This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231352e302f32342d3234203d3e20323731323234.roa
File:                     3137392e34392e3231352e302f32342d3234203d3e20323731323234.roa (raw, json)
Hash identifier:          g3beEnyptNjuNQAJsVlxLQIcUp3b9A8hJ3V2+XsXT8A=
Subject key identifier:   A6:85:69:B2:B9:45:6C:B3:FE:E8:9E:FE:31:5A:91:EC:2B:C3:3B:57
Certificate issuer:       /CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
Certificate serial:       41F40D9AE526E309BB16EF9EBB1AE9C1C3D19164
Authority key identifier: 6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231352e302f32342d3234203d3e20323731323234.roa
Signing time:             Thu 11 Dec 2025 22:46:48 +0000
ROA not before:           Thu 11 Dec 2025 22:41:48 +0000
ROA not after:            Thu 10 Dec 2026 22:46:48 +0000
asID:                     271224
IP address blocks:        179.49.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl
                          rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 16:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f4:0d:9a:e5:26:e3:09:bb:16:ef:9e:bb:1a:e9:c1:c3:d1:91:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
        Validity
            Not Before: Dec 11 22:41:48 2025 GMT
            Not After : Dec 10 22:46:48 2026 GMT
        Subject: CN=A68569B2B9456CB3FEE89EFE315A91EC2BC33B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:00:f1:13:ed:32:f3:7e:36:a0:73:57:25:
                    29:50:3a:a7:6e:53:09:30:3c:0d:35:c6:37:ec:7e:
                    11:ab:ea:ba:d1:8e:63:f5:c5:4a:2b:fb:28:e9:3b:
                    f3:06:e9:2e:8a:a0:c4:7e:1c:20:4f:2a:88:36:50:
                    05:ae:3d:40:1e:de:39:11:3a:5d:f5:79:91:13:45:
                    10:68:cd:26:14:50:ff:f1:de:aa:fc:67:61:49:5f:
                    c0:a2:da:ce:af:d1:9e:72:ca:94:56:cf:dc:b1:4a:
                    1e:34:0c:17:ee:2a:cc:95:3f:3d:b9:a7:96:52:34:
                    e4:7a:8b:66:df:af:3c:4e:ce:1d:8b:25:5e:c3:c4:
                    32:5b:5c:6e:96:e3:97:13:ad:64:3c:c4:7e:ed:ef:
                    05:51:c3:ce:a0:4c:54:0b:e8:39:e4:db:f6:1d:a6:
                    0b:48:22:9c:d0:33:93:2d:b6:8f:d6:a2:f9:ae:5c:
                    f1:23:d6:4f:1d:0f:27:3e:87:8b:2d:70:d8:58:c8:
                    36:71:3d:e6:b3:73:62:af:c7:c5:aa:0a:ae:56:19:
                    1a:fb:63:5a:09:c8:db:b9:32:bf:e5:2f:73:46:af:
                    87:9e:f8:3f:eb:b1:5e:42:b9:11:5a:3c:06:c3:c9:
                    eb:e3:44:d1:ec:6d:6d:6b:ad:81:f9:96:1f:ef:bd:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:85:69:B2:B9:45:6C:B3:FE:E8:9E:FE:31:5A:91:EC:2B:C3:3B:57
            X509v3 Authority Key Identifier:
