This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/3136302e31392e34362e302f32342d3234203d3e20323636313539.roa
File:                     3136302e31392e34362e302f32342d3234203d3e20323636313539.roa (raw, json)
Hash identifier:          gLdIC3WeQyEe6FNn3iz57v39ARHSnVa/uO2Q2nZ0myg=
Subject key identifier:   57:9E:C0:87:E8:94:D1:7A:EF:3B:71:DA:76:B9:BD:7E:57:FD:4D:CD
Certificate issuer:       /CN=69B7F5A9658DE6458B100966610F13A42172540B
Certificate serial:       52120FB6B77E6973F9BC260F7CE7E66BF1E1539B
Authority key identifier: 69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/3136302e31392e34362e302f32342d3234203d3e20323636313539.roa
Signing time:             Sat 13 Dec 2025 21:28:35 +0000
ROA not before:           Sat 13 Dec 2025 21:23:35 +0000
ROA not after:            Sat 12 Dec 2026 21:28:35 +0000
asID:                     266159
IP address blocks:        160.19.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.crl
                          rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:12:0f:b6:b7:7e:69:73:f9:bc:26:0f:7c:e7:e6:6b:f1:e1:53:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B7F5A9658DE6458B100966610F13A42172540B
        Validity
            Not Before: Dec 13 21:23:35 2025 GMT
            Not After : Dec 12 21:28:35 2026 GMT
        Subject: CN=579EC087E894D17AEF3B71DA76B9BD7E57FD4DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:9c:c4:05:10:18:6f:9d:59:82:8e:11:7e:
                    90:f6:3e:67:8a:40:02:91:40:0e:2a:b9:b4:90:38:
                    27:cc:cb:ab:95:4b:64:e4:e9:d9:79:14:1a:0b:3e:
                    1b:3b:95:aa:b5:49:9c:e5:b3:73:c3:82:c2:ca:75:
                    f9:6b:a8:49:b7:17:a2:6e:1d:f6:69:8d:e6:e3:c9:
                    49:a1:a2:71:88:85:5a:72:16:cb:53:9b:71:7c:52:
                    07:8d:e8:68:b7:a6:25:e4:45:26:26:a3:59:81:f4:
                    c8:a8:6a:86:c7:28:1a:a7:60:82:54:12:c5:a3:f6:
                    d3:e3:26:b5:af:5d:3b:da:27:44:32:f5:ee:19:46:
                    b1:d0:cb:c2:d3:53:4e:95:bb:80:1a:5b:b7:9e:6d:
                    a3:a5:c3:5a:7f:66:a9:f6:c1:d5:87:9d:37:df:0c:
                    cb:a7:d5:72:da:2d:7f:2d:09:75:40:e6:84:fc:8b:
                    cf:a3:dd:d7:8c:13:e6:1a:15:7d:5e:3b:8c:78:ff:
                    8d:40:36:d0:52:24:ad:3e:34:92:a9:fc:c3:09:87:
                    00:28:a4:02:ed:40:f7:90:66:d5:04:c2:df:24:57:
                    f8:ac:e7:51:2f:2a:68:d5:6d:76:a8:f4:c4:38:13:
                    3f:8b:c4:1a:a4:59:22:62:1c:12:6f:eb:fb:73:91:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9E:C0:87:E8:94:D1:7A:EF:3B:71:DA:76:B9:BD:7E:57:FD:4D:CD
            X509v3 Authority Key Identifier:
                keyid:69:B7:F5:A9:65:8D:E6:45:8B:10:09:66:61:0F:13:A4:21:72:54:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/69B7F5A9658DE6458B100966610F13A42172540B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B7F5A9658DE6458B100966610F13A42172540B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/1/3136302e31392e34362e302f32342d3234203d3e20323636313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:46:70:e7:24:f0:0d:3d:56:17:56:5e:3b:2b:7d:31:c5:23:
         6c:5b:aa:40:7d:35:e8:9d:b0:cc:7b:68:bc:67:e6:7b:68:37:
         f1:4a:1e:d8:76:50:2e:82:b8:c9:5d:e1:4d:bd:b2:b2:60:91:
         87:e3:ba:6a:65:56:59:f9:b0:8a:31:16:13:c7:92:1f:78:02:
         4a:23:3c:1c:e6:14:e0:9e:03:b3:31:ae:37:63:8e:06:09:1d:
         00:82:09:b9:81:1e:1f:bb:be:a1:71:c1:a5:be:f1:2d:b7:29:
         4b:c7:da:84:61:d9:cc:85:7a:35:b4:23:ac:fd:66:19:47:54:
         40:0d:46:36:8e:2e:08:8c:b7:56:3c:dd:4c:2e:f0:14:b3:9c:
         36:4a:63:cc:93:82:a9:e1:1a:36:e1:15:67:42:e8:c0:33:5b:
         7c:3f:b5:ae:b4:c8:15:71:6f:0f:e6:5f:20:25:c6:4b:bd:5f:
         11:ae:cc:8f:b2:ab:a7:0d:b1:3d:c3:78:6c:9d:8c:06:8f:5f:
         e7:cb:ee:b2:59:3c:1c:3f:d5:28:9a:5d:14:bf:df:fd:5a:83:
         70:4a:c7:e7:67:b4:54:ba:b5:49:7f:4b:0e:9a:04:e3:f9:9c:
         12:78:09:ca:77:93:c3:5f:89:e8:fe:6b:21:29:6c:e1:86:c2:
         f3:ce:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:57:05 2025 by rpki-client