This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133382e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133382e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          bZSTJ57jK95iI0YxqUL5dgSSKnHOg4JeCmtaiLhj3TA=
Subject key identifier:   0D:58:14:0D:4F:4A:92:70:65:94:73:22:43:E2:84:4C:61:DA:C7:1E
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       1E91A35DD0A555653612BA908FAB8ABD46EBD22F
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133382e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 19 Dec 2025 16:50:01 +0000
ROA not before:           Fri 19 Dec 2025 16:45:01 +0000
ROA not after:            Fri 18 Dec 2026 16:50:01 +0000
asID:                     52930
IP address blocks:        190.180.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 14:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:91:a3:5d:d0:a5:55:65:36:12:ba:90:8f:ab:8a:bd:46:eb:d2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Dec 19 16:45:01 2025 GMT
            Not After : Dec 18 16:50:01 2026 GMT
        Subject: CN=0D58140D4F4A92706594732243E2844C61DAC71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:ee:a5:b9:1a:6c:14:0f:af:66:4d:c9:00:
                    c5:05:a1:0e:ab:b4:90:8f:58:36:97:73:af:d5:4c:
                    73:3e:bf:5b:68:39:36:fe:58:ae:3c:f5:54:b4:a4:
                    8d:9d:59:e9:61:86:ce:fe:20:66:3f:aa:3b:f0:6b:
                    f3:4b:a9:8c:b0:5f:f8:bd:c9:14:3f:59:54:b4:b2:
                    8a:3b:56:48:83:13:31:71:17:43:49:60:2a:a0:37:
                    a7:30:29:31:67:e0:7f:de:34:ab:a2:f0:0f:37:9f:
                    20:75:65:0a:b7:54:80:f7:07:c7:cf:14:3e:e6:ec:
                    74:e9:72:59:43:d5:6d:6c:30:14:4a:7d:8b:af:0f:
                    53:1a:ad:70:43:80:fe:94:22:a7:36:65:9f:3b:3f:
                    de:f9:ab:42:5b:40:69:3d:57:6e:6f:2d:ee:ec:bb:
                    7f:06:86:ca:f6:ee:c3:14:38:b8:5a:1d:a2:b1:6f:
                    07:58:38:78:8c:75:3b:8d:2c:06:9a:a8:a5:d5:61:
                    11:f9:56:f9:fb:1e:50:c1:b6:b5:8d:f4:fd:34:44:
                    32:75:22:cc:c5:19:79:89:52:d7:c7:0a:af:74:a3:
                    9e:82:66:89:4f:03:6a:f5:ae:e7:50:aa:19:80:89:
                    f0:10:66:90:0d:ff:ec:f0:f8:18:44:47:9a:f2:98:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:58:14:0D:4F:4A:92:70:65:94:73:22:43:E2:84:4C:61:DA:C7:1E
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133382e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:91:f3:13:5a:c3:45:5e:03:cf:bf:ce:54:d8:43:9b:31:
         b2:41:13:f5:22:02:44:d6:8d:83:65:a4:39:5e:97:21:4f:7c:
         c8:70:69:48:4e:27:78:eb:f7:c5:58:63:84:e0:f4:b8:cd:b4:
         ba:94:5e:4a:eb:94:66:97:b4:70:a9:2d:4d:63:ec:5d:4f:1b:
         2d:02:f2:1c:c2:13:bb:55:01:e4:f4:5e:a7:a9:09:6f:bb:85:
         a0:12:0a:24:97:e2:70:0b:3a:36:31:5e:8f:cb:82:cf:0a:ce:
         32:8e:d7:0f:92:60:2f:99:3f:8a:ec:51:28:25:5b:ab:5a:55:
         9f:fd:67:46:c7:38:7e:ce:6b:62:12:36:d8:cb:98:9e:23:02:
         25:37:cd:e4:b4:d6:20:96:54:a0:83:8a:82:5e:75:29:25:2c:
         51:ca:58:db:a2:50:fd:2a:6f:38:cd:d0:58:4c:a5:84:af:01:
         23:50:89:e1:9f:f4:c1:62:b4:83:59:8b:ec:85:26:ac:3c:5f:
         2d:6c:00:d0:5d:ce:ac:d6:12:11:f9:76:d1:95:5a:ef:ed:09:
         83:78:63:28:1a:ba:3d:ba:02:a6:ce:e1:9e:29:82:d9:8d:02:
         e4:b2:fe:4c:5b:12:86:e3:9a:00:02:9f:10:45:89:37:aa:26:
         2b:d3:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:15:47 2025 by rpki-client