This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231332e302f32342d3234203d3e20323731323234.roa
File:                     3137392e34392e3231332e302f32342d3234203d3e20323731323234.roa (raw, json)
Hash identifier:          u+0ZRCDfel4dtLg8JiGL5J462kRqlPbLDI4C+8EJPSE=
Subject key identifier:   C1:DE:20:9C:35:50:E0:7E:19:1A:F7:96:A9:4A:C8:AA:35:AD:E2:32
Certificate issuer:       /CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
Certificate serial:       1F2A2E6905E8779833D1DE5D1B34A4E1AB5DD75D
Authority key identifier: 6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231332e302f32342d3234203d3e20323731323234.roa
Signing time:             Thu 11 Dec 2025 22:46:17 +0000
ROA not before:           Thu 11 Dec 2025 22:41:17 +0000
ROA not after:            Thu 10 Dec 2026 22:46:17 +0000
asID:                     271224
IP address blocks:        179.49.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl
                          rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 16:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2a:2e:69:05:e8:77:98:33:d1:de:5d:1b:34:a4:e1:ab:5d:d7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
        Validity
            Not Before: Dec 11 22:41:17 2025 GMT
            Not After : Dec 10 22:46:17 2026 GMT
        Subject: CN=C1DE209C3550E07E191AF796A94AC8AA35ADE232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ec:4b:e3:f6:9e:7e:c0:12:77:67:0b:5a:19:
                    e7:70:bf:74:c5:80:49:b5:87:28:9e:94:06:9a:e3:
                    16:1b:ee:3d:93:f5:50:6d:51:9e:54:35:4d:3f:5f:
                    a4:b2:47:4c:65:fd:09:ca:de:b1:0c:2b:59:6c:6e:
                    db:49:12:ba:47:f7:71:57:29:eb:0c:ed:ad:4c:2e:
                    89:1a:15:b1:53:cb:e8:75:da:46:ac:6a:85:3e:9c:
                    33:7f:91:84:5a:c2:97:ab:2f:66:8b:30:a3:fd:ac:
                    a9:ca:65:69:2f:32:9a:f6:88:08:f3:67:e3:e3:4e:
                    60:fa:0d:a5:6f:97:8b:41:38:ad:5b:f5:32:d6:35:
                    fb:d8:6d:20:27:0b:c1:7f:8f:ec:1b:6a:e4:ba:4f:
                    5e:c2:4c:54:c6:9d:ce:9f:66:38:3d:99:24:b5:08:
                    49:97:17:65:02:7f:c5:70:1f:06:d5:92:1b:82:8a:
                    7c:1d:8b:e3:5c:2a:c6:d9:30:7d:c6:32:19:17:1c:
                    59:37:83:05:b9:7e:e2:4c:96:e3:2d:6a:f7:17:8d:
                    7e:c0:d7:6d:fa:cd:2c:74:95:c7:b9:59:41:0d:ff:
                    95:34:fa:ff:8b:da:96:b8:e8:f2:e3:d4:d5:54:cc:
                    36:23:34:be:bb:fe:5d:74:2e:49:7c:75:81:0d:60:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DE:20:9C:35:50:E0:7E:19:1A:F7:96:A9:4A:C8:AA:35:AD:E2:32
            X509v3 Authority Key Identifier:
                keyid:6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231332e302f32342d3234203d3e20323731323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:45:67:ae:7d:3a:a7:79:85:6f:ad:86:a5:fb:b2:7b:7c:fa:
         5b:5b:c6:86:ee:db:20:ab:84:dd:ed:e5:df:29:8f:02:c7:92:
         dc:5e:f0:0c:a2:73:3a:79:82:e3:96:6d:4c:04:ac:c5:cf:68:
         23:ed:29:26:36:cb:a1:8d:c4:ea:f1:0a:be:9d:ae:48:77:e8:
         36:de:2c:88:98:6f:51:7f:b3:4e:84:5a:77:7e:23:26:67:2b:
         0a:c0:6e:07:75:ad:71:1c:77:40:66:3a:4f:fe:35:b2:33:d7:
         58:01:73:ef:3c:e6:14:34:f4:9b:9f:40:7f:45:b5:7b:dc:57:
         f0:c4:18:82:b3:79:72:de:a4:55:fe:ab:2c:2d:1d:97:36:f1:
         54:6a:f1:56:a2:36:46:40:ae:52:22:91:47:62:5b:70:e5:2a:
         bd:05:bb:3c:53:15:33:6d:48:e6:81:2f:c9:3e:4a:e5:ad:07:
         b9:8d:b1:4b:1c:19:9c:c7:89:4d:91:cd:85:3a:16:55:69:00:
         bd:eb:b7:0a:2c:53:0d:3a:df:e3:ca:bc:7b:65:66:5f:88:b7:
         8c:0a:ad:cf:94:ed:9a:15:a6:89:a6:ff:04:fc:11:77:11:9a:
         e8:19:78:06:7d:ce:5c:30:25:0a:7e:8b:2b:41:49:f2:f0:a8:
         f0:72:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:51:03 2025 by rpki-client