This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          m7X6laTIv7aKrjJH0WU515n2/siEmusonRVBPp4DOxQ=
Subject key identifier:   E4:21:07:F7:F9:D0:68:AC:11:E6:B8:C8:B6:C9:E5:6A:AA:47:51:50
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       7EC2EA936F8332EBC2854B647C1D055CF04B3E18
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 19 Dec 2025 16:49:59 +0000
ROA not before:           Fri 19 Dec 2025 16:44:59 +0000
ROA not after:            Fri 18 Dec 2026 16:49:59 +0000
asID:                     52930
IP address blocks:        190.180.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 14:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c2:ea:93:6f:83:32:eb:c2:85:4b:64:7c:1d:05:5c:f0:4b:3e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Dec 19 16:44:59 2025 GMT
            Not After : Dec 18 16:49:59 2026 GMT
        Subject: CN=E42107F7F9D068AC11E6B8C8B6C9E56AAA475150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:d0:a3:87:fe:45:51:1d:7a:31:9d:f6:16:
                    a3:1b:40:9b:73:53:69:13:be:1b:7a:a4:4f:f5:37:
                    4e:06:fb:fd:fb:e3:15:2b:98:97:eb:42:55:7b:55:
                    03:e2:92:8c:30:d8:56:7f:e5:38:56:89:3f:da:f7:
                    5e:97:f0:23:7d:cd:49:0d:18:6a:95:58:67:d5:e5:
                    7e:2b:83:a5:02:13:9c:27:3e:69:f7:34:26:02:48:
                    84:2c:3a:f3:f5:85:c2:33:eb:79:5e:93:1b:71:d8:
                    31:44:f0:f9:b2:04:e2:4a:92:b9:3c:e6:54:d6:b1:
                    c3:ff:bb:45:3d:b5:78:cb:45:71:0f:27:e8:5a:e8:
                    4d:1c:ac:29:91:ab:5b:00:7a:8a:e7:d4:81:03:91:
                    fb:5f:5a:a2:89:02:40:a8:61:d3:4f:d5:77:96:1c:
                    a5:59:93:7e:8a:7b:3a:28:28:b3:42:b5:7f:24:9a:
                    ea:33:32:2f:f3:72:ed:5e:bd:92:8d:da:35:1d:d8:
                    3c:8f:9b:6b:0c:37:98:cc:cf:d0:20:16:f5:b3:26:
                    ab:aa:24:91:e5:64:f2:c5:3a:e9:52:0b:a1:ee:77:
                    29:37:2e:45:69:72:45:17:62:a9:67:f5:b3:59:ac:
                    e1:fa:07:84:58:f9:36:0a:5f:df:e4:92:f5:4e:d9:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:21:07:F7:F9:D0:68:AC:11:E6:B8:C8:B6:C9:E5:6A:AA:47:51:50
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:53:c3:1a:d6:22:3a:7f:e5:ea:9e:a8:84:71:07:7e:d8:
         70:69:b3:7a:f6:57:7f:c6:d6:fc:00:cc:26:0e:fe:8a:40:15:
         0a:e8:d0:15:05:1c:e8:f4:87:0a:3a:f2:59:92:32:31:5e:f1:
         e6:63:2a:ea:e3:aa:15:23:11:06:ec:28:17:4d:5a:36:53:27:
         38:bc:ea:01:1d:39:54:0c:0b:c4:d8:5c:03:32:5f:30:03:c4:
         6b:b7:8c:e4:66:bb:48:d5:31:8a:f7:ec:4e:55:b1:14:8b:7f:
         2b:e8:6c:78:ca:df:3b:41:a3:81:0b:83:97:8b:27:ee:4e:e0:
         a4:31:d8:02:b4:57:4f:ab:b8:be:24:31:d7:d9:81:33:86:a5:
         60:51:aa:38:e3:a7:47:9a:fb:0c:43:14:11:23:02:3c:86:8d:
         8b:f3:38:04:b5:bc:03:d3:59:21:af:5a:16:1c:3e:38:6c:b6:
         33:0e:14:da:53:5a:29:65:88:b7:70:35:10:0f:6c:58:0b:b1:
         dd:5b:74:66:36:34:39:09:71:c7:d2:c4:83:3b:db:04:9d:75:
         f2:49:06:02:62:ad:7a:4d:aa:a3:e4:1c:fc:00:69:9a:61:1a:
         9f:47:6a:da:1d:04:c4:e4:30:15:6c:f6:5f:cf:e7:d5:0c:25:
         58:b4:4d:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfsLqk2+DMuvChUtkfB0FXPBLPhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGOUY3NUUyRkYyMTlCMkJERDYyNUVCQkMyOTRBOTg5
QkFCMEVCRDAeFw0yNTEyMTkxNjQ0NTlaFw0yNjEyMTgxNjQ5NTlaMDMxMTAvBgNV
BAMTKEU0MjEwN0Y3RjlEMDY4QUMxMUU2QjhDOEI2QzlFNTZBQUE0NzUxNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxs9Cjh/5FUR16MZ32FqMbQJtz
U2kTvht6pE/1N04G+/374xUrmJfrQlV7VQPikoww2FZ/5ThWiT/a916X8CN9zUkN
GGqVWGfV5X4rg6UCE5wnPmn3NCYCSIQsOvP1hcIz63lekxtx2DFE8PmyBOJKkrk8
5lTWscP/u0U9tXjLRXEPJ+ha6E0crCmRq1sAeorn1IEDkftfWqKJAkCoYdNP1XeW
HKVZk36KezooKLNCtX8kmuozMi/zcu1evZKN2jUd2DyPm2sMN5jMz9AgFvWzJquq
JJHlZPLFOulSC6Hudyk3LkVpckUXYqln9bNZrOH6B4RY+TYKX9/kkvVO2fuDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5CEH9/nQaKwR5rjItsnlaqpHUVAwHwYDVR0j
BBgwFoAUsPn3Xi/yGbK91iXrvClKmJurDr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC9CMEY5Rjc1RTJGRjIxOUIyQkRENjI1RUJCQzI5NEE5ODlCQUIwRUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRjlGNzVFMkZGMjE5QjJC
REQ2MjVFQkJDMjk0QTk4OUJBQjBFQkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzOTMwMmUzMTM4MzAyZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzOTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+tIIwDQYJKoZIhvcNAQELBQADggEBAHFbU8Ma
1iI6f+XqnqiEcQd+2HBps3r2V3/G1vwAzCYO/opAFQro0BUFHOj0hwo68lmSMjFe
8eZjKurjqhUjEQbsKBdNWjZTJzi86gEdOVQMC8TYXAMyXzADxGu3jORmu0jVMYr3
7E5VsRSLfyvobHjK3ztBo4ELg5eLJ+5O4KQx2AK0V0+ruL4kMdfZgTOGpWBRqjjj
p0ea+wxDFBEjAjyGjYvzOAS1vAPTWSGvWhYcPjhstjMOFNpTWilliLdwNRAPbFgL
sd1bdGY2NDkJccfSxIM72wSddfJJBgJirXpNqqPkHPwAaZphGp9HatodBMTkMBVs
9l/P59UMJVi0TVE=
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:16:14 2025 by rpki-client