This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa
File:                     3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa (raw, json)
Hash identifier:          CtmUcc2hQQUx6+tS03GN4WKcHkEx/c8Hj7Pr+9tBhRo=
Subject key identifier:   E7:82:12:F8:DF:3A:87:87:39:64:30:0E:36:93:39:B2:EB:98:63:C2
Certificate issuer:       /CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
Certificate serial:       7C3A4E08CB32D2C643B37B34103221FD17BC955B
Authority key identifier: 14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa
Signing time:             Fri 19 Dec 2025 00:46:46 +0000
ROA not before:           Fri 19 Dec 2025 00:41:46 +0000
ROA not after:            Fri 18 Dec 2026 00:46:46 +0000
asID:                     271345
IP address blocks:        181.189.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl
                          rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 14:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3a:4e:08:cb:32:d2:c6:43:b3:7b:34:10:32:21:fd:17:bc:95:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
        Validity
            Not Before: Dec 19 00:41:46 2025 GMT
            Not After : Dec 18 00:46:46 2026 GMT
        Subject: CN=E78212F8DF3A87873964300E369339B2EB9863C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:e1:7a:a0:cc:0c:51:0f:bc:4d:ac:ca:84:
                    53:7c:f4:43:4e:db:71:0f:2a:42:3a:53:bc:9a:92:
                    20:29:1a:bf:84:5f:0f:3f:70:68:29:13:9f:ba:a0:
                    2a:77:73:a1:7a:a4:e8:69:fe:e4:94:07:cc:e3:42:
                    a0:da:a7:65:48:84:f5:c3:c2:1d:e9:28:92:5a:b9:
                    fa:78:9b:3c:ec:f4:8e:4d:c2:cc:27:da:04:f0:1a:
                    55:cd:74:99:0f:82:56:e6:2b:e1:51:01:1b:73:2a:
                    05:6d:58:39:bd:e5:2a:4c:1a:84:d5:1d:37:11:79:
                    e4:0c:fe:64:a9:6b:c9:2f:9d:63:8e:23:4d:22:ed:
                    8b:46:44:28:1e:01:6a:3f:7e:9d:37:b8:a8:85:17:
                    00:74:81:f9:cd:3c:3c:37:24:54:51:7f:25:3f:8b:
                    6b:d7:68:14:43:bb:ce:0f:81:b3:67:96:89:55:ff:
                    78:10:fd:8a:5c:f9:5d:eb:2b:77:4b:2d:7f:dd:26:
                    b0:66:22:47:8c:8b:a5:db:e1:4b:6c:17:21:95:1d:
                    a8:45:dc:22:6f:af:a9:ab:33:27:a5:c9:f3:10:00:
                    6e:d4:ae:92:d9:19:1c:d5:b9:78:d8:f2:f3:37:bd:
                    85:2d:47:34:75:4d:b4:f7:31:22:41:da:5e:a7:92:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:82:12:F8:DF:3A:87:87:39:64:30:0E:36:93:39:B2:EB:98:63:C2
            X509v3 Authority Key Identifier:
                keyid:14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:d6:c4:f1:e5:46:79:50:d0:69:5e:86:9d:47:2e:6e:9e:73:
         61:50:49:cf:11:60:be:79:81:3b:0f:df:ec:30:85:c5:e3:37:
         31:97:cd:ce:a8:74:73:f8:71:6e:9a:8e:46:24:73:00:6b:e4:
         87:0a:42:ae:c2:44:fa:2f:97:cd:27:0a:1c:e7:86:55:ea:d8:
         50:37:0d:2c:bd:9c:95:80:ee:f6:42:d0:a7:e9:4a:44:e3:36:
         20:aa:6f:5d:58:ba:80:b1:64:ef:99:ba:9f:c5:2c:22:cb:a3:
         f5:6b:cf:d9:3f:a2:52:b0:58:a2:68:2b:0b:a4:ba:66:91:5c:
         07:61:23:70:3a:b5:61:c3:61:3b:1a:b9:72:98:23:3a:96:ba:
         a1:02:65:c3:01:9d:2e:d2:2d:77:6f:a2:69:bf:65:41:1e:c6:
         a6:c9:e4:26:03:2f:66:6f:b2:25:06:b8:c9:96:3d:86:16:e3:
         4b:e2:62:76:44:be:3e:60:03:4b:16:4f:73:0f:ac:80:03:41:
         91:4f:b5:05:e8:ad:2b:65:bc:8e:4b:6a:c0:09:cb:da:7a:9a:
         0f:77:3f:23:dd:98:0e:5b:66:99:85:4a:33:67:c0:5b:29:9e:
         64:5a:1f:3c:a5:02:49:19:7c:1c:14:ef:79:ac:8f:01:4d:52:
         2e:2c:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:08:54 2025 by rpki-client