This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          3lbp6/GDyDIRhGqptMoh3rrDa9A7CZJ7NtBbyxWw1G8=
Subject key identifier:   AF:9F:FD:52:4B:8D:63:D1:16:F2:85:1C:25:D1:97:E5:FE:49:C0:EC
Certificate issuer:       /CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Certificate serial:       6DAB769D459BCD3376DFDD94FC7A508CA5DC3CE7
Authority key identifier: 71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
Signing time:             Wed 17 Dec 2025 21:11:43 +0000
ROA not before:           Wed 17 Dec 2025 21:06:43 +0000
ROA not after:            Wed 16 Dec 2026 21:11:43 +0000
asID:                     28360
IP address blocks:        189.76.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ab:76:9d:45:9b:cd:33:76:df:dd:94:fc:7a:50:8c:a5:dc:3c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7155F95F3F50406AE68A9CCF51483483D251BB70
        Validity
            Not Before: Dec 17 21:06:43 2025 GMT
            Not After : Dec 16 21:11:43 2026 GMT
        Subject: CN=AF9FFD524B8D63D116F2851C25D197E5FE49C0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:07:19:79:30:23:b6:70:37:8d:2e:cb:1c:64:
                    da:49:6b:71:03:23:a7:8c:41:ad:0e:88:70:65:c5:
                    18:0f:d4:b3:09:d1:e8:7b:30:3c:c2:71:c4:a6:5c:
                    80:d2:cd:14:74:b2:4b:cb:56:e5:91:de:57:aa:d6:
                    fa:cc:13:23:05:d6:bd:8e:cd:3c:1e:99:f1:84:16:
                    b1:8f:6f:fb:e6:d0:84:04:44:dd:ff:17:54:ef:c9:
                    90:35:cf:3b:1c:da:43:e6:e1:72:8d:64:02:85:38:
                    ec:2c:79:a1:ee:10:a1:96:f9:09:de:13:a2:17:5e:
                    2a:41:6b:82:1c:2b:a9:b6:1b:ea:bd:8c:12:76:1b:
                    06:bd:42:98:bb:81:85:10:43:e6:95:4b:e9:ce:2f:
                    2d:63:cd:98:77:eb:bc:e2:bd:1b:88:1e:e5:6b:81:
                    47:76:57:83:89:73:52:65:18:db:c0:46:f9:ad:47:
                    3d:f0:4e:33:69:7d:22:1b:fc:8e:a8:3d:de:6d:ac:
                    29:f7:64:84:5c:8b:ed:34:72:64:6c:cb:2c:cf:32:
                    d8:8a:e9:75:a9:bc:5f:c3:76:ad:32:82:64:14:ff:
                    89:4c:8b:0b:3c:cc:1d:70:c8:88:d5:a0:09:6d:f8:
                    cf:03:15:16:1a:11:5e:96:e0:7c:40:09:d8:63:9b:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9F:FD:52:4B:8D:63:D1:16:F2:85:1C:25:D1:97:E5:FE:49:C0:EC
            X509v3 Authority Key Identifier:
                keyid:71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:e3:1c:71:83:6f:e8:c8:42:49:46:0f:bf:f7:11:2b:7a:23:
         ea:eb:d8:46:92:ad:c1:b3:40:d3:8f:20:f4:6f:a7:2f:76:ab:
         21:20:b9:7f:02:90:19:a4:03:2b:ae:b8:c7:fb:0a:d6:cf:3a:
         14:3b:45:ef:68:a7:6b:24:63:20:37:cf:8a:72:97:a1:58:7f:
         72:86:a6:da:d9:43:d9:d6:4b:95:2b:6c:db:93:c2:b8:61:5a:
         a9:ef:a1:6e:73:da:ac:00:4d:7c:c7:f3:f2:fd:c4:b8:ae:27:
         a6:1a:e1:9b:be:ff:67:22:58:74:7d:33:0d:97:4a:05:d9:95:
         08:0e:3f:f8:90:ec:a6:3c:a9:53:ca:df:dd:91:6f:48:63:e9:
         6a:65:a6:48:94:33:27:87:ed:6a:73:b9:55:75:55:32:32:fa:
         b3:72:fb:6b:14:1a:f8:f8:0f:63:f7:55:05:e3:07:0f:b5:b0:
         98:91:43:53:6f:e2:9c:65:d3:0c:7f:42:3b:0d:50:bd:78:0f:
         1e:3a:49:20:ba:7d:8f:4e:ac:0b:af:f3:b7:56:d9:25:56:88:
         4b:26:fb:31:8d:ec:03:47:4d:e9:7e:98:08:15:29:f6:32:c0:
         8c:bb:cc:20:fe:b6:94:37:87:47:25:e0:ae:67:9a:e8:68:80:
         bb:51:a9:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbat2nUWbzTN2392U/HpQjKXcPOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE1NUY5NUYzRjUwNDA2QUU2OEE5Q0NGNTE0ODM0ODNE
MjUxQkI3MDAeFw0yNTEyMTcyMTA2NDNaFw0yNjEyMTYyMTExNDNaMDMxMTAvBgNV
BAMTKEFGOUZGRDUyNEI4RDYzRDExNkYyODUxQzI1RDE5N0U1RkU0OUMwRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBxl5MCO2cDeNLsscZNpJa3ED
I6eMQa0OiHBlxRgP1LMJ0eh7MDzCccSmXIDSzRR0skvLVuWR3leq1vrMEyMF1r2O
zTwemfGEFrGPb/vm0IQERN3/F1TvyZA1zzsc2kPm4XKNZAKFOOwseaHuEKGW+Qne
E6IXXipBa4IcK6m2G+q9jBJ2Gwa9Qpi7gYUQQ+aVS+nOLy1jzZh367zivRuIHuVr
gUd2V4OJc1JlGNvARvmtRz3wTjNpfSIb/I6oPd5trCn3ZIRci+00cmRsyyzPMtiK
6XWpvF/Ddq0ygmQU/4lMiws8zB1wyIjVoAlt+M8DFRYaEV6W4HxACdhjm3dFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUr5/9UkuNY9EW8oUcJdGX5f5JwOwwHwYDVR0j
BBgwFoAUcVX5Xz9QQGrmipzPUUg0g9JRu3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC83MTU1Rjk1RjNGNTA0MDZBRTY4QTlDQ0Y1MTQ4MzQ4M0QyNTFCQjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNTVGOTVGM0Y1MDQwNkFF
NjhBOUNDRjUxNDgzNDgzRDI1MUJCNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzODM5MmUzNzM2MmUzMjMyMzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvUzgMA0GCSqGSIb3DQEBCwUAA4IBAQAf4xxxg2/o
yEJJRg+/9xEreiPq69hGkq3Bs0DTjyD0b6cvdqshILl/ApAZpAMrrrjH+wrWzzoU
O0XvaKdrJGMgN8+KcpehWH9yhqba2UPZ1kuVK2zbk8K4YVqp76Fuc9qsAE18x/Py
/cS4riemGuGbvv9nIlh0fTMNl0oF2ZUIDj/4kOymPKlTyt/dkW9IY+lqZaZIlDMn
h+1qc7lVdVUyMvqzcvtrFBr4+A9j91UF4wcPtbCYkUNTb+KcZdMMf0I7DVC9eA8e
Okkgun2PTqwLr/O3VtklVohLJvsxjewDR03pfpgIFSn2MsCMu8wg/raUN4dHJeCu
Z5roaIC7Ual+
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:16:56 2025 by rpki-client