This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
File:                     3230302e3139322e3130382e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          t5aRNzeVFMjJ4cuBVez5iqIBkQQ2xvnBYryKkDeLGGY=
Subject key identifier:   A6:C0:F0:3B:0C:5F:46:DD:8E:33:C7:05:BD:3E:0E:39:2E:B8:52:05
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       4D95697F1D0FEB0BE1B166AD6155F5B9C5AB6248
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
Signing time:             Tue 09 Dec 2025 20:01:52 +0000
ROA not before:           Tue 09 Dec 2025 19:56:52 +0000
ROA not after:            Tue 08 Dec 2026 20:01:52 +0000
asID:                     0
IP address blocks:        200.192.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:95:69:7f:1d:0f:eb:0b:e1:b1:66:ad:61:55:f5:b9:c5:ab:62:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:52 2025 GMT
            Not After : Dec  8 20:01:52 2026 GMT
        Subject: CN=A6C0F03B0C5F46DD8E33C705BD3E0E392EB85205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:40:73:cb:fd:99:e1:d0:9d:73:2d:eb:49:
                    ba:95:2a:cf:e0:42:06:dd:ad:d5:8f:a0:d6:37:3f:
                    95:d6:45:e7:0b:c1:83:97:88:fc:35:60:51:c4:75:
                    89:21:b7:75:bc:e9:0d:89:23:0a:14:a0:23:be:ba:
                    34:b7:be:98:03:56:3f:d4:a7:28:cd:b8:05:cf:0b:
                    67:9a:58:3e:72:1f:54:ed:f0:7b:f1:b8:b0:03:84:
                    16:ee:33:43:8c:6f:b5:a4:87:e9:40:d8:a6:76:b0:
                    09:33:4d:55:d5:81:0d:55:0f:7a:8e:ce:11:59:54:
                    9e:46:f5:f5:8c:f6:6e:2b:6f:bc:c3:33:58:62:0b:
                    7a:2b:8d:51:db:be:a0:b6:ba:ad:2c:48:70:37:27:
                    ad:17:24:65:ca:5c:1c:7d:e1:3e:50:07:0e:ae:04:
                    e2:62:17:7c:5b:a4:d9:d2:64:1e:0d:58:b2:c3:75:
                    eb:39:de:01:93:16:ff:60:0d:2f:22:f1:81:28:9e:
                    17:2b:3d:07:50:70:ee:1b:dc:34:12:44:a9:3e:27:
                    0e:36:24:11:62:4c:b1:66:06:32:2f:ea:86:f3:f4:
                    72:69:14:d7:e3:91:d8:da:f0:b2:be:96:ac:73:1a:
                    b3:5d:53:d6:b8:17:24:01:eb:67:cd:7d:6e:d7:56:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C0:F0:3B:0C:5F:46:DD:8E:33:C7:05:BD:3E:0E:39:2E:B8:52:05
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:cc:ba:93:e9:09:20:3f:53:c4:0d:99:ea:e2:58:20:66:
         1b:a5:f4:20:d2:c4:d7:35:bc:a5:f0:f6:32:bf:fc:bb:18:79:
         23:22:36:52:d1:1d:3f:24:f6:03:a3:34:63:89:bb:f2:4e:0b:
         cd:46:c3:d3:a7:b6:44:90:cc:6f:6b:42:34:34:ff:fd:90:d2:
         1e:37:1b:80:50:7c:0d:4b:7f:3b:ec:49:78:9d:ff:ae:ce:b4:
         6e:62:03:bd:88:3e:3d:e5:2b:f0:26:73:c6:7a:23:d0:9e:9f:
         77:2d:fe:81:20:29:ab:33:84:8b:33:8d:3b:0e:51:84:d8:ee:
         76:af:42:8f:59:68:ea:9f:e2:f8:30:56:53:27:38:6a:ad:77:
         3b:29:df:02:91:97:13:bc:f2:f9:2a:57:76:5e:0a:b7:08:0d:
         ad:83:44:83:4a:e3:47:8f:24:f9:12:d2:60:00:29:1f:10:37:
         4f:75:fb:51:43:71:d5:f0:a4:58:62:6a:6b:3c:b3:02:6a:af:
         fb:2f:4a:29:e8:82:8f:87:b3:af:68:15:38:9e:fd:40:11:69:
         d2:c2:09:5c:42:86:07:fe:c4:b1:6f:87:10:38:c3:1b:05:b0:
         66:a4:5b:8a:00:c8:57:58:b3:15:e9:01:c3:97:05:c2:7a:ef:
         01:96:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:04 2025 by rpki-client