                keyid:6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231352e302f32342d3234203d3e20323731323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:f5:dd:f1:04:5b:46:be:06:5a:10:43:75:f8:a7:14:0d:
         6e:78:2e:cd:12:82:f5:f3:99:1d:6c:02:52:32:cd:bd:58:02:
         54:f8:17:42:f9:d4:5e:fa:5a:69:c9:f0:b8:69:09:f9:43:a3:
         c6:87:c2:9b:c4:33:cb:22:5a:28:49:3a:50:44:78:62:60:3f:
         f4:08:b8:83:c9:5a:86:e3:2a:10:a1:08:c5:47:d8:52:2a:26:
         b1:3a:2c:cc:26:a2:e9:93:10:72:d5:f3:9e:56:5a:d6:25:a7:
         99:19:5f:49:49:ad:31:a4:27:6f:62:75:76:c5:99:79:5e:13:
         60:2b:00:1e:c5:5d:a0:3b:3c:bc:64:69:5d:46:7c:4a:fe:f5:
         19:f0:d3:f9:a8:68:72:9b:49:1e:4f:f0:82:9d:a8:53:1e:e9:
         2b:d0:51:48:b5:b8:b7:84:f4:ff:db:3f:63:54:0d:74:be:51:
         7a:56:b2:d1:48:72:a4:01:62:53:e9:91:c0:32:30:6e:3b:d0:
         7d:f1:4d:6d:b6:8d:98:b9:42:c0:92:06:39:16:f3:92:22:27:
         02:04:ef:b6:3c:90:85:b8:0b:a2:82:d6:af:dd:dc:6a:96:96:
         e6:51:a1:3a:71:7f:02:0d:61:17:d8:0e:3a:3a:cc:e7:02:c6:
         c3:dd:1d:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQfQNmuUm4wm7Fu+euxrpwcPRkWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNEOTU0MURGMTFEQTQ4RkU2Q0U0OEQ4NDcxRjcxQUFC
MTBFNjM5QjAeFw0yNTEyMTEyMjQxNDhaFw0yNjEyMTAyMjQ2NDhaMDMxMTAvBgNV
BAMTKEE2ODU2OUIyQjk0NTZDQjNGRUU4OUVGRTMxNUE5MUVDMkJDMzNCNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTngDxE+0y8342oHNXJSlQOqdu
UwkwPA01xjfsfhGr6rrRjmP1xUor+yjpO/MG6S6KoMR+HCBPKog2UAWuPUAe3jkR
Ol31eZETRRBozSYUUP/x3qr8Z2FJX8Ci2s6v0Z5yypRWz9yxSh40DBfuKsyVPz25
p5ZSNOR6i2bfrzxOzh2LJV7DxDJbXG6W45cTrWQ8xH7t7wVRw86gTFQL6Dnk2/Yd
pgtIIpzQM5Mtto/WovmuXPEj1k8dDyc+h4stcNhYyDZxPeazc2Kvx8WqCq5WGRr7
Y1oJyNu5Mr/lL3NGr4ee+D/rsV5CuRFaPAbDyevjRNHsbW1rrYH5lh/vvZ/BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpoVpsrlFbLP+6J7+MVqR7CvDO1cwHwYDVR0j
BBgwFoAUbNlUHfEdpI/mzkjYRx9xqrEOY5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VySkxhOUs3Sjl2d1lSSk5ZWXBFWGRZNDc4ZEhDNkVmUTRnZnh4M1lU
Z3IvMC82Q0Q5NTQxREYxMURBNDhGRTZDRTQ4RDg0NzFGNzFBQUIxMEU2MzlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDRDk1NDFERjExREE0OEZF
NkNFNDhEODQ3MUY3MUFBQjEwRTYzOUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1ckpMYTlLN0o5dndZUkpOWVlwRVhkWTQ3OGRIQzZFZlE0Z2Z4eDNZVGdyLzAv
MzEzNzM5MmUzNDM5MmUzMjMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzMdcwDQYJKoZIhvcNAQELBQADggEBAF+p9d3x
BFtGvgZaEEN1+KcUDW54Ls0SgvXzmR1sAlIyzb1YAlT4F0L51F76WmnJ8LhpCflD
o8aHwpvEM8siWihJOlBEeGJgP/QIuIPJWobjKhChCMVH2FIqJrE6LMwmoumTEHLV
855WWtYlp5kZX0lJrTGkJ29idXbFmXleE2ArAB7FXaA7PLxkaV1GfEr+9Rnw0/mo
aHKbSR5P8IKdqFMe6SvQUUi1uLeE9P/bP2NUDXS+UXpWstFIcqQBYlPpkcAyMG47
0H3xTW22jZi5QsCSBjkW85IiJwIE77Y8kIW4C6KC1q/d3GqWluZRoTpxfwINYRfY
Djo6zOcCxsPdHeA=
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:51:01 2025 by rpki-client