This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
File:                     3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa (raw, json)
Hash identifier:          i8DYCK+VEve0GJhzcD2/7Z+WJtvZGuX1a7bc82+JrTg=
Subject key identifier:   A3:9F:D2:2F:3A:26:4B:5D:6B:72:36:5E:B0:1A:08:F2:D3:3C:7F:FB
Certificate issuer:       /CN=E9D70132186E718BADCF6045080D069DC88D24AB
Certificate serial:       23FA4890F85614B423F7EFB2F5D1DC04E533162A
Authority key identifier: E9:D7:01:32:18:6E:71:8B:AD:CF:60:45:08:0D:06:9D:C8:8D:24:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D70132186E718BADCF6045080D069DC88D24AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
Signing time:             Fri 12 Dec 2025 12:41:19 +0000
ROA not before:           Fri 12 Dec 2025 12:36:19 +0000
ROA not after:            Fri 11 Dec 2026 12:41:19 +0000
asID:                     270430
IP address blocks:        190.111.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D70132186E718BADCF6045080D069DC88D24AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 22:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fa:48:90:f8:56:14:b4:23:f7:ef:b2:f5:d1:dc:04:e5:33:16:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D70132186E718BADCF6045080D069DC88D24AB
        Validity
            Not Before: Dec 12 12:36:19 2025 GMT
            Not After : Dec 11 12:41:19 2026 GMT
        Subject: CN=A39FD22F3A264B5D6B72365EB01A08F2D33C7FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:85:8c:6c:d8:f3:ac:72:28:e3:28:1d:c0:
                    8c:a8:9a:bb:19:e8:87:d1:08:21:79:51:1d:db:58:
                    7c:8a:2d:47:dd:d1:2d:97:b3:6b:cb:49:f5:4a:1f:
                    d2:ac:a0:31:4a:87:64:9b:fe:4d:a2:db:4c:f5:4d:
                    77:38:8b:73:53:d9:72:92:20:26:3e:8b:7d:b9:06:
                    e4:ff:5b:d5:0d:23:8c:ee:6d:b2:32:4c:84:10:d2:
                    cc:44:e2:da:c2:09:ee:19:79:e4:ff:93:ba:18:e8:
                    2d:c3:0a:69:f6:12:da:42:77:18:3d:f6:fa:59:06:
                    a3:0c:be:2a:3a:76:64:b7:c7:db:7b:4f:1b:a1:69:
                    ef:19:09:a2:ed:19:00:7e:56:3a:96:69:99:b7:b6:
                    da:fc:cf:6c:49:2f:eb:54:bc:37:fc:4d:99:d7:4c:
                    e3:8d:a5:cf:a2:67:db:93:40:b6:99:9b:93:2f:cc:
                    fe:2b:88:61:d2:9d:0e:9b:02:3e:0d:7b:34:b0:44:
                    88:22:d3:98:e7:a0:0e:78:4f:27:6a:6c:e6:4b:2b:
                    93:68:d1:10:2f:78:2d:73:a3:d3:ed:d0:b6:65:b2:
                    8e:f7:57:2d:dc:c3:f4:88:d7:c7:7f:76:2b:8d:c5:
                    b8:ad:b1:01:14:e8:5c:ba:45:b9:ea:ef:fe:8c:81:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9F:D2:2F:3A:26:4B:5D:6B:72:36:5E:B0:1A:08:F2:D3:3C:7F:FB
            X509v3 Authority Key Identifier:
                keyid:E9:D7:01:32:18:6E:71:8B:AD:CF:60:45:08:0D:06:9D:C8:8D:24:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D70132186E718BADCF6045080D069DC88D24AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:e0:b0:d0:59:a5:ff:2b:24:07:2f:0d:a7:48:19:15:b0:db:
         fc:bc:1b:23:5b:61:3f:b9:3b:11:40:86:95:1c:0c:e2:f6:be:
         ea:28:d7:a2:43:94:be:72:ff:fa:26:71:ad:f8:38:7b:73:68:
         b5:91:28:b0:c6:1b:05:a6:60:df:34:fd:98:cc:f2:b7:ab:a0:
         53:67:df:fd:5a:a9:d2:80:83:0a:1e:e9:a3:bc:b2:43:31:d9:
         55:a6:b3:db:bb:c9:a2:a9:e7:6f:3b:26:fe:b5:5d:f0:d0:ee:
         a5:6a:16:87:33:04:e6:97:93:f0:e7:ed:7c:3a:c7:a9:e8:b0:
         20:50:d1:f1:bd:a2:3e:a8:c1:f3:fc:91:30:a7:2b:12:30:93:
         00:b9:37:82:be:d7:61:55:7a:cb:96:68:4c:fe:70:24:c9:e6:
         94:f8:79:70:8e:80:d1:41:55:1f:1f:4b:e5:09:81:6f:33:bd:
         0f:5d:32:56:d7:29:cc:02:72:c6:63:5f:ef:fb:4c:34:6b:1a:
         79:38:86:75:0f:85:10:90:95:76:28:ad:73:5a:57:4c:d3:89:
         16:1c:80:21:35:c0:d0:9c:7a:1a:2d:a8:71:42:2e:ce:8b:81:
         b0:15:f2:3b:89:e2:ab:6d:f2:fa:af:62:73:33:55:cd:ed:a5:
         5e:ab:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:09:26 2025 by rpki-client