This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          1eru60t2fMSWIuZtuv7EuwxETj+rjBCk3+eh9C3K2Gw=
Subject key identifier:   84:19:65:FF:28:D9:A0:1F:3D:CB:24:B1:2F:00:8B:7A:93:2D:35:09
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       1B185970B8EE3F7EF3599232E05418CF19564F95
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 19 Dec 2025 16:50:03 +0000
ROA not before:           Fri 19 Dec 2025 16:45:03 +0000
ROA not after:            Fri 18 Dec 2026 16:50:03 +0000
asID:                     52930
IP address blocks:        190.180.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:18:59:70:b8:ee:3f:7e:f3:59:92:32:e0:54:18:cf:19:56:4f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Dec 19 16:45:03 2025 GMT
            Not After : Dec 18 16:50:03 2026 GMT
        Subject: CN=841965FF28D9A01F3DCB24B12F008B7A932D3509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:86:80:d5:36:c8:0b:e2:25:4f:e1:2c:8b:
                    39:e3:b9:93:44:b2:ad:b6:3f:d3:ea:53:05:75:cf:
                    12:36:19:ac:fa:8f:a9:f5:1f:b6:98:3c:3c:fb:81:
                    43:3b:24:fb:73:25:a0:bb:b4:cc:05:ab:27:ff:2c:
                    40:22:ef:c5:45:ed:9c:d6:3a:74:ed:e8:46:7d:88:
                    f9:94:60:0e:a1:26:c2:a1:ff:e3:76:20:92:a5:7f:
                    92:ab:80:0a:4a:b4:d2:57:b4:94:82:88:68:62:9f:
                    54:37:02:02:95:8c:94:ae:23:72:cf:e0:89:6d:9b:
                    a2:eb:9d:b5:61:64:06:6c:4a:68:2c:0a:d7:ef:a3:
                    46:11:56:a1:e5:fc:fd:17:a0:09:ec:a7:0b:1e:35:
                    56:ed:63:3e:7c:7d:e1:e9:cc:1d:5c:53:73:49:79:
                    9c:d5:8e:49:85:ee:fb:79:b1:eb:d8:ba:c4:ec:64:
                    2e:cb:ae:f8:5a:c7:b3:91:35:db:ee:40:e1:c3:36:
                    9a:d6:ba:18:17:31:93:64:6e:96:5a:80:92:8d:d7:
                    d3:85:4b:2d:89:c0:78:e8:34:2a:70:c8:aa:87:c3:
                    71:95:86:38:9e:8d:aa:e5:51:81:d7:7c:35:24:a6:
                    4f:bd:d2:cf:89:d0:9a:18:59:f6:95:1c:12:e4:e9:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:65:FF:28:D9:A0:1F:3D:CB:24:B1:2F:00:8B:7A:93:2D:35:09
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:4f:82:10:b2:b0:93:de:49:8d:2b:4e:7e:39:79:f5:96:
         25:40:b1:de:2f:78:b6:84:40:cc:11:5f:78:d1:7b:28:be:42:
         9f:54:d6:cb:c3:f0:eb:34:45:c8:41:fc:cb:c9:64:de:e0:e8:
         86:e8:7b:45:eb:41:9e:4d:a5:9b:75:eb:af:5d:2b:c4:c4:54:
         28:25:40:1f:41:25:2f:1c:64:71:d4:43:2d:8c:4e:67:da:07:
         4d:87:93:d2:9a:19:02:bb:71:95:46:1c:fc:ce:34:f3:7b:3f:
         d3:1b:e0:07:8e:07:7c:ae:97:0c:f6:19:3e:4d:74:3c:43:58:
         9b:b5:bf:ae:4c:fa:65:bf:9a:dd:3b:77:fd:6c:49:1b:6a:38:
         1f:c3:02:66:de:d3:cf:e6:82:0f:da:6d:7b:dc:07:17:b3:b8:
         3c:b8:46:1b:14:8d:b3:39:7a:66:4c:0f:7e:11:8b:97:52:a6:
         83:0e:00:3e:c8:0b:de:81:3c:a1:70:86:72:c6:9e:31:20:7d:
         54:9a:a2:f0:de:21:a1:c8:36:67:c8:38:d0:23:e1:e5:14:22:
         c6:71:bb:7f:4d:9e:1a:40:ed:82:d2:d7:2d:ec:2f:80:a0:7e:
         a6:ce:04:df:45:11:14:7c:a5:98:6a:4a:08:19:cd:b7:9e:fe:
         71:90:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:59:48 2025 by rpki-client