This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
File:                     3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (raw, json)
Hash identifier:          w64eazJo49WaHAWb9xsFK79hFm9z79gbBOQvpfL4vMM=
Subject key identifier:   5E:77:2A:2B:D1:04:08:7A:A2:B5:26:23:F5:E8:BC:2D:0C:EB:58:3C
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       26EAF2AAB6C6F052E660C489B492D1F781C3168E
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
Signing time:             Fri 19 Dec 2025 21:27:27 +0000
ROA not before:           Fri 19 Dec 2025 21:22:27 +0000
ROA not after:            Fri 18 Dec 2026 21:27:27 +0000
asID:                     263022
IP address blocks:        186.249.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 14:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ea:f2:aa:b6:c6:f0:52:e6:60:c4:89:b4:92:d1:f7:81:c3:16:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Dec 19 21:22:27 2025 GMT
            Not After : Dec 18 21:27:27 2026 GMT
        Subject: CN=5E772A2BD104087AA2B52623F5E8BC2D0CEB583C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:e3:ba:30:69:07:0a:bd:61:a1:e9:26:f0:
                    44:df:ba:a2:d3:0c:7e:e8:4f:f1:e2:cc:a5:5a:18:
                    6f:85:87:63:de:45:ae:c8:13:64:4b:07:5a:45:ca:
                    4b:e7:49:17:13:33:bb:54:ad:44:4d:7b:d6:e3:81:
                    9c:a7:69:e7:25:99:47:3d:17:5a:a3:62:4a:1a:97:
                    79:12:6f:53:21:60:8b:53:51:aa:f4:28:1a:33:df:
                    51:db:c2:14:6c:fe:88:36:cb:be:90:64:a6:14:67:
                    9a:0c:09:a0:21:9f:49:d5:70:e7:a8:47:3a:5a:92:
                    27:d6:a7:15:3f:5e:4b:ae:af:2e:65:a7:a7:64:c9:
                    f4:4f:51:5b:24:42:22:5c:30:a2:db:35:c7:5c:53:
                    1f:96:c6:41:d2:aa:2e:56:73:2e:2c:47:ad:ce:6d:
                    18:8d:5a:54:a6:3c:14:c9:6c:25:82:b3:0b:1c:57:
                    ad:e7:bf:74:e8:9d:4e:a0:9d:3e:80:35:a9:21:25:
                    ac:e4:38:4e:dd:8f:80:06:95:d7:f9:14:84:14:af:
                    cf:9b:86:0d:a3:1d:1d:1e:59:4b:87:b9:3a:27:6d:
                    c5:be:9e:f4:b7:1a:bb:cd:f8:c3:ac:58:bb:f2:fc:
                    66:93:98:cb:fc:4e:fc:06:b8:21:c3:8e:2f:c6:3f:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:2A:2B:D1:04:08:7A:A2:B5:26:23:F5:E8:BC:2D:0C:EB:58:3C
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:05:d8:5b:d1:80:f9:f2:58:06:d1:8a:68:cb:2d:59:96:
         c5:b7:6b:25:db:25:91:e9:b6:e0:a3:39:86:d8:a6:ca:61:60:
         a3:f5:1a:d7:ed:bf:38:57:d8:2f:77:70:ee:fa:f6:58:d6:08:
         72:46:d8:f5:b8:37:d3:14:24:46:8b:42:59:11:cb:cc:c9:fe:
         e1:6b:58:0c:a5:28:9c:7d:65:c4:3f:c3:20:e9:c7:ce:1d:d6:
         b1:78:91:6a:9d:c6:4b:77:f0:ea:46:74:5d:23:0e:89:2c:42:
         7a:80:fc:79:ad:8f:cd:5c:7b:c0:6b:28:9a:fc:42:65:44:91:
         be:7e:dd:ec:99:bf:e3:c2:73:3c:97:44:2e:93:bd:58:27:e8:
         f2:12:78:91:53:e9:f5:b3:eb:35:a4:fb:fc:9b:bd:57:93:bd:
         99:52:16:5e:66:ea:44:c1:39:50:8d:ff:70:2f:c1:4d:75:08:
         dc:3e:63:47:93:20:f7:e5:34:62:cc:89:0e:1c:f9:13:4c:4d:
         d4:f5:72:dc:b9:68:61:98:48:3f:5a:7c:31:fe:bd:71:2e:38:
         eb:f0:34:65:44:aa:3e:4c:9c:a8:da:8e:11:90:4e:8c:57:0f:
         73:7c:44:15:60:54:9c:cc:7f:8b:ee:a5:1f:04:93:c6:dd:e5:
         0d:d1:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:01:36 2025 by rpki-client