyid:0A:D6:FC:25:67:03:59:52:6F:73:C3:DC:61:83:26:62:1E:90:41:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/0AD6FC25670359526F73C3DC618326621E90418D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AD6FC25670359526F73C3DC618326621E90418D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:db:39:41:24:7f:46:80:94:0f:09:6a:6e:b2:4c:0e:7e:03:
         dd:34:81:5a:3d:93:98:79:cf:2d:91:3a:45:05:4c:0e:21:ec:
         12:e1:49:91:85:65:b1:96:14:ee:5a:f0:7b:0a:77:2a:23:6c:
         b0:63:b9:72:61:68:51:f8:d1:19:1a:c3:4c:4e:2c:86:33:d2:
         12:10:7a:cd:37:a1:cb:aa:31:ab:08:cc:a3:e6:89:66:1b:f0:
         c1:db:c8:6d:48:13:99:fa:5e:7b:98:45:72:06:67:db:12:22:
         4d:ab:ca:37:52:a0:19:6b:86:0f:47:4a:fb:c8:e6:ea:8c:cc:
         e3:9b:d2:01:5f:e7:96:fb:ba:e0:5c:e4:a6:1c:4d:60:35:7a:
         13:87:cc:14:f1:b9:f5:e8:3e:eb:04:9e:33:e2:f6:4b:69:4e:
         43:7a:31:34:d2:ed:04:64:57:36:1a:0b:11:dd:fa:0e:8e:65:
         49:e8:fb:ae:21:06:6a:33:9d:ef:6a:4a:f1:a8:c0:85:84:c8:
         16:f6:43:b1:d3:2c:6a:00:60:75:d9:21:76:96:7c:c5:d5:7e:
         ba:db:1a:ff:89:10:fd:af:96:be:a8:a3:e8:e4:12:e4:7c:99:
         ff:39:fd:cc:cc:10:10:11:78:33:f6:30:a5:e7:68:3b:b5:3d:
         01:4b:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 22:42:30 2025 by rpki-client